Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/1f7bdff90c287711de09f28707af18ecad6e1b93.roa
File:                     1f7bdff90c287711de09f28707af18ecad6e1b93.roa (raw, json)
Hash identifier:          Wu9TtO3i1qI11Twterq1HDYWx1xKpO+ldXRWuU1aqdY=
Subject key identifier:   6A:F4:08:7F:BB:0F:68:AF:F2:36:A2:9D:A2:69:88:40:E5:CD:66:CB
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       215E42
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/1f7bdff90c287711de09f28707af18ecad6e1b93.roa
Signing time:             Mon 17 Apr 2023 13:14:11 +0000
ROA not before:           Sun 16 Apr 2023 13:14:11 +0000
ROA not after:            Thu 17 Apr 2025 13:14:11 +0000
asID:                     3573
IP address blocks:        2801:1f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186818 (0x215e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Apr 16 13:14:11 2023 GMT
            Not After : Apr 17 13:14:11 2025 GMT
        Subject: CN=1f7bdff90c287711de09f28707af18ecad6e1b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:8d:48:a8:57:08:b3:bd:dd:f8:83:fb:73:
                    cd:71:da:47:a2:27:1f:4d:a1:6a:c7:d4:b5:74:d4:
                    55:2e:ef:77:45:51:2c:b7:87:38:72:60:bd:38:39:
                    c2:4a:ab:05:5c:b2:1e:43:7c:ab:bf:3c:a4:c5:c6:
                    34:9c:e9:5d:c5:09:80:f8:03:29:14:16:3b:6e:2a:
                    16:5b:29:ea:79:5c:f3:a1:e3:99:18:ef:35:f6:5f:
                    0d:7d:22:01:8d:e6:21:b5:90:35:25:eb:78:32:a3:
                    4c:54:ab:fb:66:89:ed:18:2d:c5:7c:f0:62:01:08:
                    35:e8:5b:1b:23:20:40:d0:71:22:ed:61:40:1e:ac:
                    34:93:21:d8:bf:dd:c5:38:e1:f4:d4:83:b9:df:21:
                    51:3e:64:b4:11:0f:9f:a9:36:d7:6a:26:b6:25:c0:
                    5b:ec:10:b7:2b:61:7f:f7:34:81:bc:fc:ce:c6:88:
                    9a:4f:6f:ee:76:87:2b:e9:15:4f:00:92:10:4e:d8:
                    05:16:ff:2d:77:95:4e:4e:6c:61:c6:2a:90:4c:f5:
                    d8:57:3f:61:ae:d0:9e:cf:fd:bb:8c:fb:76:67:fa:
                    0e:ae:ce:36:0c:4f:62:79:1a:17:bb:2d:90:2a:1a:
                    52:7d:48:07:b0:2a:3c:cf:7b:66:f4:47:00:21:79:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:08:7F:BB:0F:68:AF:F2:36:A2:9D:A2:69:88:40:E5:CD:66:CB
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/1f7bdff90c287711de09f28707af18ecad6e1b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:c0:d3:55:87:f1:be:07:b5:3b:c3:bd:22:d2:b3:1d:4e:
         06:67:b3:5c:bf:55:85:df:a6:bc:73:7e:b5:03:19:4c:65:32:
         41:0c:33:86:9d:20:96:dd:38:ed:ec:71:15:0f:f8:a0:9f:f7:
         aa:04:55:42:f1:bf:cb:99:8f:5f:58:7e:16:dc:27:8d:42:fe:
         b6:2d:06:43:43:d0:71:1a:67:5e:35:a3:09:38:e7:af:d8:a9:
         3d:5c:26:80:0d:f2:08:e3:cc:85:2b:16:23:71:6b:67:14:c2:
         22:2b:c8:56:f6:01:96:72:de:8a:d8:96:5c:18:04:2b:46:5a:
         f1:b3:b6:b1:dd:61:1b:d3:4c:6b:4b:d0:aa:36:8c:e8:d0:5f:
         7f:d5:6f:28:45:f4:e0:7b:2f:59:20:64:be:da:e7:27:93:37:
         d2:90:d8:47:72:0d:f3:0f:9a:f4:77:61:8d:f9:f7:6e:88:4e:
         d5:17:e7:e4:32:29:cb:cb:51:e3:94:a4:8d:70:be:00:d6:3a:
         ae:a3:f4:1d:dd:af:66:8e:7a:d9:7d:22:6a:02:6d:a4:ea:b7:
         0c:2c:fa:16:2a:db:98:a2:73:67:75:ed:eb:cc:d2:30:d6:27:
         e7:0b:41:53:95:d7:23:d3:c3:ca:b2:14:29:6b:2e:2d:e1:04:
         12:b0:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----