Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/591baf67b5bf2d4e9ed2e59f3ea1bf3c5da71c4e.roa
File:                     591baf67b5bf2d4e9ed2e59f3ea1bf3c5da71c4e.roa (raw, json)
Hash identifier:          krJzzzmkbpULu2Xw1oAV9MFVaH+zVvxWIj5HrOFBnvY=
Subject key identifier:   F0:C2:74:62:D5:A6:8C:6B:96:26:C6:4F:62:D6:78:9F:47:0F:76:CD
Certificate issuer:       /CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
Certificate serial:       031661
Authority key identifier: 88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/591baf67b5bf2d4e9ed2e59f3ea1bf3c5da71c4e.roa
Signing time:             Fri 10 Nov 2023 18:43:49 +0000
ROA not before:           Fri 10 Nov 2023 18:43:48 +0000
ROA not after:            Mon 10 Nov 2025 18:43:48 +0000
asID:                     28114
IP address blocks:        2803:3c90::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202337 (0x31661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
        Validity
            Not Before: Nov 10 18:43:48 2023 GMT
            Not After : Nov 10 18:43:48 2025 GMT
        Subject: CN=591baf67b5bf2d4e9ed2e59f3ea1bf3c5da71c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:a0:4d:e7:f4:c4:84:88:b3:80:c0:48:20:
                    b5:e4:a1:e8:c7:a5:0f:3c:64:17:33:0c:77:54:8a:
                    62:37:ab:59:74:7f:6a:cd:d2:e5:bc:8d:20:af:9b:
                    3e:44:95:38:84:63:da:66:7b:d2:3c:81:aa:da:46:
                    37:70:07:15:c8:0b:6e:53:61:ab:4b:ef:83:50:82:
                    0c:cf:58:6d:d6:72:80:1b:8f:fa:ea:81:d9:0e:a9:
                    fc:d7:71:d4:4a:f8:1f:4e:88:55:b3:bc:27:a6:44:
                    75:38:25:0f:98:0c:cc:1c:1a:1d:2d:33:5b:5c:c9:
                    84:d3:35:fe:5f:84:45:2d:0d:a3:19:77:b3:40:3b:
                    19:c1:6c:7a:5d:5c:93:cf:76:ce:8f:8c:21:5b:01:
                    c4:90:94:19:41:b7:8f:89:6d:28:bb:02:7d:b3:32:
                    db:21:9a:93:97:d0:ad:aa:9e:8b:9b:04:34:b6:f4:
                    ec:80:aa:90:12:d2:38:7e:c6:0a:26:59:d5:ee:a6:
                    e2:bb:77:61:c3:4d:8b:e4:6c:dd:81:24:18:f4:46:
                    38:f7:9d:42:a1:c3:1b:72:de:15:95:4e:bd:d6:19:
                    29:7a:4b:8c:52:6e:4a:89:4a:3d:94:e5:ff:e2:81:
                    a0:3b:14:c5:cc:72:62:be:22:b0:f5:c4:12:17:79:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:74:62:D5:A6:8C:6B:96:26:C6:4F:62:D6:78:9F:47:0F:76:CD
            X509v3 Authority Key Identifier:
                keyid:88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/591baf67b5bf2d4e9ed2e59f3ea1bf3c5da71c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:62:5a:f3:72:69:06:42:a9:26:24:86:9f:7a:de:b7:7d:89:
         17:07:b4:5d:7e:62:5f:22:91:4b:fe:38:5a:3c:f7:b3:d7:70:
         bc:a6:09:e9:65:fb:c4:10:26:09:5e:ee:dc:29:31:e8:b5:e7:
         92:ef:c2:93:66:7f:f3:6a:d6:3d:11:e4:03:f9:a1:a3:41:8d:
         11:f0:45:7c:74:e9:a1:d9:16:21:44:a2:2f:6a:16:05:ea:fe:
         ec:31:82:aa:d8:74:df:fe:77:a9:7c:65:90:ae:99:62:1b:fa:
         b1:df:8a:9a:8f:15:33:63:38:a8:2d:f4:67:37:65:9b:69:54:
         65:bf:ca:48:50:fb:0b:41:2f:33:96:55:fb:2a:7f:ac:29:43:
         75:bb:7f:98:41:de:f5:23:89:ab:1b:13:a7:90:f2:c1:91:fd:
         f2:9e:1c:df:2b:ee:5f:9a:99:06:71:13:b2:d3:0d:3d:3c:9e:
         f4:91:08:f9:a2:33:48:d1:80:bc:ae:e8:aa:18:9b:e4:c0:9c:
         c0:d4:b5:f8:07:e3:14:b9:70:8c:e4:d1:88:9e:0b:59:b4:0d:
         ca:ee:ba:ec:23:0a:54:37:b3:9d:be:c4:bd:03:c2:ef:ab:62:
         a7:90:1f:d1:f0:aa:c5:a3:93:2d:51:28:3b:7d:ed:6f:46:0e:
         b9:cf:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----