Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/1af84dc1593c550cef5e89837f111d68554aff9a.roa
File:                     1af84dc1593c550cef5e89837f111d68554aff9a.roa (raw, json)
Hash identifier:          BtqfQ3/3b1YdQ+RD+w3jg8qGaGKlwX0yYilYQUWNkno=
Subject key identifier:   FA:BC:55:36:3F:FD:E7:31:0A:67:F4:7F:EA:4D:7C:0C:93:3B:C4:F0
Certificate issuer:       /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial:       35FF
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/1af84dc1593c550cef5e89837f111d68554aff9a.roa
Signing time:             Sat 07 Oct 2023 21:14:51 +0000
ROA not before:           Fri 06 Oct 2023 21:14:51 +0000
ROA not after:            Tue 07 Oct 2025 21:14:51 +0000
asID:                     28435
IP address blocks:        2806:366::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13823 (0x35ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
        Validity
            Not Before: Oct  6 21:14:51 2023 GMT
            Not After : Oct  7 21:14:51 2025 GMT
        Subject: CN=1af84dc1593c550cef5e89837f111d68554aff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:22:3b:e8:c4:d0:fd:b1:98:9a:5c:e1:64:
                    de:4f:cc:30:20:15:78:1c:55:94:f0:0d:b2:eb:e0:
                    3e:38:68:31:1d:33:d8:c4:b7:2b:a4:3c:61:0d:8c:
                    84:ce:7e:04:25:74:6d:fd:24:99:4d:bc:9e:e1:f2:
                    10:a3:72:0a:44:56:2e:d9:17:ac:2a:35:f6:c4:88:
                    f1:8c:24:e4:cd:60:a0:15:9e:52:12:24:6e:cb:03:
                    df:9e:d3:9f:e0:ea:68:f1:4a:07:13:e4:a2:6e:94:
                    c0:2f:bf:cf:fa:b3:66:a0:74:67:58:e8:9d:59:20:
                    1b:31:57:66:47:aa:a9:c4:75:6c:85:5c:1c:c9:c7:
                    9f:67:08:5f:cf:8d:4b:4b:0c:60:a2:f1:d5:43:4a:
                    51:30:fc:37:d7:77:e6:21:19:26:65:ec:5d:ae:61:
                    2c:1a:cd:13:ff:af:5a:4d:53:90:1e:3b:e5:88:ca:
                    a8:8a:7b:f8:61:1a:07:c5:49:38:9f:75:d9:64:c7:
                    75:ad:3c:7b:34:64:a9:f3:5d:08:55:90:32:de:bf:
                    fe:d4:40:3c:fe:af:0e:e9:13:11:27:bb:da:2f:b7:
                    21:7b:be:54:60:bb:e9:6e:d4:0f:c5:fd:51:09:d5:
                    9f:34:1c:46:19:48:7d:3a:b0:bf:c9:ca:31:3e:9b:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:55:36:3F:FD:E7:31:0A:67:F4:7F:EA:4D:7C:0C:93:3B:C4:F0
            X509v3 Authority Key Identifier:
                keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/1af84dc1593c550cef5e89837f111d68554aff9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:ba:d7:8a:8f:75:c4:3b:78:0e:22:67:35:98:f0:de:da:
         96:28:cf:0c:d6:ba:94:bf:2f:c2:72:02:b5:7b:e7:4d:c1:af:
         b1:3d:20:32:cc:7f:6a:88:fc:ba:c1:3f:e1:d4:bc:fd:54:f6:
         fa:a1:ab:bc:f9:e2:57:b0:f4:67:78:6c:e4:42:0e:78:49:c9:
         d3:fc:16:aa:a3:5e:78:04:2e:0c:1e:63:74:f3:4f:77:67:6f:
         2c:38:63:b3:61:37:b7:83:07:14:6a:3f:0a:e6:94:a7:e2:0c:
         1e:16:ff:20:56:d1:cf:af:20:20:66:c3:d1:a7:b2:33:10:96:
         5d:d3:9b:b2:60:f1:08:f9:06:5a:0f:65:6f:83:d1:0b:44:0d:
         80:15:db:56:97:61:5c:97:ee:c0:77:f8:16:aa:6c:4a:a3:66:
         88:41:ce:84:57:41:24:38:e0:c8:6d:01:3f:7b:0d:31:3b:61:
         e9:ee:06:5f:e7:fa:c0:80:82:d9:0c:7f:9f:18:25:6f:c6:ce:
         ea:36:4a:e1:21:d6:7a:c2:dd:80:2a:48:55:7c:d1:f1:9a:1f:
         21:d4:86:d7:a9:ea:50:30:49:ff:d1:e3:71:5a:68:7b:11:6d:
         75:a5:78:b2:48:02:f2:de:54:bd:01:c6:7e:56:d7:5c:d2:91:
         3f:a1:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----