Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/211ce26bb616e861155a12fa96e904e0413b2785.roa
File:                     211ce26bb616e861155a12fa96e904e0413b2785.roa (raw, json)
Hash identifier:          /FisceenJ0m4tVTkJVsAlI83+zx7msRRSIC6a0Ir1wk=
Subject key identifier:   83:59:2F:89:A9:13:01:7D:9E:BF:4F:4A:37:8E:93:E8:AB:D1:E1:CD
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0CBB83
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/211ce26bb616e861155a12fa96e904e0413b2785.roa
Signing time:             Wed 27 Sep 2023 18:25:44 +0000
ROA not before:           Tue 26 Sep 2023 18:25:44 +0000
ROA not after:            Sat 27 Sep 2025 18:25:44 +0000
asID:                     17072
IP address blocks:        2806:2f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834435 (0xcbb83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Sep 26 18:25:44 2023 GMT
            Not After : Sep 27 18:25:44 2025 GMT
        Subject: CN=211ce26bb616e861155a12fa96e904e0413b2785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:09:3b:48:40:16:27:91:43:a2:9d:1d:aa:
                    af:e7:cb:c7:8b:b2:fe:87:99:3e:b7:b6:8c:0a:82:
                    7d:54:ce:7d:48:01:83:0f:cf:16:2a:c6:e6:c0:20:
                    55:78:ae:7f:13:6d:3d:33:cd:90:cb:c4:50:0f:e4:
                    04:6d:aa:fa:1f:a3:5f:3b:40:5a:a8:cf:89:96:4f:
                    31:52:39:df:11:62:e5:52:9b:f1:ee:bc:67:65:ae:
                    7b:83:45:b4:be:70:d0:60:fa:31:f1:b9:40:b0:0b:
                    80:ce:f3:59:b4:74:ea:19:a2:3e:4f:08:3b:2c:00:
                    6a:20:00:e1:e4:0c:c4:9d:c0:90:4f:6d:cd:5e:8e:
                    0f:35:dc:8a:fc:4e:d7:66:40:f1:39:91:85:e3:ee:
                    e1:42:f5:56:e8:ba:35:f6:6f:13:36:77:dc:bf:cc:
                    80:c1:87:79:c7:ff:26:96:c6:49:43:cf:01:71:cd:
                    cc:f1:1c:b2:2a:af:34:2b:b4:f3:ac:42:e7:92:12:
                    10:dd:d1:ba:2b:8b:d0:92:52:63:68:bd:de:7f:c6:
                    d8:07:5b:1e:f9:ab:ae:ae:4a:2a:82:50:4e:d9:a9:
                    57:e7:c9:2d:55:e2:ff:98:90:87:b0:92:e9:79:90:
                    f1:e5:48:7c:d2:0a:e6:55:14:1c:bc:70:65:25:43:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:2F:89:A9:13:01:7D:9E:BF:4F:4A:37:8E:93:E8:AB:D1:E1:CD
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/211ce26bb616e861155a12fa96e904e0413b2785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:9e:4d:b7:e2:ef:72:a3:39:a4:0b:5c:b0:8d:80:fb:60:50:
         e8:18:07:d7:bd:0d:8e:81:19:54:26:fc:39:59:11:f2:ae:d1:
         79:19:cd:fb:e5:f8:77:b1:a4:f9:a1:4b:70:36:af:44:33:33:
         55:8a:07:ce:b1:8e:ec:73:82:c2:74:02:d0:c0:0b:96:21:f9:
         f0:5b:a2:af:22:f8:dc:94:98:74:c8:b4:24:e8:2f:db:99:bd:
         64:b7:e8:16:14:37:56:df:eb:b9:1b:f2:38:97:ea:45:2e:43:
         79:d4:4a:b5:3b:c6:cd:3b:5b:dc:01:47:d2:43:91:5d:3d:85:
         1d:00:cd:50:cf:06:e0:eb:fc:c6:4a:27:19:06:11:4a:44:64:
         3e:20:92:26:6e:e9:48:72:a7:72:85:5e:ab:95:6d:34:62:d6:
         88:34:b5:b3:47:8b:1a:1e:e1:a6:73:d4:33:0b:18:c4:d2:fc:
         60:b6:8a:70:88:49:51:f4:d1:f0:a0:56:83:e0:33:e1:20:70:
         71:69:52:27:e0:80:8f:e9:9b:66:3c:7c:49:fa:c9:37:55:9e:
         ec:d3:6e:17:65:b3:37:1c:a2:8c:3e:d9:0c:e9:f2:b2:b6:e2:
         5f:b8:11:11:89:06:a2:47:29:b0:2a:a3:60:7b:11:0e:ef:1c:
         f8:6b:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----