Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/fa6166484959bfc98ee19ea1fe0dce055922bfe5.roa
File:                     fa6166484959bfc98ee19ea1fe0dce055922bfe5.roa (raw, json)
Hash identifier:          caOBpwgyrlWlH5BpepC4J6CZ0JmJMJmhwjycA+8VqE4=
Subject key identifier:   98:80:FC:87:CE:B1:C9:AC:8B:60:FF:08:FB:C1:28:49:C3:43:4C:D7
Certificate issuer:       /CN=56c0f90568b629d6fa8e7553b9bfe268cc0e5af8
Certificate serial:       25C5EC
Authority key identifier: E4:65:B2:07:A0:B5:55:12:89:40:AB:C6:C4:C3:44:61:3F:68:23:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c0f90568b629d6fa8e7553b9bfe268cc0e5af8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/fa6166484959bfc98ee19ea1fe0dce055922bfe5.roa
Signing time:             Sun 11 Feb 2024 14:40:15 +0000
ROA not before:           Sun 11 Feb 2024 14:40:14 +0000
ROA not after:            Sun 11 Feb 2029 14:40:14 +0000
asID:                     265840
IP address blocks:        2801:1c:3002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475500 (0x25c5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0f90568b629d6fa8e7553b9bfe268cc0e5af8
        Validity
            Not Before: Feb 11 14:40:14 2024 GMT
            Not After : Feb 11 14:40:14 2029 GMT
        Subject: CN=fa6166484959bfc98ee19ea1fe0dce055922bfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:0d:c9:1c:d1:7d:a8:b1:39:ac:db:48:05:
                    82:b6:5b:08:5c:77:11:47:93:fe:06:d3:e1:1a:88:
                    ee:c7:7a:02:4a:49:48:31:d5:c1:b5:d2:b9:4a:b4:
                    80:e1:fc:f5:59:ac:23:09:f2:e0:0f:5f:80:67:b4:
                    0e:78:a9:a0:77:6b:e6:a0:ea:d4:b8:7f:87:d1:36:
                    e4:ee:09:61:a6:4d:84:a3:74:62:1b:c0:28:ce:68:
                    13:69:92:73:49:27:02:2d:c4:be:6e:14:f9:49:1d:
                    78:2d:72:96:7d:78:4b:6e:ab:36:7b:64:d3:38:53:
                    e0:b9:b3:83:de:81:f4:fc:54:01:d5:d0:98:9c:41:
                    22:69:3a:a2:4f:cb:85:d8:de:78:19:f6:cc:94:60:
                    be:48:14:bf:de:e5:13:02:17:8e:63:01:74:fb:d5:
                    ac:08:f5:36:5f:64:4a:ff:b6:01:b8:31:c7:a3:40:
                    45:c3:17:a7:15:c3:93:6b:01:9d:ed:af:f6:ac:6d:
                    e3:b7:9b:63:c8:f3:37:ed:a0:31:a2:5e:e8:ec:b7:
                    d0:49:63:a3:4e:99:40:b6:10:9b:74:f4:53:45:93:
                    b2:68:bc:c5:55:19:07:0d:07:2e:19:bd:cd:c6:5a:
                    45:36:d5:84:ab:33:63:c2:0f:66:25:ba:93:ce:e2:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:FC:87:CE:B1:C9:AC:8B:60:FF:08:FB:C1:28:49:C3:43:4C:D7
            X509v3 Authority Key Identifier:
                keyid:E4:65:B2:07:A0:B5:55:12:89:40:AB:C6:C4:C3:44:61:3F:68:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c0f90568b629d6fa8e7553b9bfe268cc0e5af8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/fa6166484959bfc98ee19ea1fe0dce055922bfe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed1fd0bc-819f-4495-8d7f-3f2ed6b25480/56c0f90568b629d6fa8e7553b9bfe268cc0e5af8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:47:d0:62:9e:9a:84:48:f3:1f:67:f9:22:2d:08:2e:63:
         ab:38:c8:8b:1d:be:39:7f:ad:0a:64:5c:90:af:e5:ae:1c:db:
         13:63:64:9e:a0:13:60:ce:43:19:f2:e9:54:34:0a:07:ce:b1:
         e7:bc:80:b8:cd:9f:7f:f5:06:81:20:fe:15:8d:cc:9d:de:1a:
         7b:00:09:f2:7f:59:84:e7:95:5a:34:b9:18:1f:68:83:3c:7e:
         36:d1:e3:a6:73:5b:7a:c3:b4:ef:99:54:a5:f8:14:40:3e:9b:
         d7:b6:1b:59:d2:e6:d9:8e:24:64:7e:94:fc:96:f4:5a:57:99:
         bb:47:eb:d5:3e:2b:47:f8:87:6f:0f:c8:73:db:c2:01:c4:cf:
         10:1b:1d:99:1d:d0:43:6d:13:3b:fa:e1:dd:12:a8:d3:4e:ec:
         49:10:2d:1f:7b:ae:6a:cf:6f:c2:e6:f3:d0:44:4f:89:7c:bb:
         97:5d:9e:89:18:1b:7d:95:53:b2:60:84:a9:ae:5a:00:72:bc:
         da:25:2a:14:73:09:36:80:1a:41:ec:dd:6a:49:e7:c0:42:58:
         a8:2f:4c:9c:98:fb:31:53:a0:5e:5a:aa:1b:8c:11:4a:ab:f6:
         52:8b:80:42:6f:cb:ff:7c:08:40:07:25:44:eb:55:79:0e:8e:
         19:ae:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----