Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b9bed318366bf24c816e0ff39641af7fb5196c8d.roa
File:                     b9bed318366bf24c816e0ff39641af7fb5196c8d.roa (raw, json)
Hash identifier:          DCYUDCqHUuGCSsY3mdGuwB5GKbFtqr7Zyq46OhsomD4=
Subject key identifier:   1E:E1:81:8D:C4:2D:22:8A:A6:F6:F6:09:92:FB:E9:72:EF:A8:36:66
Certificate issuer:       /CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
Certificate serial:       16665C
Authority key identifier: 64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b9bed318366bf24c816e0ff39641af7fb5196c8d.roa
Signing time:             Fri 05 May 2023 21:25:10 +0000
ROA not before:           Thu 04 May 2023 21:25:10 +0000
ROA not after:            Mon 05 May 2025 21:25:10 +0000
asID:                     28000
IP address blocks:        2800:700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467996 (0x16665c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab7504ada349e4ed5816cfb2531293bf4331b7
        Validity
            Not Before: May  4 21:25:10 2023 GMT
            Not After : May  5 21:25:10 2025 GMT
        Subject: CN=b9bed318366bf24c816e0ff39641af7fb5196c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:80:ab:82:a5:a2:2a:da:fc:12:46:af:62:
                    9d:7c:99:fd:e5:36:c8:d8:6d:9a:b5:c0:43:7f:18:
                    3a:37:7f:ce:b5:b1:48:71:26:f0:a0:ab:cb:9b:d9:
                    e7:bc:eb:be:ea:9c:a6:28:25:c8:64:e0:a2:c7:e8:
                    1e:68:77:78:6f:80:ea:c1:fc:39:aa:2c:78:dc:ab:
                    4e:6d:85:06:47:7a:86:8b:2d:5f:0a:3c:32:1b:2c:
                    79:60:81:64:9b:dc:c1:84:47:4c:32:8e:ad:05:9b:
                    9b:d3:cb:2a:e9:8d:e8:cf:4b:40:76:60:c4:18:40:
                    c9:c4:fa:8b:2c:b5:5f:5d:6c:18:7a:37:22:88:20:
                    44:b5:45:7d:b1:05:7d:fb:16:3d:e0:31:50:e3:9e:
                    4a:a8:85:17:c4:61:99:18:f3:83:b0:0b:5b:cd:3a:
                    af:0f:67:73:1e:6c:10:e4:96:8d:b2:b6:43:6d:90:
                    35:f9:b0:a3:c1:ad:bd:02:bc:e0:f0:96:7d:54:1b:
                    b6:8f:d2:61:df:83:cf:2e:42:59:fd:07:b6:97:e4:
                    d9:c4:78:33:bb:77:6a:c5:e5:bd:4c:71:9d:e3:6a:
                    45:18:a1:94:a3:3b:14:e2:12:7f:07:ab:49:b2:c1:
                    df:8a:28:11:fc:36:60:52:1f:ac:44:f5:4a:4b:81:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:81:8D:C4:2D:22:8A:A6:F6:F6:09:92:FB:E9:72:EF:A8:36:66
            X509v3 Authority Key Identifier:
                keyid:64:86:0D:4F:6C:C0:F9:A1:DB:0B:C9:45:B4:99:E6:01:F2:13:27:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ab7504ada349e4ed5816cfb2531293bf4331b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b9bed318366bf24c816e0ff39641af7fb5196c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/15ab7504ada349e4ed5816cfb2531293bf4331b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:dd:f7:ba:39:da:06:8d:d6:e5:e9:ba:9f:23:b7:db:0b:
         53:42:bc:da:cb:12:90:0e:cd:3b:28:18:04:30:67:5c:4f:c3:
         48:9b:b0:9b:ee:38:86:91:2f:48:9c:84:9d:b0:64:35:20:68:
         fa:29:8f:d5:4c:4a:be:7d:0b:6d:6b:19:76:9b:b8:44:5c:bf:
         23:4b:f9:db:88:15:1d:6f:4b:d8:17:aa:72:9e:cf:be:2f:05:
         32:ef:bc:68:06:fd:e3:dc:9b:58:10:d2:eb:39:32:26:b7:90:
         fd:a6:c0:c1:33:37:7a:ac:75:eb:8f:a4:09:4d:98:b9:6d:47:
         02:65:c3:cd:da:55:b1:49:a0:54:cb:d3:1f:d1:68:9e:07:5f:
         04:af:ea:4e:1c:80:ca:a5:0c:2c:e8:88:76:5b:4d:bf:aa:60:
         3b:15:94:06:3f:cd:7e:2c:88:1e:ac:5f:ea:91:d4:79:6a:2d:
         8e:65:63:09:1a:d9:59:c7:6e:bf:e5:1e:fe:73:a9:83:65:d0:
         0f:14:4b:19:5d:74:9c:0a:7f:4a:12:52:53:58:1e:86:92:75:
         32:0c:79:47:95:7b:13:06:e0:2d:15:8b:bd:b7:ab:dc:ce:3c:
         ff:de:24:d9:2f:a3:cb:b2:16:30:73:90:f4:be:bd:0a:80:c8:
         8b:41:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----