Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/069c7ba53e382ff8cb41fc4c52f8525c8fab13cf.roa
File:                     069c7ba53e382ff8cb41fc4c52f8525c8fab13cf.roa (raw, json)
Hash identifier:          33KXZ2r436wsl6EgvL51uerN/h+MrUW5WYrY0csG1rA=
Subject key identifier:   3B:6D:46:F9:DB:34:4F:55:33:DA:CB:F5:FF:7A:53:91:05:43:48:D7
Certificate issuer:       /CN=4213629bff1656b039692adab742735c1703764c
Certificate serial:       28CB72
Authority key identifier: 14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/069c7ba53e382ff8cb41fc4c52f8525c8fab13cf.roa
Signing time:             Mon 19 Feb 2024 17:00:39 +0000
ROA not before:           Mon 19 Feb 2024 17:00:37 +0000
ROA not after:            Mon 19 Feb 2029 17:00:37 +0000
asID:                     26506
IP address blocks:        2800:1e0:1024::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673522 (0x28cb72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4213629bff1656b039692adab742735c1703764c
        Validity
            Not Before: Feb 19 17:00:37 2024 GMT
            Not After : Feb 19 17:00:37 2029 GMT
        Subject: CN=069c7ba53e382ff8cb41fc4c52f8525c8fab13cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:e7:28:dc:4a:cd:8c:8d:54:ff:28:b3:5a:
                    2b:1b:23:8c:f5:97:dd:f8:50:14:e2:91:84:85:be:
                    b2:73:c5:b9:40:be:95:d8:39:89:87:c0:1b:f7:39:
                    81:80:8c:3c:4b:90:b7:81:56:71:86:62:3a:18:91:
                    c7:5d:77:ce:84:b1:28:4a:aa:f2:9d:85:ce:63:c4:
                    b2:ce:78:e0:67:40:6c:61:b4:bb:61:ab:75:f5:44:
                    a3:fd:07:c7:e3:94:9e:9e:cf:17:b1:e7:37:64:60:
                    27:5a:27:a5:b8:1f:46:9f:c2:80:53:e8:7e:6d:13:
                    95:60:49:f5:65:bb:af:5e:7b:fd:f6:64:a7:1b:a8:
                    14:40:37:fc:f3:02:1a:e3:6a:3b:9b:6e:7c:84:ce:
                    1e:f7:2d:d1:3e:5b:de:00:b6:b2:53:16:b3:9b:41:
                    4d:b4:0b:f3:cd:be:4e:e3:18:1b:27:d2:ed:f4:cd:
                    48:81:0c:5b:b5:fd:a2:c0:d0:be:74:41:68:f7:03:
                    ce:6e:f7:3a:6b:ee:57:cd:b5:3c:56:b1:06:38:5d:
                    07:32:33:9d:67:7b:f8:dc:dd:69:36:ff:f1:a0:d9:
                    6f:c5:7d:5e:ac:7f:a0:5e:8c:29:bc:88:a6:c8:67:
                    7a:da:ab:50:a1:a4:43:e9:ba:52:11:4c:39:c1:b8:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6D:46:F9:DB:34:4F:55:33:DA:CB:F5:FF:7A:53:91:05:43:48:D7
            X509v3 Authority Key Identifier:
                keyid:14:35:AB:5E:E9:34:F0:72:C1:F0:92:5A:5A:53:DC:6F:8E:75:A4:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4213629bff1656b039692adab742735c1703764c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/069c7ba53e382ff8cb41fc4c52f8525c8fab13cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/4213629bff1656b039692adab742735c1703764c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1e0:1024::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:11:cd:3e:fb:7a:f2:c6:a2:4b:70:a4:14:a1:79:a0:a7:1d:
         20:78:e1:26:be:d5:d5:97:45:e3:ea:d9:0d:b6:a5:f0:0a:2c:
         f6:97:8a:c1:f7:08:cb:95:10:67:e2:97:33:5b:2c:c7:95:6c:
         3f:ae:7a:59:e5:ee:b3:77:92:29:82:fb:4b:45:3d:86:80:36:
         f4:bd:d2:79:5a:06:2b:14:8c:68:8a:9a:6a:33:ef:13:8e:13:
         35:f1:32:ca:ea:f2:71:75:4a:b6:05:d1:2c:99:66:72:91:ac:
         81:61:22:b3:62:4f:56:08:84:14:fd:16:2c:78:7a:ae:1c:d9:
         03:26:a8:dc:18:3f:71:b2:c5:1e:e1:b5:28:61:6b:d4:7b:e6:
         66:4e:56:12:fd:1f:92:0b:bc:fe:b7:e6:98:8c:6b:f7:f0:54:
         e9:22:eb:4b:de:33:aa:99:d9:e0:eb:b7:92:e2:fb:93:e9:a9:
         da:50:8e:0a:2a:5e:b2:0e:39:44:d3:7f:df:75:ea:ee:7b:1e:
         b1:d9:67:f2:33:50:89:51:40:56:84:1a:4c:62:3a:97:fb:8e:
         ce:ac:d5:d3:e2:62:e6:f1:67:f4:07:92:ee:0e:83:ed:a3:a6:
         cb:34:34:fd:2a:90:84:9a:8f:60:d2:68:2f:c1:d6:03:24:3f:
         65:f6:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----