Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/b696292d31e5e3d88d9a2dd8522f131bfb317dc0.roa
File:                     b696292d31e5e3d88d9a2dd8522f131bfb317dc0.roa (raw, json)
Hash identifier:          /5pMYWuffw9YqvanCOwUHxJO2m74xLGxp1xIkDtnEvc=
Subject key identifier:   A5:56:26:41:CE:EB:61:C7:84:43:E5:AC:CE:EC:11:FA:79:4B:EE:39
Certificate issuer:       /CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
Certificate serial:       031C9D
Authority key identifier: 88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/b696292d31e5e3d88d9a2dd8522f131bfb317dc0.roa
Signing time:             Fri 10 Nov 2023 18:46:04 +0000
ROA not before:           Fri 10 Nov 2023 18:46:03 +0000
ROA not after:            Mon 10 Nov 2025 18:46:03 +0000
asID:                     273019
IP address blocks:        2803:3c90::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203933 (0x31c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
        Validity
            Not Before: Nov 10 18:46:03 2023 GMT
            Not After : Nov 10 18:46:03 2025 GMT
        Subject: CN=b696292d31e5e3d88d9a2dd8522f131bfb317dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:ae:e8:4b:35:1f:e7:6f:7c:de:15:92:3a:
                    47:f7:ee:23:f7:86:3e:a8:23:1c:41:53:6f:44:65:
                    d5:6a:a2:db:df:fc:26:71:3f:18:be:f2:2d:f8:41:
                    60:e0:52:4a:90:f6:10:19:cf:8a:95:ba:ee:a3:18:
                    2f:95:bf:ea:4b:3f:94:9a:82:a9:2c:e8:de:44:94:
                    b1:0b:7f:a0:ef:c7:72:4f:6e:e1:d9:59:32:72:24:
                    cb:b6:14:a7:66:6e:db:95:a8:91:41:84:f3:a8:6b:
                    97:68:06:46:02:fd:a5:df:87:09:df:03:1b:bf:a2:
                    55:b2:af:dc:e0:72:a3:c1:93:69:ae:0d:3a:58:d3:
                    86:ec:25:7b:ad:21:d5:d8:6e:73:98:a0:6d:24:25:
                    98:11:e5:c7:d1:a3:0b:32:c0:be:58:19:bb:53:c2:
                    ae:d6:a9:09:4a:7f:78:41:31:3a:f6:64:93:aa:8e:
                    9a:9b:ae:ee:86:1b:c1:c8:fb:0f:6f:4a:56:74:1d:
                    de:85:af:40:8c:d8:02:90:43:4f:3e:cd:6f:7f:3b:
                    68:7c:66:b1:a5:7a:cb:48:2d:a7:92:d2:57:c1:1e:
                    fc:b1:55:e9:b0:43:a2:75:69:d2:4f:b9:e1:3a:7e:
                    d5:69:2f:0d:40:cc:c4:1c:20:92:94:c9:84:7c:65:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:26:41:CE:EB:61:C7:84:43:E5:AC:CE:EC:11:FA:79:4B:EE:39
            X509v3 Authority Key Identifier:
                keyid:88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/b696292d31e5e3d88d9a2dd8522f131bfb317dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         e7:0d:8f:2e:74:75:d9:63:b9:c6:d9:05:f8:cc:7b:a5:be:c7:
         b4:83:85:cc:30:b7:63:be:ef:21:01:8f:c9:47:a0:66:dd:dd:
         20:3e:a2:6d:05:55:bc:5c:c0:38:6a:37:01:7c:a3:1c:77:dd:
         db:22:c5:40:0f:a9:74:d0:99:9d:52:8a:50:27:da:1b:d5:df:
         e1:d8:a7:a8:9b:dd:c3:c2:70:3b:3c:e3:93:35:cb:5f:9a:90:
         8d:1c:59:4b:cf:43:c4:9a:a3:0a:3a:28:45:c9:d9:48:22:ec:
         fb:22:de:4e:dc:5d:4b:50:3f:ea:3e:80:f8:36:6e:cd:d7:7e:
         4b:3d:bb:8c:2c:e4:f4:0e:84:96:90:73:e2:2e:b9:61:a6:35:
         82:73:33:1e:b7:e8:91:f5:16:93:04:a7:32:60:d2:7f:66:45:
         a2:55:b9:32:61:76:2c:f9:f2:af:bc:06:64:17:f2:83:6c:df:
         4d:b2:d9:62:23:db:00:c0:bf:f8:98:f4:fb:8f:26:e3:f0:a1:
         56:19:f7:a5:57:81:ee:f6:85:b1:e8:a7:aa:0a:aa:bc:88:59:
         ed:9b:f6:df:b8:13:94:99:91:21:59:44:27:f9:21:c7:fe:1e:
         d1:cd:ac:88:05:9b:eb:8d:42:55:39:69:c3:2d:7f:44:f4:60:
         d4:14:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----