Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/33e54fd9acb81ad7c1356025c3a68acaed3d8258.roa
File:                     33e54fd9acb81ad7c1356025c3a68acaed3d8258.roa (raw, json)
Hash identifier:          INDdlKW1s9ffFj8Z9Cp2ZdWkC0k8VqTljMUKpVnsh5I=
Subject key identifier:   58:07:81:8F:02:7C:17:87:AA:F6:BF:CF:55:35:95:B0:EC:B7:C5:04
Certificate issuer:       /CN=faa3f9ed8c16ed5c1a56631f167199f123daf7d1
Certificate serial:       B5F8
Authority key identifier: FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/33e54fd9acb81ad7c1356025c3a68acaed3d8258.roa
Signing time:             Thu 25 Jan 2024 21:54:01 +0000
ROA not before:           Thu 25 Jan 2024 21:54:01 +0000
ROA not after:            Sun 25 Jan 2026 21:54:01 +0000
asID:                     273126
IP address blocks:        2803:c450::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46584 (0xb5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa3f9ed8c16ed5c1a56631f167199f123daf7d1
        Validity
            Not Before: Jan 25 21:54:01 2024 GMT
            Not After : Jan 25 21:54:01 2026 GMT
        Subject: CN=33e54fd9acb81ad7c1356025c3a68acaed3d8258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:2b:a4:fc:0b:82:01:70:bd:ed:08:12:53:
                    c5:65:23:4f:af:f8:21:0f:9d:20:7c:62:9e:3b:77:
                    ab:ca:e0:10:7e:3d:16:68:3f:d3:98:79:40:52:aa:
                    87:d3:a1:08:6b:20:b9:b8:f2:19:d8:e0:23:c6:ca:
                    ee:3d:fa:4b:cf:79:65:48:9a:fa:a5:ce:ad:6a:f6:
                    bc:30:93:95:b8:28:44:d9:2d:34:b0:b1:2f:31:bb:
                    27:ab:73:07:4d:4d:1d:2f:64:4d:cc:06:36:e6:64:
                    ab:17:f5:d0:97:3b:d5:8f:35:ca:9a:0e:67:da:25:
                    76:b3:45:2e:7d:cd:3a:70:c6:29:dd:a8:a4:ba:d4:
                    54:6b:af:a5:b3:3e:83:5b:85:12:6d:a1:f0:a2:c0:
                    96:2a:f7:6d:1f:56:48:74:ac:06:a3:e8:4e:d6:08:
                    00:60:43:f3:45:e9:5e:f6:96:bb:83:69:e6:bd:0c:
                    3b:05:c3:b4:ee:4d:ae:7e:88:2c:a3:98:02:46:4f:
                    c0:23:40:9d:3f:41:7c:3e:08:42:f7:3a:91:b2:97:
                    36:2f:e9:61:71:0f:e0:c1:73:71:4e:5b:1c:c9:12:
                    8f:10:1e:fc:d6:f0:05:3d:58:56:64:b2:e3:ff:2a:
                    fe:1d:cc:14:0b:5e:e6:b7:35:1e:6a:f6:0b:e0:53:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:81:8F:02:7C:17:87:AA:F6:BF:CF:55:35:95:B0:EC:B7:C5:04
            X509v3 Authority Key Identifier:
                keyid:FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/33e54fd9acb81ad7c1356025c3a68acaed3d8258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c450::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:46:67:ae:03:b1:75:de:fa:f0:5e:ae:d4:f9:26:7e:03:
         22:4c:48:18:8b:63:dc:63:75:1e:c5:51:96:21:ce:38:77:f2:
         eb:e7:19:40:30:2a:e4:17:8d:ac:8d:64:f9:0b:b9:d4:cb:67:
         4b:f6:13:91:bf:3c:e4:49:d7:f0:be:39:a8:0b:80:cc:29:cf:
         a9:f1:1e:86:4a:b5:50:e6:c6:e4:4a:94:ff:b9:1d:d1:f4:73:
         82:20:bf:7f:e3:56:17:f2:29:d7:a5:7a:fc:5c:4c:55:91:9a:
         7a:e3:1f:b7:97:49:03:86:e1:b5:43:ce:4d:4a:58:bf:c4:ff:
         11:d1:60:36:3c:50:f4:a7:b5:f7:6d:af:a0:22:e6:37:92:41:
         a6:78:2f:5c:92:04:78:0e:49:8f:6b:bc:49:74:9a:f6:4a:e8:
         70:23:75:dc:ee:8d:01:07:0e:2a:67:1a:d0:04:a2:35:5c:05:
         90:3c:c4:2e:17:58:b4:8e:a7:b9:6e:b1:66:53:56:3c:40:e7:
         aa:2d:fb:2d:a2:4f:c2:43:ce:50:e7:78:55:82:f3:74:ac:2d:
         30:cf:04:97:f9:3e:14:db:68:a8:4d:36:3f:ac:48:0c:e1:72:
         6c:4e:c9:f3:ec:88:69:4a:f3:13:a3:c3:6f:91:d5:c5:c7:68:
         40:9d:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----