Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f6df85b4642c09f52fc03fb5af298c99a243580.roa
File:                     4f6df85b4642c09f52fc03fb5af298c99a243580.roa (raw, json)
Hash identifier:          N4vz5Cl8mAsKQfMkug0M552UMOe6m8uHA5SMbjy9HGo=
Subject key identifier:   82:80:21:0B:BA:7A:CF:D7:12:21:1E:57:95:34:5A:5C:79:1A:26:FE
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       05E0DB
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f6df85b4642c09f52fc03fb5af298c99a243580.roa
Signing time:             Thu 19 Oct 2023 12:45:22 +0000
ROA not before:           Wed 18 Oct 2023 12:45:22 +0000
ROA not after:            Sun 19 Oct 2025 12:45:22 +0000
asID:                     16629
IP address blocks:        2800:590:2000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385243 (0x5e0db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 18 12:45:22 2023 GMT
            Not After : Oct 19 12:45:22 2025 GMT
        Subject: CN=4f6df85b4642c09f52fc03fb5af298c99a243580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:d8:19:bd:32:f7:0e:4f:3d:98:1c:2a:3f:
                    b3:20:a7:b1:63:75:20:dd:3e:f5:77:60:41:07:f3:
                    ee:7b:72:50:3a:29:48:cf:73:f4:a8:8c:e0:d5:dc:
                    27:54:29:69:a9:51:a5:7d:5c:21:1f:02:6c:06:b8:
                    2e:eb:ed:d4:66:2e:0e:80:dd:ec:1d:d3:35:97:3f:
                    15:01:55:7e:82:47:55:b7:b4:d3:90:7b:6b:52:b3:
                    56:6a:e7:ca:b4:1d:7b:ed:1f:47:b6:31:7b:7d:20:
                    29:11:22:ea:94:a3:2a:74:11:ca:94:b2:b4:a7:68:
                    1e:96:83:16:6c:65:e4:eb:61:a4:60:ff:76:f8:1c:
                    cd:e5:83:97:7c:f0:3f:08:b0:a3:8b:5c:57:d8:c8:
                    ab:d2:24:bf:c6:fc:2e:76:41:c1:d0:bd:b5:e0:2f:
                    70:e0:06:1c:a3:50:42:a2:e8:19:c1:4b:4d:94:cc:
                    78:41:e3:73:a1:52:12:66:47:4f:1c:e4:18:ad:91:
                    68:7b:26:3f:86:3f:09:dc:e9:43:79:2f:f0:7a:9a:
                    16:a8:73:16:75:2f:bf:95:8f:e5:0e:61:60:cd:bd:
                    20:5a:84:ac:15:08:f3:e5:14:6a:1d:1b:07:22:fe:
                    6b:ea:22:df:3e:e3:22:8a:97:79:95:70:76:60:67:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:21:0B:BA:7A:CF:D7:12:21:1E:57:95:34:5A:5C:79:1A:26:FE
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4f6df85b4642c09f52fc03fb5af298c99a243580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:590:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:7d:92:78:22:95:6a:c1:c6:39:1d:25:ba:cd:69:a4:29:
         27:9e:ae:bf:ba:15:1a:c1:1f:65:d1:c0:71:a9:56:66:24:8e:
         f5:89:b9:9a:59:2a:a6:86:66:66:d6:36:56:40:9d:6d:bf:bd:
         88:d9:f0:e4:4d:78:3c:7b:5d:a7:62:a4:af:8a:7f:95:68:c7:
         24:a9:d5:b3:7d:7a:9a:54:68:c7:ba:f5:3b:98:3b:8c:f7:66:
         23:e4:24:16:fb:79:42:6b:1d:03:0e:2c:fb:46:7f:9b:be:da:
         8a:42:55:df:26:38:57:db:d3:02:d9:8a:99:e5:49:58:6d:33:
         86:d5:bb:bd:88:32:a6:39:18:46:cb:b9:3e:be:00:ed:f0:dc:
         38:8c:51:ee:ef:82:94:67:ed:27:3c:8e:d8:b8:9d:23:85:f2:
         72:61:2d:8d:53:a0:1b:e6:9f:22:d8:a3:06:51:56:a3:8d:50:
         76:0a:5d:55:9d:e2:e1:e7:eb:cd:75:da:b4:d8:2c:c7:c3:54:
         c2:c1:c3:39:9d:da:54:99:ba:24:ba:6e:1b:3c:29:47:98:5d:
         fe:35:12:7b:60:87:f3:64:46:01:b9:62:b0:20:b0:57:a7:f3:
         55:a2:d6:63:22:e6:e5:66:a1:1e:19:d8:1c:2b:c5:15:5e:86:
         41:c3:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----