Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/4552c1c46eab08f4f789dfbd4af9fc3042e5b5c5.roa
File:                     4552c1c46eab08f4f789dfbd4af9fc3042e5b5c5.roa (raw, json)
Hash identifier:          wg0Bzjaf/SutXNdChroH6eT1bVfPjlJ1tNnfMqULEkw=
Subject key identifier:   43:E8:14:C1:E5:D0:B3:D9:24:DC:BC:D0:4B:49:A0:E0:48:55:C8:F6
Certificate issuer:       /CN=921f2e6e5335910c2c656fdf12745b76681e6741
Certificate serial:       03F8
Authority key identifier: D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921f2e6e5335910c2c656fdf12745b76681e6741.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/4552c1c46eab08f4f789dfbd4af9fc3042e5b5c5.roa
Signing time:             Mon 11 Dec 2023 23:00:03 +0000
ROA not before:           Mon 11 Dec 2023 23:00:03 +0000
ROA not after:            Thu 11 Dec 2025 23:00:03 +0000
asID:                     0
IP address blocks:        2801:c4:95::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921f2e6e5335910c2c656fdf12745b76681e6741
        Validity
            Not Before: Dec 11 23:00:03 2023 GMT
            Not After : Dec 11 23:00:03 2025 GMT
        Subject: CN=4552c1c46eab08f4f789dfbd4af9fc3042e5b5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:18:4e:d5:7c:f7:2d:1a:7d:06:2a:ea:72:
                    99:de:cb:f7:23:c3:5f:69:20:75:ff:0a:74:b1:ab:
                    45:4b:d6:b8:b1:76:f4:77:0e:7c:7b:90:96:2b:73:
                    27:f4:01:2f:7b:25:e8:0b:5c:d3:df:6e:19:59:52:
                    1e:e2:3f:88:eb:fe:6c:ca:2d:bb:8c:cf:88:2a:f2:
                    d6:e1:10:2b:4a:17:16:41:87:65:de:dc:e6:20:30:
                    8e:66:53:5f:cb:b8:e1:32:60:b9:5b:b4:f9:cc:3b:
                    5b:9e:5e:fe:cc:a9:14:15:cd:72:54:04:0f:ba:05:
                    a5:63:6c:b5:e5:d4:7d:c0:84:59:f8:82:32:1f:6d:
                    13:e4:15:63:5f:5d:b1:05:bb:d9:3e:b5:aa:db:8c:
                    89:d5:91:04:fa:80:f3:1c:e9:8d:14:e6:84:83:1e:
                    a6:31:42:af:d6:76:49:5e:0a:26:79:1a:67:d6:51:
                    fe:30:bc:ae:3f:7c:94:da:c1:40:60:66:e9:f2:d9:
                    21:b5:05:b7:fe:70:be:ab:4f:aa:bf:b5:c4:ca:d7:
                    2b:d7:e1:18:a4:e7:4c:91:36:f2:bc:6a:35:6a:84:
                    21:8a:9c:82:b8:3f:9b:3b:58:1d:6f:fd:66:5c:db:
                    b2:9f:b8:26:09:06:e1:d2:66:f0:6f:e2:77:85:f5:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E8:14:C1:E5:D0:B3:D9:24:DC:BC:D0:4B:49:A0:E0:48:55:C8:F6
            X509v3 Authority Key Identifier:
                keyid:D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921f2e6e5335910c2c656fdf12745b76681e6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/4552c1c46eab08f4f789dfbd4af9fc3042e5b5c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/921f2e6e5335910c2c656fdf12745b76681e6741.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:f6:0e:e5:8e:7e:2e:69:c2:40:15:8d:ae:ac:7f:00:2a:
         bd:84:f1:92:a1:5c:c8:4a:ba:13:e3:ee:49:7d:cb:8f:ff:8b:
         fe:9c:a7:0e:aa:b2:a0:20:db:0d:e9:98:4e:e8:fb:46:ed:4d:
         87:89:f6:70:23:76:f9:2d:c2:a2:f0:00:98:02:a4:8c:ff:f6:
         d6:15:e7:5b:c3:6e:82:9c:f7:9f:85:49:85:f3:7d:64:16:0c:
         4f:6c:09:49:6d:f7:07:24:c9:35:22:77:b1:8f:c0:6a:61:6c:
         55:67:44:06:79:8a:d6:7d:37:b3:10:e3:41:ba:30:87:23:9c:
         4a:9b:30:cc:4c:48:6d:3e:10:93:42:41:70:19:50:fb:0f:f3:
         25:d6:ba:be:f8:4f:26:ef:a6:a8:fc:fd:bf:5d:d9:c4:ea:58:
         f9:32:53:d7:4c:b2:c6:26:b8:f9:0f:91:09:d5:e6:5d:d2:c5:
         24:68:58:6e:9b:37:25:07:76:58:00:99:38:62:54:62:3f:8b:
         5e:71:62:b9:82:88:b5:f7:6b:da:cf:f8:d5:63:0e:cf:89:4d:
         21:ff:a6:39:ec:b8:f0:4e:f0:f7:fa:30:b3:5c:9b:6e:a4:3d:
         c3:9a:38:15:23:89:40:b2:e3:80:6a:9a:48:2f:c7:ad:5d:bf:
         90:fa:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----