Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/42e27ee9b44a525b1fefcc6e465a75b823703b57.roa
File:                     42e27ee9b44a525b1fefcc6e465a75b823703b57.roa (raw, json)
Hash identifier:          dwiKm866nJljEOUq1VLiL0FN3477TxQD3egmBQgUwUg=
Subject key identifier:   2B:FF:17:FE:56:09:20:A9:83:70:7B:17:31:FA:03:D4:DC:8E:3B:5F
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0CAC8D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/42e27ee9b44a525b1fefcc6e465a75b823703b57.roa
Signing time:             Wed 27 Sep 2023 17:37:10 +0000
ROA not before:           Tue 26 Sep 2023 17:37:10 +0000
ROA not after:            Sat 27 Sep 2025 17:37:10 +0000
asID:                     17072
IP address blocks:        2806:2f0:4000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830605 (0xcac8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Sep 26 17:37:10 2023 GMT
            Not After : Sep 27 17:37:10 2025 GMT
        Subject: CN=42e27ee9b44a525b1fefcc6e465a75b823703b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:32:64:ba:68:c6:64:84:1d:b7:49:23:0b:
                    f8:5e:32:67:9d:81:39:68:93:08:ee:45:b5:0c:8e:
                    e2:22:d5:bc:e1:ef:47:30:c2:d2:80:9f:e0:80:5d:
                    f1:21:c6:00:ea:08:63:92:98:2d:ba:98:9a:3a:2a:
                    ee:30:11:db:4b:91:a0:ea:9f:d9:0f:eb:ed:37:d4:
                    a3:22:12:87:e8:d6:11:c5:67:6d:70:15:e2:06:77:
                    e8:a7:40:f7:d6:0c:18:ee:a3:6b:29:c0:74:e4:27:
                    11:60:7a:41:6d:03:91:5f:1c:86:75:7b:c9:31:3d:
                    fb:27:20:3f:fa:72:f1:3d:7b:4c:63:f1:59:c6:2c:
                    79:5b:ef:ba:64:cb:40:8a:08:3f:26:9b:7f:5f:37:
                    3e:aa:9c:80:4e:64:16:69:52:e5:af:8e:45:ba:21:
                    a5:a6:e1:65:66:07:a1:d0:cb:9b:03:5c:fd:66:f1:
                    6e:9a:b3:a0:02:96:c8:3c:13:d0:dd:43:ce:98:63:
                    d3:85:ae:92:19:d4:bd:4a:d0:42:32:28:1e:53:4d:
                    9a:fe:4d:eb:53:50:f1:21:38:91:e8:5d:e7:45:05:
                    02:e3:b0:f6:15:46:a4:d2:a4:e8:9a:e2:b9:b5:63:
                    3f:ee:c0:7b:77:19:40:36:78:a6:e5:c1:93:e1:21:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FF:17:FE:56:09:20:A9:83:70:7B:17:31:FA:03:D4:DC:8E:3B:5F
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/42e27ee9b44a525b1fefcc6e465a75b823703b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2f0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b0:14:f5:32:96:2d:98:cc:d0:6c:76:c0:b4:d8:e5:8a:51:50:
         54:e0:86:f7:bb:bc:60:e7:59:9b:c5:c5:32:bc:5f:14:33:18:
         d8:87:57:cc:70:e4:01:10:eb:41:68:75:0a:e4:35:cc:db:2e:
         8c:7d:87:19:4d:00:24:fc:32:eb:23:9d:34:f1:e5:b7:92:c4:
         3f:75:6e:9c:6b:d4:5d:85:fb:73:0e:d7:c5:91:22:50:9d:40:
         be:8c:a5:1e:c8:87:7b:21:fe:04:f5:78:b3:4a:bd:f9:92:41:
         c6:f1:75:0b:b6:83:7e:06:c1:aa:4c:7c:13:7a:96:7c:f7:64:
         3b:8d:93:0f:6d:cf:9e:42:bf:0f:11:97:98:fd:84:9d:15:c7:
         17:4a:9a:47:a8:76:58:36:af:b3:67:07:d6:48:3f:36:3b:a5:
         9c:b2:6c:52:dd:d1:ea:c8:0d:e4:4b:d8:24:25:17:6b:26:76:
         b5:e0:2a:df:3c:4d:32:75:bb:b8:f5:19:40:43:9c:56:45:ff:
         52:4b:b8:87:50:aa:ec:64:8b:6b:c2:e0:78:11:b4:c2:00:b8:
         3f:c6:c3:49:57:9d:5c:32:16:19:aa:a5:ca:6e:25:3d:35:97:
         f6:24:b8:9c:80:e1:35:f0:7a:58:98:54:d7:09:cb:1a:13:2f:
         8d:a4:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----