Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/86f85c32c284fd9a5928ac128ef9422dff911fbb.roa
File:                     86f85c32c284fd9a5928ac128ef9422dff911fbb.roa (raw, json)
Hash identifier:          RLJd4AjOBoc+zuICE8Vwc9He7BIwwWX521e5CEJSJ7U=
Subject key identifier:   87:10:F7:54:D4:84:65:A5:35:F5:78:96:F2:40:BC:50:34:E5:80:8A
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       011687
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/86f85c32c284fd9a5928ac128ef9422dff911fbb.roa
Signing time:             Sun 31 Dec 2023 12:18:57 +0000
ROA not before:           Sun 31 Dec 2023 12:18:57 +0000
ROA not after:            Wed 31 Dec 2025 12:18:57 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71303 (0x11687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec 31 12:18:57 2023 GMT
            Not After : Dec 31 12:18:57 2025 GMT
        Subject: CN=86f85c32c284fd9a5928ac128ef9422dff911fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:0c:ed:ad:84:78:f5:ce:93:4b:ca:13:82:
                    93:24:f6:7c:8c:79:9a:4d:19:df:88:b3:23:da:55:
                    f2:ea:a4:27:0f:9e:41:6d:f6:ca:8f:9d:d6:a2:85:
                    49:f0:c0:ce:f0:fa:e7:7e:b7:91:8f:1d:3c:04:4a:
                    5b:49:2d:c1:85:b4:80:2b:26:0c:a0:be:11:0b:38:
                    a2:71:a2:ba:8d:04:80:25:a8:70:ff:e2:0e:d6:13:
                    c0:e9:05:36:e3:96:45:d1:01:85:1c:19:55:c0:50:
                    03:41:84:e2:da:64:06:6d:d9:8c:55:4f:2b:51:0f:
                    af:97:cf:6f:d1:fa:5f:f0:18:0d:55:31:24:8d:1c:
                    f3:bb:e7:92:1d:f9:c6:a5:c7:d9:20:fa:21:b2:de:
                    d2:2f:a5:8f:43:4e:4c:1b:b0:f6:58:2a:d7:0e:29:
                    a2:ad:05:e8:35:f3:22:9f:9a:33:47:52:8d:31:0d:
                    df:e7:76:18:ba:7d:41:cc:a5:ec:56:8c:a9:18:7c:
                    4f:44:f2:80:83:58:2d:96:9a:b8:6d:ec:68:64:b2:
                    87:47:e6:d1:56:7f:cd:42:1f:88:5a:28:98:02:32:
                    7c:54:f1:1c:dc:68:e4:20:ed:f6:44:89:30:60:65:
                    01:70:97:a7:49:bd:6e:b6:b0:4e:12:62:96:ee:9f:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:F7:54:D4:84:65:A5:35:F5:78:96:F2:40:BC:50:34:E5:80:8A
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/86f85c32c284fd9a5928ac128ef9422dff911fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:88:e2:6b:1b:57:0a:27:dc:37:5b:6e:a2:01:2e:d5:75:
         87:fd:84:5e:9c:0e:ae:88:7f:bf:71:57:ee:1d:cb:4e:22:c4:
         75:b2:f3:98:51:aa:31:7e:a5:7c:be:c4:48:b3:1f:1c:4e:11:
         ac:f9:dc:f9:80:9c:f3:d3:cd:2f:99:99:c5:38:9c:8f:3c:93:
         9a:43:b3:e8:39:8d:32:c2:60:a8:0d:91:e8:9a:02:32:4f:39:
         80:b4:11:6f:8a:e0:ac:46:06:01:dc:6e:d6:5d:52:af:13:a8:
         ef:34:ff:3e:53:a2:59:bb:64:aa:c0:42:a2:73:bc:e6:11:d0:
         bf:e1:52:e1:ab:58:37:57:26:cf:34:95:3c:21:5a:93:3c:59:
         49:da:0e:26:34:9c:40:b2:13:68:2d:97:19:e6:97:e8:d9:97:
         a2:56:cc:5a:c6:fa:3a:f2:35:fd:35:4f:3f:7a:34:0e:39:cd:
         e7:59:6c:23:46:0a:3d:d0:17:37:97:67:58:8c:95:89:86:eb:
         e1:19:69:e6:e7:a5:5f:1d:c6:d6:40:ca:09:6b:5f:4f:08:7b:
         4a:52:37:7a:b7:9d:d5:4a:92:1f:5e:92:6b:f2:fc:7f:88:e7:
         c2:df:7f:24:54:b4:20:27:a1:2b:31:d8:5b:e0:74:bc:ee:de:
         da:10:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----