Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f600a72e-aa66-4b6f-a004-d2651b8bcb86/e196574b3fbdd83ae4332838545a31e44adfcb1c.roa
File:                     e196574b3fbdd83ae4332838545a31e44adfcb1c.roa (raw, json)
Hash identifier:          +62NKFstTFgVBuAmsRhYuzZ5xjMJBkVUaZdV7VRfIKU=
Subject key identifier:   17:E2:9F:1A:E4:71:75:DB:78:60:6A:A8:B8:1A:F7:F6:A8:4B:EF:11
Certificate issuer:       /CN=096c9e10e5467ab75b734d547edf8a2f1a821955
Certificate serial:       05BB05
Authority key identifier: C8:23:1A:4B:B1:E0:EC:91:6B:B5:3B:E8:F2:7E:BD:A9:C6:CA:52:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/096c9e10e5467ab75b734d547edf8a2f1a821955.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f600a72e-aa66-4b6f-a004-d2651b8bcb86/e196574b3fbdd83ae4332838545a31e44adfcb1c.roa
Signing time:             Mon 11 Dec 2023 01:41:47 +0000
ROA not before:           Mon 11 Dec 2023 01:41:47 +0000
ROA not after:            Thu 11 Dec 2025 01:41:47 +0000
asID:                     19429
IP address blocks:        2801:14e:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375557 (0x5bb05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096c9e10e5467ab75b734d547edf8a2f1a821955
        Validity
            Not Before: Dec 11 01:41:47 2023 GMT
            Not After : Dec 11 01:41:47 2025 GMT
        Subject: CN=e196574b3fbdd83ae4332838545a31e44adfcb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:bb:68:25:08:b8:ab:19:5e:4e:7f:d1:9a:
                    e4:b5:b0:d2:da:23:12:fa:32:9e:c8:18:ec:cf:f8:
                    14:0b:68:51:6d:31:a7:ae:b0:42:5c:db:44:26:85:
                    dd:b0:b6:e3:ff:87:0c:ae:8a:a4:f2:a5:07:1c:f2:
                    96:70:de:a6:90:a9:63:db:fd:a4:78:6a:6f:2f:58:
                    6f:a4:6d:4c:b3:14:6c:ae:3c:f9:90:8c:15:07:65:
                    05:0f:e0:11:12:30:81:26:e4:07:65:e2:63:40:9a:
                    ef:9f:75:05:26:06:bb:9f:3b:3f:c1:d0:22:76:ed:
                    9c:71:fb:ed:18:8b:c6:32:f1:2a:85:64:01:78:51:
                    0d:69:e9:32:25:3d:f5:72:17:4d:cf:ad:a7:85:a0:
                    cc:9b:48:7d:f2:fb:b3:00:32:5f:86:b6:03:0a:ea:
                    ed:b4:80:df:52:7a:f7:4e:66:68:c2:63:3b:94:40:
                    77:e7:04:23:1e:96:94:a0:e1:f5:34:e1:cc:85:1a:
                    28:3a:e8:1b:6c:64:17:a8:f9:7e:61:a5:3c:c4:d0:
                    00:64:4b:9b:30:01:1a:d5:c7:7d:44:cb:57:59:b4:
                    97:9d:86:c0:23:40:5b:b4:61:d1:9d:6f:43:75:b5:
                    0c:a6:a3:3d:53:1d:da:6b:0f:bc:21:86:64:69:73:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E2:9F:1A:E4:71:75:DB:78:60:6A:A8:B8:1A:F7:F6:A8:4B:EF:11
            X509v3 Authority Key Identifier:
                keyid:C8:23:1A:4B:B1:E0:EC:91:6B:B5:3B:E8:F2:7E:BD:A9:C6:CA:52:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/096c9e10e5467ab75b734d547edf8a2f1a821955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f600a72e-aa66-4b6f-a004-d2651b8bcb86/e196574b3fbdd83ae4332838545a31e44adfcb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f600a72e-aa66-4b6f-a004-d2651b8bcb86/096c9e10e5467ab75b734d547edf8a2f1a821955.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:df:da:7e:34:66:80:62:d0:9c:9b:d3:89:87:87:fd:87:0d:
         36:db:56:91:a1:55:a7:79:12:d3:be:2a:76:82:50:d7:b6:f8:
         1f:ea:60:76:06:a4:0c:0c:f8:69:9b:b7:ea:17:6a:ee:5d:f8:
         99:9f:bb:50:62:1a:30:a7:a4:5d:30:0d:98:e9:14:4a:83:af:
         ca:15:57:85:ea:de:5e:a9:de:13:da:1d:07:98:29:30:40:6e:
         0d:02:3b:bb:07:dd:b3:7d:d6:6b:00:04:78:3d:f0:33:17:ac:
         47:18:20:02:fa:d2:a0:fc:eb:3a:3c:42:54:bf:ac:c2:a7:36:
         b4:e0:57:36:aa:a6:28:83:c3:a1:1b:af:9a:1b:d5:2f:ae:cb:
         ce:bf:98:ca:29:1c:01:c4:ba:39:7c:aa:b2:47:e7:88:1c:dd:
         b1:c5:6d:0c:b0:e6:02:49:fa:b9:5f:bc:f1:19:84:77:e3:3a:
         64:1c:38:ba:d4:4c:ed:f8:cc:6f:01:8d:27:66:97:49:ab:09:
         1f:b7:1c:5d:eb:ff:2a:bc:3f:d0:7a:4b:fb:81:a7:21:61:5d:
         7f:c8:6d:b4:4c:0d:d4:06:13:9e:70:d4:60:77:b1:7d:87:4b:
         c7:43:65:d4:ea:9b:7d:9e:77:2e:42:a8:c1:a6:ed:ce:98:65:
         f0:f8:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----