Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/98aa986f296e86a5f12a90495238c701e683ddec.roa
File:                     98aa986f296e86a5f12a90495238c701e683ddec.roa (raw, json)
Hash identifier:          GZs0hPSlIM53DHP7zUfjf11rNnAkFdxyND9UxjjZcLQ=
Subject key identifier:   2F:1C:88:DF:D4:3C:8D:CC:5E:4E:5C:1C:48:C6:C5:F5:89:4A:BB:82
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       0548
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/98aa986f296e86a5f12a90495238c701e683ddec.roa
Signing time:             Tue 05 Sep 2023 03:50:50 +0000
ROA not before:           Mon 04 Sep 2023 03:50:50 +0000
ROA not after:            Fri 05 Sep 2025 03:50:50 +0000
asID:                     273072
IP address blocks:        2803:cf90:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Sep  4 03:50:50 2023 GMT
            Not After : Sep  5 03:50:50 2025 GMT
        Subject: CN=98aa986f296e86a5f12a90495238c701e683ddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:53:c8:8c:dc:00:19:f5:84:d8:89:c8:99:
                    c4:f6:b8:ae:f2:bd:5d:c1:13:0a:0d:39:ed:4d:2a:
                    b4:d1:cc:bb:1e:46:72:ea:bf:b8:96:c8:bb:40:75:
                    f6:71:c6:7e:6b:8a:d2:f2:eb:19:c9:d9:95:4e:26:
                    33:7f:ad:67:99:79:e6:66:5c:89:34:ca:8b:06:86:
                    b8:45:b7:1a:e9:30:8d:c5:01:53:d9:8f:e3:80:4a:
                    a6:af:2e:74:cd:f3:8b:64:e1:bc:c3:eb:51:73:59:
                    fd:b8:e1:f3:21:7d:d1:4c:9f:1b:7c:60:a5:ee:a7:
                    fc:aa:a1:8d:42:32:ac:96:2d:ff:f0:94:d9:06:f6:
                    95:da:1f:4e:b4:07:ec:61:6c:2e:f7:b5:0f:2f:1a:
                    8f:9a:b0:15:db:8d:35:5a:d5:6c:35:97:7f:97:f3:
                    06:ea:f5:bc:fc:d9:7e:e0:0e:e7:82:40:2f:2b:00:
                    25:5a:b6:70:bc:8f:ee:91:26:e0:1c:5f:6f:51:a5:
                    c8:d2:7f:61:5d:2c:f8:f7:29:48:b5:cc:06:d1:5c:
                    91:74:42:16:a1:08:d4:24:3f:6c:64:95:5a:b5:f1:
                    16:51:96:fb:dd:68:5e:3c:63:17:8f:02:94:48:45:
                    90:d2:41:5e:00:a5:43:f6:62:c2:92:44:ed:47:27:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:88:DF:D4:3C:8D:CC:5E:4E:5C:1C:48:C6:C5:F5:89:4A:BB:82
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/98aa986f296e86a5f12a90495238c701e683ddec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:a7:cd:e1:17:97:bb:d9:1a:57:43:59:f4:f7:61:d0:0e:
         17:ab:2d:49:94:9d:d8:cb:bf:7b:be:57:8a:84:32:07:5e:8f:
         d2:a1:1a:7e:f6:06:0c:88:5c:c9:1b:ef:0c:dd:58:9f:6e:44:
         b9:9f:32:2a:85:4b:cf:37:c0:94:d0:10:09:6a:07:df:25:67:
         55:42:87:0b:79:69:51:93:9b:c2:21:01:f3:6f:4a:ed:26:cb:
         22:79:76:0f:eb:14:d4:8c:10:38:73:97:a7:10:c9:be:43:8b:
         55:85:e1:95:81:f7:99:29:b1:e1:db:5d:e6:05:ec:9c:be:23:
         f3:89:80:c1:fe:f2:3d:4a:91:1a:ed:e8:22:95:75:bb:45:3d:
         c0:b8:51:98:32:cd:f8:62:01:35:8e:ce:9d:06:f8:26:ae:a3:
         02:83:40:9f:1a:f3:1e:c8:02:58:62:90:40:07:62:d9:ef:b9:
         2c:80:6c:35:e7:1e:16:96:1d:92:e1:78:aa:0b:8e:97:97:54:
         78:73:86:4e:c9:10:3e:72:26:91:fd:47:c7:30:82:58:7b:bd:
         d3:2f:0f:c7:f5:66:64:e2:f8:30:f0:d0:81:cc:a4:06:51:87:
         6f:32:66:00:e9:05:76:ef:06:15:dd:6d:9d:1a:8f:35:4a:14:
         53:d8:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----