Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/c8c2c98875e14678f18a461430b614e731ce154e.roa
File:                     c8c2c98875e14678f18a461430b614e731ce154e.roa (raw, json)
Hash identifier:          SgCSsBxagLVqMpSnfdfTNHFi/y99vkwovQuef7vGEog=
Subject key identifier:   0F:24:96:8D:F8:23:AC:72:36:CA:61:4A:81:DB:5B:35:81:1D:DC:92
Certificate issuer:       /CN=1bbb16373f011fb2a6d0686c8e6a0569b6ed452b
Certificate serial:       0549
Authority key identifier: 07:81:89:B3:78:B0:66:9B:AB:2E:26:B0:A1:59:12:17:0A:81:96:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/c8c2c98875e14678f18a461430b614e731ce154e.roa
Signing time:             Wed 10 May 2023 20:35:52 +0000
ROA not before:           Tue 09 May 2023 20:35:52 +0000
ROA not after:            Sat 10 May 2025 20:35:52 +0000
asID:                     19429
IP address blocks:        2801:1b:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbb16373f011fb2a6d0686c8e6a0569b6ed452b
        Validity
            Not Before: May  9 20:35:52 2023 GMT
            Not After : May 10 20:35:52 2025 GMT
        Subject: CN=c8c2c98875e14678f18a461430b614e731ce154e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:16:c9:e6:c2:05:f0:0e:f2:25:39:3a:e6:
                    83:2d:ef:73:7e:5d:13:91:e8:2f:a4:ec:a8:a8:6a:
                    34:05:ab:10:f8:96:bc:76:79:0f:3e:1c:82:22:5d:
                    16:b6:ee:e7:bb:f6:af:88:b1:43:8c:7a:88:29:2f:
                    96:35:52:9b:97:84:83:b2:b4:7e:fe:b6:55:32:a9:
                    c9:cb:a0:01:3a:51:5f:fb:9f:4f:41:d0:aa:c7:0a:
                    a8:49:6f:35:5e:c4:69:e2:3d:60:aa:3d:8e:f8:d9:
                    51:57:85:e7:51:9c:6c:60:bd:42:f8:e1:15:65:c9:
                    c8:4c:92:96:41:9b:dd:2e:97:63:23:46:c1:ce:ea:
                    b1:17:de:fc:1e:75:45:fd:10:af:9a:3e:f2:b7:0a:
                    ff:70:cb:72:75:06:c9:1a:0a:93:2f:aa:24:3e:d0:
                    c4:0d:30:4b:39:c1:f9:21:9a:d1:78:a8:84:8d:3d:
                    ec:dd:a3:62:44:8c:a9:56:2c:13:3d:53:b4:e9:13:
                    7c:0f:1f:7e:cb:44:cc:a8:aa:98:c4:29:28:a4:c2:
                    d1:bd:fd:45:60:21:24:e6:38:20:fc:13:05:a6:2d:
                    44:04:75:a3:86:f9:16:58:e3:85:8f:7d:0c:af:0d:
                    c7:e9:10:57:c0:3b:c1:9e:86:10:88:bd:7d:a8:55:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:24:96:8D:F8:23:AC:72:36:CA:61:4A:81:DB:5B:35:81:1D:DC:92
            X509v3 Authority Key Identifier:
                keyid:07:81:89:B3:78:B0:66:9B:AB:2E:26:B0:A1:59:12:17:0A:81:96:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/c8c2c98875e14678f18a461430b614e731ce154e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:18:b7:34:e5:09:dd:48:81:9b:ca:a5:d8:65:38:6f:e1:ca:
         8a:e1:c6:ef:04:c9:05:c7:5c:3e:27:01:6e:e8:56:c6:18:b3:
         48:34:6a:97:c9:0e:e7:3c:e8:b0:65:4c:77:8b:5a:15:12:36:
         27:16:d3:0d:f0:c6:24:01:e8:39:8a:53:cc:a2:b0:71:54:1d:
         f5:bf:f2:3c:6d:d0:66:6f:59:99:ed:83:70:fb:63:9c:86:ab:
         67:46:6e:8e:5d:75:ba:80:7d:82:ed:28:7c:b9:e7:a9:34:b0:
         a2:31:7a:bb:87:70:78:f6:21:57:3e:91:a6:ab:56:de:74:9d:
         dc:f3:fd:5f:37:db:9e:2a:43:36:5e:89:6f:08:b3:d6:96:1d:
         1b:60:90:bd:67:5c:2e:22:73:b7:e2:bc:54:18:d7:c9:f2:7d:
         96:4c:de:c4:a2:ad:5d:b2:4f:c9:00:6f:85:cb:c3:57:61:a1:
         65:57:3e:9a:3a:55:69:22:9f:78:ed:f8:e8:e7:88:f5:1e:a4:
         08:e2:6c:ef:45:ed:37:af:b5:8d:43:1a:a3:0a:e8:e4:06:57:
         61:32:58:3f:cb:76:7a:49:5d:86:38:dd:0f:d2:41:6c:48:5a:
         bf:20:dd:4c:7a:21:f0:29:07:5c:44:b6:89:14:bd:6d:bd:73:
         41:63:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----