Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/94e97e3aa325d5b59709234b3c26191eebf274a8.roa
File:                     94e97e3aa325d5b59709234b3c26191eebf274a8.roa (raw, json)
Hash identifier:          2NK0qMe2MUzlKOHcI01nQZchzEzBNQ3BCTZRz39gOSI=
Subject key identifier:   14:2E:38:49:9A:25:14:C8:2B:E8:7F:0B:0E:53:11:B7:22:65:F6:D2
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       242EB6
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/94e97e3aa325d5b59709234b3c26191eebf274a8.roa
Signing time:             Wed 08 Nov 2023 17:41:50 +0000
ROA not before:           Wed 08 Nov 2023 17:41:50 +0000
ROA not after:            Sat 08 Nov 2025 17:41:50 +0000
asID:                     7438
IP address blocks:        2806:200::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371254 (0x242eb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Nov  8 17:41:50 2023 GMT
            Not After : Nov  8 17:41:50 2025 GMT
        Subject: CN=94e97e3aa325d5b59709234b3c26191eebf274a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:24:bc:9d:55:1d:c9:3f:9b:b0:ed:6c:5a:
                    d7:ca:3a:e8:44:05:34:b6:52:12:37:56:be:65:5d:
                    97:9d:b5:c5:ec:7f:57:90:63:1f:00:dc:61:fb:0a:
                    7d:98:ec:d2:b9:85:62:16:6e:17:85:ef:b6:75:2b:
                    af:c2:b1:55:28:0d:5b:1c:fb:54:a7:84:44:70:16:
                    bd:d0:be:0d:e0:ae:a8:99:7f:08:36:0d:d2:52:a8:
                    7f:b7:7e:a9:a1:0a:38:aa:ab:21:e3:8d:ea:a0:99:
                    c9:f8:41:54:d5:36:11:06:ee:c9:69:02:59:68:e4:
                    98:36:11:cd:e6:88:45:82:cc:7e:ea:31:05:c4:15:
                    eb:84:6f:83:9d:42:fe:f6:05:b8:74:6d:fe:a8:ca:
                    81:84:10:fc:b9:f3:0e:fe:88:44:c4:2b:4d:87:29:
                    28:b6:84:ac:e5:16:62:5b:50:02:ba:0f:bd:81:c5:
                    45:b2:13:dc:ea:c5:e1:d2:21:f1:f9:9a:e2:97:41:
                    d1:2f:c9:11:9a:5d:ce:e0:cb:85:6b:3a:78:83:f6:
                    33:8e:68:a0:11:57:5d:6c:68:43:16:04:46:c1:d8:
                    1d:9a:2b:7e:d4:58:7c:eb:2d:cf:78:67:2e:8c:b1:
                    c9:7b:d1:0e:40:2f:c3:38:a1:f4:88:ea:c1:1b:74:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:38:49:9A:25:14:C8:2B:E8:7F:0B:0E:53:11:B7:22:65:F6:D2
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/94e97e3aa325d5b59709234b3c26191eebf274a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:d1:ed:91:cf:77:8f:b7:19:58:92:6f:60:90:ef:3b:c1:
         6c:d7:26:87:e7:1c:22:93:29:68:9a:a2:57:fa:f9:27:84:75:
         0e:bc:7b:fe:39:05:eb:45:46:6a:70:26:ba:5a:f6:49:3f:fc:
         28:87:2a:f8:04:05:51:8b:4a:ff:76:75:db:83:bf:0d:64:8d:
         eb:d9:b0:1d:19:d3:90:2d:cf:4f:50:9b:c3:65:47:2a:3a:29:
         f6:54:24:1f:7e:87:a8:1c:85:1f:df:3b:a8:9c:1a:18:90:ab:
         98:63:44:54:8a:b5:e5:26:bb:2d:56:44:a6:95:8f:95:a6:3a:
         91:c4:3c:a6:73:dc:dd:50:0d:75:a1:57:cb:be:2a:77:55:2e:
         65:1d:27:6e:83:1d:79:a5:71:22:67:ef:e2:63:63:04:44:e4:
         21:71:92:cf:c1:ff:24:b6:3a:a4:47:c9:1d:fb:82:72:80:ce:
         ed:bf:58:97:b4:5c:00:1f:02:c6:71:5b:5f:bf:c8:93:a7:0f:
         76:47:08:89:12:59:75:67:fc:b8:7c:62:32:db:4f:b8:1c:0e:
         79:e7:ec:d4:7b:e7:70:c7:41:06:9e:38:03:41:1f:16:95:db:
         2a:38:b8:c2:ee:14:65:45:3d:f5:e8:86:c3:50:c1:b4:2b:e5:
         15:07:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----