Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/3f58e1d429ae1aeadb0e62fba0329af6c4294051.roa
File:                     3f58e1d429ae1aeadb0e62fba0329af6c4294051.roa (raw, json)
Hash identifier:          qPZ8cwp6vV4600nB6bl6mEpDPIIhXqs+8b5a7D2+L3k=
Subject key identifier:   F1:05:D2:97:53:0E:02:AD:0F:DB:55:9C:97:AB:3B:EF:53:12:FB:18
Certificate issuer:       /CN=266c39f3ff09d22a22b960d65309889ba5f79757
Certificate serial:       1799E8
Authority key identifier: BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/3f58e1d429ae1aeadb0e62fba0329af6c4294051.roa
Signing time:             Thu 10 Aug 2023 21:05:58 +0000
ROA not before:           Wed 09 Aug 2023 21:05:58 +0000
ROA not after:            Sun 10 Aug 2025 21:05:58 +0000
asID:                     19429
IP address blocks:        2801:126::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1546728 (0x1799e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266c39f3ff09d22a22b960d65309889ba5f79757
        Validity
            Not Before: Aug  9 21:05:58 2023 GMT
            Not After : Aug 10 21:05:58 2025 GMT
        Subject: CN=3f58e1d429ae1aeadb0e62fba0329af6c4294051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:c9:b5:94:f8:ed:51:8a:d4:d1:5a:4c:dc:
                    40:fe:86:7a:94:2b:14:04:78:c7:cc:e2:66:02:a0:
                    4d:4d:93:6c:a3:44:c8:f3:cd:59:01:23:a5:0b:aa:
                    62:a6:e8:fd:12:c5:68:10:bd:46:f3:14:3b:05:0f:
                    2d:ef:ae:07:7c:9f:f3:91:51:f5:d9:5e:e8:ad:8c:
                    f4:ad:b0:57:cf:31:db:6f:31:20:5a:d9:a6:19:93:
                    bf:0c:83:73:44:00:3d:ad:db:7f:7d:af:d3:c1:54:
                    9d:b8:4b:31:42:29:b4:30:65:84:84:16:5f:99:7c:
                    a0:21:2b:99:a7:e0:a6:6a:8a:ca:d3:23:34:06:bb:
                    03:7f:ae:c2:e0:fa:26:c8:14:25:46:b2:dd:8d:2e:
                    32:5d:ff:88:2d:85:05:8f:4e:d9:4d:f6:1c:38:14:
                    7c:ee:ab:af:4d:89:95:78:61:9a:0d:8c:01:5c:51:
                    c9:89:cd:24:65:4a:2a:54:c7:2e:d6:72:af:b5:8e:
                    a2:ce:11:55:b7:c9:a9:3d:c9:1d:5b:e4:fe:38:37:
                    fc:d6:55:04:e6:69:0b:67:d9:3c:53:7b:09:ed:df:
                    e8:2b:a3:ea:5d:e9:d7:65:a8:22:87:ea:25:21:85:
                    5a:bb:dc:52:17:01:18:dc:a2:03:73:cc:69:dc:aa:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:D2:97:53:0E:02:AD:0F:DB:55:9C:97:AB:3B:EF:53:12:FB:18
            X509v3 Authority Key Identifier:
                keyid:BC:38:DF:7A:C9:79:F1:54:6D:38:2E:99:AE:01:41:21:FC:5B:53:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/266c39f3ff09d22a22b960d65309889ba5f79757.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/3f58e1d429ae1aeadb0e62fba0329af6c4294051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e70b6795-29a9-4fec-a9fb-7b101ab68144/266c39f3ff09d22a22b960d65309889ba5f79757.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:126::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:3a:d8:1a:2b:22:b0:1c:6a:e3:0c:f7:28:6e:43:9e:96:
         26:21:84:e4:14:69:f7:57:1d:5a:93:41:8f:f0:79:c0:ea:63:
         10:28:a3:b9:9a:72:ee:66:11:8d:fd:7d:3f:fc:56:71:f2:91:
         4b:a1:6d:4b:2b:ba:24:a9:15:77:8d:bf:f0:7f:d8:3f:81:b6:
         de:b3:cb:36:60:97:88:ef:36:ea:0b:3b:bd:6b:3f:f1:8e:cb:
         b8:6b:30:af:fc:12:dc:3f:0f:ab:43:f6:66:ab:b6:b6:45:b4:
         c6:67:59:8c:2a:43:13:cf:f0:0b:57:d1:13:b2:e2:2b:2c:12:
         17:ef:8f:ea:ef:53:98:dd:f8:6f:8c:4a:85:e8:8d:df:f9:f1:
         f4:12:12:f7:f5:cd:91:ab:19:07:0d:c7:0f:80:a0:44:86:3f:
         a4:fd:fa:9f:ec:b0:0e:6c:6b:0b:44:c5:f2:58:ec:04:dc:8d:
         ca:6f:d0:a8:c0:16:4f:34:a6:c8:eb:a7:22:1b:88:b9:73:3e:
         4d:4f:eb:05:09:25:fc:10:40:22:82:e1:be:ec:d2:96:59:d0:
         25:ab:6b:78:ea:03:51:3e:94:7a:5e:91:f4:e6:ac:8a:d3:85:
         e7:e9:ba:45:cd:09:f1:bd:a2:1b:88:f1:ab:a2:74:42:8d:4a:
         e9:cb:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----