Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/903fa82eed3ab9dd7a36a2ebff1aecd9f8615bd2.roa
File:                     903fa82eed3ab9dd7a36a2ebff1aecd9f8615bd2.roa (raw, json)
Hash identifier:          FZQIBXLhnpXAu10ZqdYTPCTvVPK9i04/WeWubXqjBkY=
Subject key identifier:   9F:A3:74:E0:C3:83:5C:64:01:67:63:E0:1B:D4:16:9B:FD:7A:9E:9E
Certificate issuer:       /CN=3ebe12192c5a777cd4ac7f461d9df9d8027ae845
Certificate serial:       78FC
Authority key identifier: A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/903fa82eed3ab9dd7a36a2ebff1aecd9f8615bd2.roa
Signing time:             Fri 03 Feb 2023 15:29:30 +0000
ROA not before:           Wed 01 Feb 2023 15:25:59 +0000
ROA not after:            Mon 03 Feb 2025 15:25:59 +0000
asID:                     262186
IP address blocks:        2801:159:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30972 (0x78fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebe12192c5a777cd4ac7f461d9df9d8027ae845
        Validity
            Not Before: Feb  1 15:25:59 2023 GMT
            Not After : Feb  3 15:25:59 2025 GMT
        Subject: CN=903fa82eed3ab9dd7a36a2ebff1aecd9f8615bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:ab:bb:56:af:38:c3:48:48:81:17:c3:1c:
                    a2:79:f8:53:25:80:8f:39:e2:45:03:a3:00:69:0e:
                    04:53:11:e8:1c:87:f4:de:ed:55:cc:d7:91:44:9c:
                    09:d5:b0:9f:8b:6b:53:07:2e:b2:10:19:3f:21:1f:
                    45:dc:83:2c:8e:62:d1:b3:eb:a9:5d:39:9a:0f:4f:
                    4b:0f:a8:50:30:36:2c:81:9e:79:7f:93:40:fd:44:
                    ee:08:91:cb:99:0e:58:85:72:cf:31:d7:a2:ae:eb:
                    a9:fd:25:e5:a4:0b:d1:75:b5:3c:82:eb:32:c2:10:
                    bb:1d:73:3b:e7:11:f6:42:8c:14:72:f9:60:8d:b5:
                    f0:a7:d7:d5:ab:11:69:42:e9:05:df:99:1c:a0:83:
                    aa:dd:ec:65:62:3e:21:e6:f8:2a:8c:29:58:3d:21:
                    7a:f9:73:b4:65:ce:dd:c3:d6:79:20:0a:13:cc:e4:
                    fb:a7:6b:29:16:01:cf:bb:f6:de:9b:1a:fa:1a:ba:
                    41:84:6c:83:70:d7:ba:2b:88:c9:5c:92:af:ee:a4:
                    e8:b5:87:cf:d0:60:7f:76:2b:d9:f8:3e:6f:9b:13:
                    37:07:e3:df:c4:10:78:95:89:40:25:92:87:01:88:
                    fb:fc:f9:88:cf:77:46:91:23:f1:ac:77:d6:d5:5a:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:74:E0:C3:83:5C:64:01:67:63:E0:1B:D4:16:9B:FD:7A:9E:9E
            X509v3 Authority Key Identifier:
                keyid:A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/903fa82eed3ab9dd7a36a2ebff1aecd9f8615bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:f5:65:dd:f1:03:0a:27:32:e4:bb:81:dc:1a:3b:32:c4:
         7c:ce:cd:e8:e6:2c:4a:a7:3f:d0:da:50:37:58:dd:b4:78:2b:
         00:64:fa:66:fc:de:69:1a:3e:09:2d:04:35:5b:0c:b8:b8:c0:
         9a:e4:44:6f:f2:6c:97:96:f5:c5:d5:64:71:ee:54:91:46:8e:
         a6:90:25:83:7f:5d:db:53:f7:fd:e8:00:3d:02:be:aa:5c:25:
         38:9c:87:30:ec:78:46:f9:28:74:43:bb:4f:c0:c2:64:09:8f:
         a1:c3:ac:e1:4a:01:95:7a:e0:d2:2f:36:33:9b:68:64:6c:4e:
         fc:20:fd:88:eb:4d:4d:c9:13:d6:34:17:a1:8a:13:bc:85:7e:
         5f:a5:2e:47:05:54:c3:99:ce:ab:1b:42:2e:58:e6:e8:06:e7:
         9b:24:8d:56:33:42:8f:ef:8e:3d:e9:cd:fb:17:2e:fb:7f:63:
         50:0b:ca:ae:38:6e:63:36:81:c2:7e:b9:02:60:5a:e7:33:7b:
         17:ef:3d:f4:41:bc:13:c3:b9:39:63:7a:48:9b:33:dd:e8:e9:
         be:4f:05:b8:f4:da:f7:c6:93:45:d0:4f:89:51:5f:3e:0d:24:
         a1:8a:d2:0c:98:06:98:c2:c0:96:6d:1c:70:92:17:f9:c0:93:
         e2:46:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----