Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/896491fb01a18b9c9bfb643fdf0f5038fdf46380.roa
File:                     896491fb01a18b9c9bfb643fdf0f5038fdf46380.roa (raw, json)
Hash identifier:          kObKPejNKk/r2q38uoSoftjy091t3O1y6iHQutHK4es=
Subject key identifier:   83:C5:B5:FB:7B:81:52:96:E9:2C:4D:40:C0:C9:04:D2:7B:C6:21:52
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       2759C5
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/896491fb01a18b9c9bfb643fdf0f5038fdf46380.roa
Signing time:             Tue 27 Feb 2024 23:21:55 +0000
ROA not before:           Tue 27 Feb 2024 23:21:55 +0000
ROA not after:            Fri 27 Feb 2026 23:21:55 +0000
asID:                     262166
IP address blocks:        2801:0:110::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578885 (0x2759c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Feb 27 23:21:55 2024 GMT
            Not After : Feb 27 23:21:55 2026 GMT
        Subject: CN=896491fb01a18b9c9bfb643fdf0f5038fdf46380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:d4:04:14:9f:b9:a0:86:a8:0d:5b:c9:05:
                    9a:a6:9b:a8:d6:87:43:3d:38:4c:76:b9:0d:42:4b:
                    ef:32:e5:ab:6a:be:ce:39:9e:18:eb:84:ed:8d:d1:
                    f4:04:d6:3f:98:a2:94:4f:77:9d:f4:0b:70:63:24:
                    41:b0:4c:da:3e:cf:20:71:d9:ec:d1:ca:07:3a:09:
                    c5:07:b4:90:2a:bc:10:20:4d:24:b3:a3:8d:0a:9d:
                    35:0f:50:d2:50:b6:ad:10:e5:88:0b:20:b5:c9:73:
                    2e:94:74:e2:20:6c:b3:be:84:f2:44:b5:ac:85:e0:
                    00:2e:46:01:0b:38:44:1a:e7:c5:16:ca:51:83:91:
                    bf:96:ea:fc:3f:9c:ba:3a:c6:a1:29:10:ac:d7:ff:
                    7f:0d:5b:64:13:94:da:04:ea:85:30:b3:fc:c0:4b:
                    44:63:8a:da:5c:d2:97:ad:c6:0f:3e:99:3c:6a:11:
                    c2:81:ee:24:ff:e7:96:13:27:59:8a:92:24:09:f7:
                    75:7c:4b:8f:a9:54:7a:44:06:fd:23:1c:95:bd:3d:
                    cb:d5:1a:17:5b:e5:8a:83:e5:74:a0:13:ec:2b:e3:
                    09:b7:bf:32:97:2f:85:0a:0a:0e:b4:42:8f:14:11:
                    0c:a7:35:cc:59:94:69:f6:48:dd:7d:f6:94:3f:9e:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C5:B5:FB:7B:81:52:96:E9:2C:4D:40:C0:C9:04:D2:7B:C6:21:52
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/896491fb01a18b9c9bfb643fdf0f5038fdf46380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:66:75:16:ac:1f:7d:34:1d:a6:aa:7b:e5:a2:4f:c4:c3:
         4d:40:1d:0e:7b:39:7e:9c:d7:7a:07:3f:8f:85:03:64:aa:c3:
         1b:a0:17:23:ca:e1:37:1c:39:bf:0a:7d:b6:cd:50:f1:a5:17:
         80:d0:e8:86:20:4e:b3:46:89:7c:35:e7:f2:ad:db:01:49:82:
         3d:5e:14:9d:07:46:c8:5c:db:f1:1c:0a:fe:73:f3:94:e3:f7:
         59:cd:31:92:e1:e5:79:04:3c:ad:5a:ce:c5:96:73:02:64:61:
         eb:aa:ee:db:83:99:5b:22:11:a4:c9:51:79:dc:72:64:b2:ff:
         fb:fd:c5:30:80:e3:dc:4d:cb:ef:3d:55:88:4f:43:ee:29:e9:
         01:ee:7a:88:01:c6:6d:12:cc:a4:2c:ba:a3:34:84:a5:d3:65:
         04:9e:cc:ef:56:d9:1f:b0:b2:eb:aa:17:b0:7a:3e:63:3e:78:
         23:44:61:58:3c:49:cb:0d:e7:ee:ae:92:bb:f6:26:84:62:f0:
         1e:35:26:16:8c:30:55:6e:aa:c2:db:88:55:69:3d:75:fc:a7:
         f5:6c:a0:b4:78:60:9f:6c:3a:66:78:ca:b1:39:19:22:0b:09:
         d1:ae:d7:37:4f:e5:45:cb:33:4d:ae:fb:4e:92:04:d7:0c:62:
         91:73:b1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----