Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/e03c163b64f4e53457d94eefe08e3157a200d727.roa
File:                     e03c163b64f4e53457d94eefe08e3157a200d727.roa (raw, json)
Hash identifier:          Fx+NDnggQIHitlLcNFML6Sy0BMx7HdAkbx1+vgzWlI4=
Subject key identifier:   8A:8A:5B:C2:7E:74:6F:87:AC:77:89:C4:FE:22:92:3F:24:17:23:F6
Certificate issuer:       /CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
Certificate serial:       10DC3B
Authority key identifier: 98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/e03c163b64f4e53457d94eefe08e3157a200d727.roa
Signing time:             Tue 06 Feb 2024 07:30:00 +0000
ROA not before:           Tue 06 Feb 2024 07:30:00 +0000
ROA not after:            Thu 05 Feb 2026 07:30:00 +0000
asID:                     272117
IP address blocks:        2803:8f10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104955 (0x10dc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9016dbbb30f681076e85c5aae05e7a2e38e274e1
        Validity
            Not Before: Feb  6 07:30:00 2024 GMT
            Not After : Feb  5 07:30:00 2026 GMT
        Subject: CN=e03c163b64f4e53457d94eefe08e3157a200d727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:24:3f:9e:f0:9f:83:c9:c3:58:08:cc:f6:
                    c3:06:54:10:bb:b6:05:89:38:d9:ee:bc:d0:e8:83:
                    53:fd:1d:c8:fb:0a:53:5c:fb:a1:d1:70:c3:8b:62:
                    7b:e8:2f:79:8e:fe:51:6f:61:be:3f:ab:fd:65:87:
                    fa:83:a1:c4:f5:70:ca:8d:17:ee:5d:ee:a6:57:23:
                    0c:af:ef:dd:9d:fb:5e:6d:3d:bd:16:08:1d:9e:4a:
                    b0:fa:67:fa:2e:17:c4:e4:0e:16:55:29:94:fb:2a:
                    bd:5d:d9:03:42:ed:31:8f:f2:f6:8e:70:6b:3f:f5:
                    44:cf:5a:26:d9:e2:e7:96:72:02:99:07:8d:7d:65:
                    06:f4:8e:1e:5c:f5:59:26:46:ec:f2:fd:00:5b:da:
                    6a:c6:30:43:c3:ec:5b:9c:b9:08:81:86:43:54:c1:
                    fe:49:31:82:df:fc:03:e8:9d:75:c7:85:04:1b:84:
                    d1:fe:ed:07:2c:a4:33:b7:09:10:3b:c4:b5:52:63:
                    17:6f:f1:e0:61:64:bc:22:fd:ff:64:8f:49:9a:c5:
                    5e:aa:7d:a2:94:3c:76:14:d4:46:28:73:3a:21:af:
                    be:b1:83:c1:2e:af:a5:5d:66:7c:da:5c:f6:82:59:
                    9c:fa:d3:55:83:43:e1:1e:9f:74:e6:46:80:7d:fe:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:5B:C2:7E:74:6F:87:AC:77:89:C4:FE:22:92:3F:24:17:23:F6
            X509v3 Authority Key Identifier:
                keyid:98:7D:03:DA:94:57:29:BB:86:6D:34:CB:84:FB:AD:A2:01:AA:BC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9016dbbb30f681076e85c5aae05e7a2e38e274e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/e03c163b64f4e53457d94eefe08e3157a200d727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/037494ab-8adf-4027-975a-97a96093502f/9016dbbb30f681076e85c5aae05e7a2e38e274e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:3f:10:f5:32:6b:a6:79:1f:ad:7d:9c:85:08:4c:bf:21:
         d5:59:03:89:57:47:a7:04:d9:c7:aa:64:7a:77:68:49:4e:b6:
         a4:30:22:94:e4:59:5d:bb:9b:1f:aa:58:a8:49:33:2a:6c:ec:
         64:ab:8f:06:49:fb:1c:0f:7c:c4:56:6a:f7:93:42:02:7f:71:
         11:79:8a:2e:eb:b3:95:7d:bb:12:2b:a2:5c:67:fd:0d:17:e5:
         63:d5:27:cc:5b:e0:15:f4:c2:44:1b:e2:08:cf:41:47:0e:d8:
         c7:93:f0:d9:4c:3e:5b:c7:8e:5d:3f:63:99:c7:77:0f:68:50:
         d5:64:e3:71:7a:eb:b6:85:33:83:3b:62:9e:c9:e8:a6:9f:28:
         d5:c8:81:58:5a:1b:86:36:89:d6:13:54:e1:cc:28:5e:89:fe:
         bd:3b:db:25:4f:bc:aa:f0:10:80:d9:6c:15:8c:57:60:83:38:
         03:a3:ae:7d:87:e7:f3:d3:7d:87:c8:8e:8f:1e:1a:b6:91:f6:
         0c:62:0a:0d:4e:15:dd:c0:40:0d:a3:05:84:b0:5a:26:a4:56:
         ba:2b:b9:29:8a:40:cd:14:ac:7c:b9:9b:bf:29:9a:b0:7e:8a:
         97:7a:97:06:0e:b1:d2:a9:63:ba:c9:08:e8:29:d4:dc:35:77:
         8c:11:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----