Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/1356d747c1a89f7c9822af232a38037fd1c3e600.roa
File:                     1356d747c1a89f7c9822af232a38037fd1c3e600.roa (raw, json)
Hash identifier:          sXjdS70MZcPKoKZdd/ourh4Gx4lIhm5JXFI49puepKg=
Subject key identifier:   19:9D:34:0C:62:21:D2:9A:D1:45:58:C8:11:0E:36:FC:35:1E:7D:A8
Certificate issuer:       /CN=4b4f622d7bdbbffb8b3c9b05222293f5915d88e0
Certificate serial:       F9E1
Authority key identifier: 86:33:44:56:F6:27:9D:69:60:59:EC:73:CC:34:70:8D:FB:D7:3B:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/1356d747c1a89f7c9822af232a38037fd1c3e600.roa
Signing time:             Thu 25 Jan 2024 17:00:53 +0000
ROA not before:           Thu 25 Jan 2024 17:00:53 +0000
ROA not after:            Sun 25 Jan 2026 17:00:53 +0000
asID:                     273147
IP address blocks:        2801:195:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63969 (0xf9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4f622d7bdbbffb8b3c9b05222293f5915d88e0
        Validity
            Not Before: Jan 25 17:00:53 2024 GMT
            Not After : Jan 25 17:00:53 2026 GMT
        Subject: CN=1356d747c1a89f7c9822af232a38037fd1c3e600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:7c:e8:be:78:54:1a:ee:17:8a:98:74:d2:
                    87:a0:43:b8:2e:d1:43:9a:13:09:69:60:14:cc:ca:
                    62:4e:49:1f:89:44:e9:84:4d:e5:e5:6a:b5:15:eb:
                    2e:67:a3:9d:27:aa:55:fe:c8:bf:a4:bb:e6:3a:96:
                    e6:90:d9:01:19:a1:ae:bf:0d:98:5d:fa:d1:cf:dc:
                    ae:65:96:f0:c4:19:99:db:e5:45:05:1c:1a:7b:c7:
                    b7:ed:9e:67:fa:27:a4:e4:11:3f:ed:a8:dd:55:2f:
                    83:63:c7:77:ef:f0:56:d2:7b:57:99:39:6e:86:44:
                    33:5d:2c:34:7d:db:71:9b:93:a6:76:14:15:f6:6e:
                    37:e0:2e:07:48:68:73:a3:c4:e2:c0:08:72:5d:9b:
                    de:c3:69:0e:96:37:e8:ad:cf:77:5b:21:47:1e:c2:
                    90:d6:8c:98:07:fd:1e:20:de:95:0c:f2:4c:00:d6:
                    d4:38:05:06:c3:8f:55:01:09:5b:80:f1:ca:3d:56:
                    9c:29:34:10:51:f7:4e:e5:77:5c:67:a6:8e:97:2d:
                    47:61:13:57:46:b7:8b:fe:e4:a0:76:24:14:20:22:
                    6a:b0:b0:25:39:94:05:cb:dc:93:fa:43:3d:70:3b:
                    25:f5:81:64:e8:b2:f8:13:63:52:1e:c8:5d:eb:42:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9D:34:0C:62:21:D2:9A:D1:45:58:C8:11:0E:36:FC:35:1E:7D:A8
            X509v3 Authority Key Identifier:
                keyid:86:33:44:56:F6:27:9D:69:60:59:EC:73:CC:34:70:8D:FB:D7:3B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/1356d747c1a89f7c9822af232a38037fd1c3e600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:3c:ba:ac:0a:b7:f4:ec:1f:c2:20:48:cb:45:b3:5a:46:
         fc:f0:0a:c0:a4:0f:25:5d:7e:28:f3:0d:a3:f4:10:27:77:27:
         36:f3:1c:75:fa:1e:59:73:3d:ee:fc:84:8c:8e:bc:d0:77:35:
         8f:d8:b2:bc:e9:22:6b:a1:16:47:aa:96:9c:54:4d:f4:d3:8a:
         8d:69:fd:e5:b0:e2:a2:f3:b7:48:ac:11:8c:fc:12:bd:dc:bd:
         4c:fb:88:8b:56:fd:e3:6f:e9:d4:04:c1:a0:25:ea:d6:19:3c:
         2a:83:3e:7b:3d:5e:38:6f:1c:9c:62:bb:34:47:f7:fc:49:23:
         a6:f2:1d:c0:d0:d7:de:97:aa:ec:ec:af:37:25:f8:6d:ee:7c:
         ca:a0:fa:ac:ac:a6:9f:13:1b:08:e0:98:53:08:59:af:13:9c:
         90:12:dc:cc:b3:db:01:7e:36:bb:5e:d0:fd:86:65:15:a0:c0:
         b2:e6:4b:15:c9:08:bb:02:ae:d3:f9:47:2b:d8:48:0f:83:8b:
         c8:e4:81:fe:e6:2c:25:4f:4e:60:2a:64:35:7a:1a:8e:0e:b8:
         5b:4c:ad:62:47:8f:29:00:cb:43:5d:09:fc:a6:95:54:2d:be:
         77:3e:72:2c:43:6e:9f:ff:c9:cd:44:ad:29:3f:a7:15:18:4c:
         48:e3:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----