Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5e2653174ddd5b12ee5f10d280af6cceaf35782c.roa
File:                     5e2653174ddd5b12ee5f10d280af6cceaf35782c.roa (raw, json)
Hash identifier:          +HUD6oc7Q+q+Ksex1yj9xuKl6KLQotRkZZQkjnjS+PY=
Subject key identifier:   3F:24:83:FD:2D:C8:26:38:28:81:0D:13:98:7E:D1:43:D9:CD:D1:24
Certificate issuer:       /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial:       2144F3
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5e2653174ddd5b12ee5f10d280af6cceaf35782c.roa
Signing time:             Fri 05 May 2023 20:55:41 +0000
ROA not before:           Thu 04 May 2023 20:55:41 +0000
ROA not after:            Mon 05 May 2025 20:55:41 +0000
asID:                     26506
IP address blocks:        2800:1e0:1024::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180339 (0x2144f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
        Validity
            Not Before: May  4 20:55:41 2023 GMT
            Not After : May  5 20:55:41 2025 GMT
        Subject: CN=5e2653174ddd5b12ee5f10d280af6cceaf35782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:96:4c:22:e4:eb:31:ac:bc:d7:d5:a9:3b:
                    cd:65:58:33:3a:25:7a:fb:d5:d4:97:c8:3d:6c:31:
                    36:62:c7:99:da:0f:1a:3b:4c:dd:92:d0:3d:d1:f8:
                    6a:48:0a:56:46:8d:44:b9:f6:71:f1:a8:d2:60:d9:
                    e8:bb:2f:82:cb:48:3b:f5:6d:6d:6d:ba:f8:e8:1c:
                    ea:5a:d5:8d:24:ed:e8:97:a3:fc:97:cb:9c:04:30:
                    14:f4:73:76:61:55:04:31:36:92:fd:01:ed:6f:4d:
                    ae:fb:3a:58:39:58:cd:1b:dd:eb:45:a9:2b:b0:da:
                    83:d5:56:03:20:ad:ba:24:ea:79:b8:c0:28:91:7d:
                    7a:a1:2d:d1:0b:35:4c:5c:39:8a:fe:34:2b:9d:bd:
                    62:92:1d:c2:bb:55:2c:49:69:7e:a9:aa:ce:fb:ed:
                    21:76:77:e6:ec:5d:50:7c:bc:7c:90:ce:36:3a:c3:
                    5b:bc:59:a4:27:4c:de:a8:b7:b4:40:0d:70:a0:35:
                    76:f7:1a:c9:62:6a:96:82:94:f7:dd:68:7c:9c:51:
                    f8:3e:40:81:58:f8:b2:9e:70:69:fe:ec:16:ed:ae:
                    89:3c:1a:cb:c0:00:5b:82:c1:ab:b3:f1:45:b7:f2:
                    e2:ae:43:19:4a:18:62:d1:69:7f:4f:fe:b1:58:e9:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:83:FD:2D:C8:26:38:28:81:0D:13:98:7E:D1:43:D9:CD:D1:24
            X509v3 Authority Key Identifier:
                keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/5e2653174ddd5b12ee5f10d280af6cceaf35782c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:1e0:1024::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:04:1f:13:d3:b5:30:64:be:a0:09:50:e4:28:7d:48:df:
         51:b6:a5:4d:00:11:6c:77:20:f6:e9:98:c0:a1:ea:c5:63:a5:
         db:9d:5c:87:2f:86:2b:d5:4f:bf:f1:15:fc:d6:24:84:2f:71:
         f1:b6:fe:7c:68:2f:ce:48:c6:e4:d3:29:95:57:34:4f:2f:b9:
         c0:14:4e:52:67:8c:db:9f:fa:2d:0f:ee:56:27:94:33:9a:c8:
         38:bb:be:b8:19:95:39:f6:ab:2d:9b:5a:c8:ea:7b:bb:f2:f8:
         c7:6d:3b:12:39:98:0f:9d:4c:6d:fe:03:d8:cb:a6:cf:a6:4b:
         2a:1a:08:c1:fe:ef:8a:43:89:8f:52:f9:f8:a3:1f:2c:ab:d2:
         48:8f:2f:40:b9:8c:e8:68:db:df:23:f7:31:64:ee:52:76:8d:
         28:91:0a:c4:e7:a5:31:0b:21:34:a0:f9:f2:ad:f1:51:5b:a6:
         40:6c:dc:fb:ab:4e:9c:41:19:88:ab:4c:66:65:f8:df:cb:0f:
         ce:f3:3d:6d:04:8d:9c:d8:2d:12:f3:e2:11:24:1d:79:a8:e3:
         b8:94:31:35:db:bd:07:f2:0b:02:98:4d:e4:66:89:09:44:8a:
         f2:ab:c4:67:71:ad:75:b3:13:9a:ca:b3:a7:4a:5b:94:d3:a2:
         ef:18:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----