Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/cdc57ed0a6af51170658272eb083e3336138a40e.roa
File:                     cdc57ed0a6af51170658272eb083e3336138a40e.roa (raw, json)
Hash identifier:          yuyhNKzc/i1BvWdCPhRGknBxnRpyX1Xj6Ue7+Id/Xic=
Subject key identifier:   91:37:9E:2E:3F:B1:EC:E4:1C:CE:67:90:CF:5B:B7:67:4E:75:F8:D1
Certificate issuer:       /CN=874dd1d8bbfccd0b7a362fbb72654cd64097efa5
Certificate serial:       123495
Authority key identifier: 31:04:4C:1F:85:51:AD:87:C3:CA:38:38:1D:F8:06:4A:0F:8A:0F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/cdc57ed0a6af51170658272eb083e3336138a40e.roa
Signing time:             Wed 10 Apr 2024 08:30:02 +0000
ROA not before:           Wed 10 Apr 2024 08:30:02 +0000
ROA not after:            Fri 10 Apr 2026 08:30:02 +0000
asID:                     19429
IP address blocks:        2801:10:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193109 (0x123495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874dd1d8bbfccd0b7a362fbb72654cd64097efa5
        Validity
            Not Before: Apr 10 08:30:02 2024 GMT
            Not After : Apr 10 08:30:02 2026 GMT
        Subject: CN=cdc57ed0a6af51170658272eb083e3336138a40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:e5:9a:1f:16:b7:a6:46:a9:3f:99:85:29:
                    2b:d8:42:cd:8c:ba:ad:4c:29:38:5c:77:39:57:71:
                    60:e4:a8:d9:9e:67:2b:f6:e1:ea:07:c4:cc:cd:47:
                    e7:47:56:44:7f:d0:2b:1b:e9:9b:c6:ec:f2:aa:d6:
                    32:9b:3d:7a:f6:94:bf:da:74:8f:2d:b2:ee:1c:1a:
                    91:e3:a3:f3:64:b4:91:cc:1e:3b:a9:06:93:19:3d:
                    4a:5b:bb:c0:b7:14:00:8b:c7:f2:f3:77:41:37:be:
                    54:fe:8e:b8:79:5d:7c:ef:4c:de:a7:a7:45:cc:4b:
                    ca:81:4f:28:7d:2b:2b:a8:24:f6:04:27:06:4b:5b:
                    d0:82:34:8c:42:78:36:64:e8:ae:a4:2f:34:7a:a4:
                    db:f2:0a:42:9b:43:2d:d4:f1:59:f0:b6:5b:a9:07:
                    08:f9:d3:3e:97:92:1e:35:36:80:01:03:88:5b:be:
                    f1:a1:f4:28:26:77:3e:18:2d:62:18:38:78:68:e9:
                    34:2d:fb:eb:08:a9:9f:c1:49:1f:a9:dc:4e:2a:6d:
                    65:4c:dc:f1:9f:1f:45:98:03:e1:63:12:21:d0:77:
                    77:44:7b:8a:f8:c5:70:e2:4f:f7:02:70:a1:ed:c4:
                    bf:87:a6:87:fc:69:80:a4:8f:e4:28:08:1e:69:02:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:9E:2E:3F:B1:EC:E4:1C:CE:67:90:CF:5B:B7:67:4E:75:F8:D1
            X509v3 Authority Key Identifier:
                keyid:31:04:4C:1F:85:51:AD:87:C3:CA:38:38:1D:F8:06:4A:0F:8A:0F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/cdc57ed0a6af51170658272eb083e3336138a40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/deddbbd1-f527-46a1-8fc7-02bb3c04f9af/874dd1d8bbfccd0b7a362fbb72654cd64097efa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:29:78:c1:05:05:2f:e2:94:ec:55:2e:6a:eb:8a:44:73:
         bc:ae:f0:c1:b0:fd:50:f1:9a:cb:80:8f:4c:50:63:51:39:79:
         94:1e:ec:bd:9d:64:4d:2e:c8:3c:5e:88:2b:a1:eb:fb:0c:87:
         c8:9d:7d:43:fb:78:eb:36:50:4c:8e:39:f4:b4:23:3e:5e:86:
         bf:61:01:ce:30:be:ad:ff:79:7b:7c:ae:bb:4e:e1:c1:65:ba:
         e2:0d:84:56:6b:84:ea:99:3c:37:7b:a6:c2:75:db:f5:85:6a:
         64:42:29:0f:16:de:09:6d:0e:d3:08:59:ea:4b:09:07:47:25:
         e2:70:14:19:a5:9b:76:b2:3f:50:b8:ae:6d:ef:12:8f:35:cd:
         73:66:0b:db:7c:72:a1:5d:80:1c:ee:97:d1:c3:a5:82:79:89:
         86:99:dd:a4:18:34:4f:94:6c:22:c8:54:fe:b2:04:68:6b:f4:
         d5:2a:0e:b4:9e:36:ab:42:0f:b0:ff:db:7c:e5:c1:54:87:31:
         d4:79:75:db:36:51:2c:89:a8:80:e4:7f:12:c6:ca:e4:50:23:
         a4:5b:c8:42:f0:1d:95:77:7f:9b:2c:7c:bd:70:bd:4e:6a:1d:
         f6:7c:ac:cf:82:60:a8:f3:13:e5:a5:ef:8b:f7:23:fe:d4:d2:
         ed:55:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----