Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/6442fafe10c72b58926f3bf27b4b5361a1bbfd93.roa
File:                     6442fafe10c72b58926f3bf27b4b5361a1bbfd93.roa (raw, json)
Hash identifier:          rFqki8var1PMCwZ8SeHyNMtfx3gOuMvAsvMIZ7nQtns=
Subject key identifier:   56:0F:CF:D7:7E:A1:44:3F:57:73:7E:B0:E0:5E:76:AC:67:B0:64:3D
Certificate issuer:       /CN=905b46fff5683184231e0110f383972f42161459
Certificate serial:       0F8D0B
Authority key identifier: F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/6442fafe10c72b58926f3bf27b4b5361a1bbfd93.roa
Signing time:             Sat 15 Apr 2023 18:47:44 +0000
ROA not before:           Fri 14 Apr 2023 03:00:00 +0000
ROA not after:            Tue 15 Apr 2025 03:00:00 +0000
asID:                     271941
IP address blocks:        2803:c610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019147 (0xf8d0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905b46fff5683184231e0110f383972f42161459
        Validity
            Not Before: Apr 14 03:00:00 2023 GMT
            Not After : Apr 15 03:00:00 2025 GMT
        Subject: CN=6442fafe10c72b58926f3bf27b4b5361a1bbfd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:0c:6b:09:81:d0:2a:b5:07:52:90:73:31:
                    4b:d4:0d:4b:53:47:bf:21:00:2b:37:7a:9b:f1:f8:
                    4b:46:88:7d:2f:e6:e8:7e:cc:9e:12:54:ac:8e:06:
                    2f:e4:1e:39:6a:c8:41:7c:3a:f9:ab:b8:84:58:4c:
                    e7:0d:80:0b:3f:c5:b7:0d:1a:65:9c:b2:cb:64:5a:
                    f3:2a:bc:af:b5:a7:da:f3:8c:98:a6:37:a5:17:35:
                    cf:92:fc:e6:f1:17:d3:6c:b3:b4:a1:d2:7a:a9:8b:
                    e6:9b:9a:b9:71:2c:27:99:48:bb:ed:c0:d6:60:16:
                    c2:21:38:bc:2e:50:c8:33:f8:2f:a3:b6:39:22:6f:
                    ac:d4:02:e0:60:83:39:cb:9f:41:cb:02:fc:79:c0:
                    53:1c:ff:87:e0:c6:03:d7:89:1e:0a:91:3b:6c:13:
                    76:5d:27:8f:a2:07:64:94:ed:1e:cd:c7:4d:89:6a:
                    77:6b:aa:24:7a:22:c4:11:22:76:83:2f:e9:dc:6d:
                    ee:84:ef:ab:54:7e:3b:11:da:55:39:b2:eb:31:dc:
                    80:12:af:1c:bc:4f:83:94:b3:ba:eb:f0:70:38:83:
                    8f:2b:33:b7:a9:ae:05:a3:e8:5d:f4:11:6a:76:01:
                    2a:92:98:f4:ff:86:f6:9e:ea:d2:d2:33:2f:96:63:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:CF:D7:7E:A1:44:3F:57:73:7E:B0:E0:5E:76:AC:67:B0:64:3D
            X509v3 Authority Key Identifier:
                keyid:F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/6442fafe10c72b58926f3bf27b4b5361a1bbfd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/905b46fff5683184231e0110f383972f42161459.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:3e:15:24:9b:81:5e:a9:4f:d3:b6:de:68:b9:a3:90:92:10:
         c0:16:f1:b9:45:4c:5b:06:b4:0a:56:81:29:d8:25:83:d3:86:
         eb:37:37:b2:a3:59:bc:71:24:cb:b2:f3:e0:4c:1d:7d:e4:c4:
         ae:48:e6:d4:50:69:18:90:ad:d0:d1:5c:50:31:4a:af:13:97:
         22:cf:3a:56:24:24:4c:2f:a9:c2:c2:b1:b6:a2:8f:cb:91:76:
         75:12:8c:7f:0a:be:ce:55:ba:34:b5:4e:78:fe:91:ca:01:69:
         16:83:61:32:c4:00:90:e0:3a:26:1c:60:33:4e:0b:d7:5c:2d:
         89:24:e1:0f:d9:c7:86:7e:05:bf:58:4c:b5:54:7e:57:45:f0:
         8d:c7:33:71:c4:aa:56:9e:af:da:48:cd:83:d7:c2:c5:af:cc:
         8e:6c:34:84:f4:94:bb:16:93:97:79:14:95:e6:e5:b4:0b:e0:
         46:c8:82:7b:0f:91:e6:da:2c:47:f0:9b:3b:40:88:d7:6b:b9:
         a6:0c:68:9d:cf:97:57:e8:de:f0:0e:45:db:28:c9:98:18:81:
         f8:ff:5b:dc:a9:b8:f9:95:31:05:f0:cf:fb:47:05:48:13:c7:
         74:28:31:d4:f7:f9:5b:08:41:8d:6f:bb:0e:15:d5:00:f8:54:
         62:e5:06:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----