Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/11f0622d60310d3777a932f9ce307e5ad983a347.roa
File:                     11f0622d60310d3777a932f9ce307e5ad983a347.roa (raw, json)
Hash identifier:          chjKQZhR4J+xpwL42SZR1F51Xn6wbkj+07v/Q1DotBc=
Subject key identifier:   13:30:88:B8:61:60:70:4A:00:91:2A:05:0C:59:71:EA:09:26:50:13
Certificate issuer:       /CN=f59c4429352acd803514cb578e20f9d87861e0f1
Certificate serial:       015F56
Authority key identifier: 46:B3:FE:6F:6A:DA:7F:9D:F2:FD:51:35:3D:26:44:77:FF:45:C9:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59c4429352acd803514cb578e20f9d87861e0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/11f0622d60310d3777a932f9ce307e5ad983a347.roa
Signing time:             Fri 16 Jun 2023 17:03:04 +0000
ROA not before:           Thu 15 Jun 2023 17:03:04 +0000
ROA not after:            Mon 16 Jun 2025 17:03:04 +0000
asID:                     270159
IP address blocks:        2806:3e6::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89942 (0x15f56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59c4429352acd803514cb578e20f9d87861e0f1
        Validity
            Not Before: Jun 15 17:03:04 2023 GMT
            Not After : Jun 16 17:03:04 2025 GMT
        Subject: CN=11f0622d60310d3777a932f9ce307e5ad983a347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:69:57:c3:2f:76:c6:98:77:55:c8:d2:79:
                    13:80:f5:c2:fb:5a:5d:17:45:37:8c:fa:61:51:11:
                    6f:6d:47:3f:86:83:54:54:8c:d7:02:71:28:6e:19:
                    8f:c0:b9:48:7c:59:95:a4:d5:d0:6a:40:a0:fd:14:
                    06:1e:44:0d:14:b5:76:bc:c6:92:1c:74:bc:ce:8e:
                    b5:02:8a:d1:a8:e5:cb:18:71:0d:9f:61:ed:30:42:
                    fc:bc:84:cc:40:d1:cd:52:92:0e:5c:b4:2a:2f:d3:
                    84:f9:8c:4d:bf:00:98:14:0a:67:76:40:01:74:b3:
                    a1:1e:92:eb:fa:a6:2c:55:67:88:d2:c9:a1:e3:7e:
                    cb:d9:ff:8c:c8:7e:e3:93:f8:6b:22:ba:91:90:ab:
                    c1:c7:6d:17:d4:7d:1b:10:8c:95:24:fa:7b:b4:ab:
                    b1:96:e7:d2:3f:45:a4:3a:0d:67:d8:f5:8e:bc:8b:
                    de:80:96:23:9d:30:d1:3c:91:04:1b:89:4b:dd:75:
                    e1:a1:35:bb:3e:5a:2f:43:1a:ae:e7:e9:a3:3b:be:
                    fc:a9:db:29:ac:e9:26:4b:dc:12:42:1c:67:5a:9f:
                    6b:06:8e:80:61:00:5f:7f:f1:ac:65:8d:12:9b:84:
                    a0:ad:bb:fb:b3:60:7f:7f:f9:8c:f3:0e:2f:38:e4:
                    17:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:88:B8:61:60:70:4A:00:91:2A:05:0C:59:71:EA:09:26:50:13
            X509v3 Authority Key Identifier:
                keyid:46:B3:FE:6F:6A:DA:7F:9D:F2:FD:51:35:3D:26:44:77:FF:45:C9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f59c4429352acd803514cb578e20f9d87861e0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/11f0622d60310d3777a932f9ce307e5ad983a347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee7b9cff-16d6-4523-9471-27bb6de17334/f59c4429352acd803514cb578e20f9d87861e0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:9c:35:d3:da:df:b9:ce:8a:9f:6a:fe:2a:6d:ad:f2:2b:
         1a:43:59:30:05:51:98:1b:86:7c:0a:f0:11:46:c0:65:5d:56:
         03:c5:24:8a:ac:8d:db:ed:43:5a:6f:50:30:a2:76:e6:b7:01:
         60:3e:c9:bb:f6:3d:0a:47:92:92:80:16:49:57:ad:b7:68:74:
         86:e1:36:a9:52:08:0e:e4:93:f6:d5:b3:93:9f:fd:3c:2a:52:
         2b:a9:be:b1:08:c7:ee:9e:c9:33:69:34:7a:75:77:7b:e9:8b:
         25:45:46:b2:e0:3d:92:dc:7f:a2:48:0a:dc:7c:97:89:3a:29:
         03:3c:dc:c3:dd:da:a5:5e:75:87:2c:9b:d1:3d:e0:f7:c5:80:
         c3:67:cd:17:db:10:52:ba:6b:5a:88:66:cd:d7:ff:3a:e9:16:
         dc:e7:e8:d2:61:59:67:91:9b:b0:24:67:f0:a0:9f:b3:e0:f1:
         a6:d5:1c:07:a8:5d:0f:52:f3:55:f5:1c:42:7d:c7:28:69:5a:
         4b:b3:31:63:06:e8:33:13:7b:e6:76:71:35:89:55:2b:fe:d0:
         3c:ec:41:f2:0a:38:5f:00:1f:0e:9c:63:80:17:7c:4c:d5:f6:
         46:87:67:7e:7e:26:af:fe:20:66:cf:4a:73:27:50:ee:af:55:
         e9:b3:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----