Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ebf3ca1f1aa9ee1e05313d000d795182b0b26255.roa
File:                     ebf3ca1f1aa9ee1e05313d000d795182b0b26255.roa (raw, json)
Hash identifier:          PTr1CY96KTTKo9ee0tvSKU2A6f+O2lg8ZvbHPDn66ZA=
Subject key identifier:   24:20:0B:F6:A3:2A:11:00:16:B6:90:C3:1C:95:D9:3A:12:A0:17:77
Certificate issuer:       /CN=ad8c36c507af96fcaa01a28345aaa933b573ddf3
Certificate serial:       0D4E
Authority key identifier: D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ebf3ca1f1aa9ee1e05313d000d795182b0b26255.roa
Signing time:             Thu 11 Jan 2024 17:31:17 +0000
ROA not before:           Thu 11 Jan 2024 17:31:17 +0000
ROA not after:            Sun 11 Jan 2026 17:31:17 +0000
asID:                     273149
IP address blocks:        2801:155::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8c36c507af96fcaa01a28345aaa933b573ddf3
        Validity
            Not Before: Jan 11 17:31:17 2024 GMT
            Not After : Jan 11 17:31:17 2026 GMT
        Subject: CN=ebf3ca1f1aa9ee1e05313d000d795182b0b26255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:b0:b1:7b:80:68:6c:6b:9e:53:9c:c5:da:
                    49:4f:62:e0:a7:07:cf:58:ee:c1:42:47:ea:ab:a0:
                    99:d5:b3:7b:c5:65:2c:d0:5f:fe:88:81:cc:77:a4:
                    c8:18:19:59:e9:0e:1d:80:46:37:b0:f6:43:30:96:
                    36:62:7d:d8:a2:02:ea:81:14:ef:13:4c:f1:ac:50:
                    17:93:5b:d1:5f:62:12:e0:2d:39:bf:aa:20:a9:d7:
                    06:e3:56:56:9a:bd:96:88:bc:fa:9f:c6:4e:d4:61:
                    68:3d:91:f9:bb:af:a8:11:da:f2:aa:8b:e8:69:21:
                    98:78:ca:ef:11:94:b5:54:96:0e:70:f2:6c:8e:fe:
                    1f:24:f9:98:08:97:cc:3c:d2:55:0f:4b:ce:53:06:
                    da:02:ba:b4:0f:e8:df:58:a1:be:a7:ee:85:ad:30:
                    d0:be:9f:08:e6:0a:22:19:23:dd:31:13:00:6d:64:
                    92:48:34:22:51:ee:93:aa:54:0d:d4:93:62:a1:8c:
                    3c:7a:be:fc:91:a8:5f:0d:96:3a:14:91:d9:13:2c:
                    25:f3:cd:0f:8b:28:a6:4b:fa:77:58:b0:e2:37:29:
                    fc:0e:dc:58:4f:34:0a:12:9a:76:95:ae:f9:35:02:
                    7c:2d:46:66:c3:ee:d3:2b:fd:a8:af:be:6d:62:67:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:20:0B:F6:A3:2A:11:00:16:B6:90:C3:1C:95:D9:3A:12:A0:17:77
            X509v3 Authority Key Identifier:
                keyid:D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ebf3ca1f1aa9ee1e05313d000d795182b0b26255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ad8c36c507af96fcaa01a28345aaa933b573ddf3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:155::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:48:04:1a:f8:11:9a:fe:4e:97:01:c3:69:13:58:77:da:d7:
         19:f0:d1:42:90:8c:ad:33:fb:b3:d4:c5:ad:39:ba:61:76:a6:
         6d:46:2a:08:bb:5f:d8:63:05:57:bc:94:17:f6:81:03:08:24:
         62:2c:85:97:a8:41:90:91:a6:38:21:3b:b5:5d:6f:61:98:7c:
         b7:76:a1:73:73:cb:a6:28:b5:bd:67:53:1f:c2:16:f4:23:1f:
         85:bf:8c:4c:74:8f:d3:38:49:6a:bb:19:e9:94:e8:5c:6f:82:
         31:3a:d2:03:48:42:c4:88:48:eb:56:52:fd:4f:90:46:0e:8c:
         06:66:94:87:9b:1b:c9:82:69:29:6d:91:fc:4a:90:cd:72:74:
         72:99:08:d6:64:2a:cf:04:08:e7:78:bf:ba:57:51:00:54:d7:
         69:a6:b6:b0:20:85:36:f2:b9:69:32:8b:ec:a3:3f:62:56:de:
         81:f4:dc:d0:88:23:75:ff:43:11:e2:fc:5d:b2:79:d5:7d:0c:
         b1:c7:1f:ba:a3:36:cb:6f:b7:3a:92:9f:92:a5:35:c6:63:ab:
         11:00:bd:f8:12:94:37:3c:02:dd:48:78:6f:16:90:6d:10:4a:
         8c:ba:0d:ac:aa:20:52:3d:6d:71:cd:77:7d:bb:4a:79:f2:51:
         c9:11:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----