Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/7b7f893cc93b91c13a57586ea1a0d1729a9198a1.roa
File:                     7b7f893cc93b91c13a57586ea1a0d1729a9198a1.roa (raw, json)
Hash identifier:          IQ4bbcBEEOUpWCS2aVOM18TnjAAYdU9ZdpwNx6IK8hA=
Subject key identifier:   2D:C9:0A:EE:EB:F0:D7:3D:D4:D5:41:83:97:61:4A:2F:25:5E:F7:68
Certificate issuer:       /CN=96da91711589e877379a24b4e7e81faaa3d64334
Certificate serial:       0E340A
Authority key identifier: CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/7b7f893cc93b91c13a57586ea1a0d1729a9198a1.roa
Signing time:             Thu 30 Nov 2023 06:42:06 +0000
ROA not before:           Thu 30 Nov 2023 06:42:06 +0000
ROA not after:            Sun 30 Nov 2025 06:42:06 +0000
asID:                     269978
IP address blocks:        2803:ee0::/48 maxlen: 48
                          2803:ee0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930826 (0xe340a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96da91711589e877379a24b4e7e81faaa3d64334
        Validity
            Not Before: Nov 30 06:42:06 2023 GMT
            Not After : Nov 30 06:42:06 2025 GMT
        Subject: CN=7b7f893cc93b91c13a57586ea1a0d1729a9198a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:26:25:27:38:10:b1:65:2a:ce:f7:a9:4f:
                    ce:97:1b:ab:81:f0:5d:a3:b1:bf:b1:fa:0d:d4:a2:
                    20:83:7a:c3:79:c9:76:85:6f:01:a9:5e:ef:25:49:
                    96:a2:89:d6:72:0e:48:8c:0b:28:df:83:5c:9f:d4:
                    7c:66:02:45:80:f9:89:57:04:a6:b8:84:27:27:02:
                    23:07:bd:03:a6:75:3e:bc:6b:6a:63:57:80:93:41:
                    e2:52:fb:38:33:70:62:3d:cc:d9:a1:bb:8c:40:e2:
                    9b:6e:ed:e8:07:73:55:bd:bf:2a:a5:ec:37:5e:27:
                    67:7a:84:64:0e:9b:a1:47:48:c8:15:6c:63:2c:8c:
                    c8:21:3d:58:66:79:21:74:8c:33:ff:d7:05:f7:70:
                    4a:33:77:00:20:4b:fe:32:5c:35:16:67:a9:f2:94:
                    20:fb:53:18:f3:c7:29:7c:2c:ee:ae:1e:3a:0f:47:
                    64:99:57:fe:21:a2:76:b1:6a:c6:32:68:e4:88:c8:
                    f8:12:47:87:31:29:d9:0b:2b:37:20:ac:1d:f8:1b:
                    6e:8f:22:2f:1e:68:71:ce:46:fb:9c:72:bf:62:72:
                    1f:21:7e:e7:3b:d9:d1:5a:b4:aa:e9:6b:bf:d6:0f:
                    16:6e:53:aa:65:a0:82:a2:9f:37:ec:84:d5:ac:1e:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:0A:EE:EB:F0:D7:3D:D4:D5:41:83:97:61:4A:2F:25:5E:F7:68
            X509v3 Authority Key Identifier:
                keyid:CA:10:D4:24:56:66:80:FA:E1:CC:9A:CC:05:65:76:E0:6E:24:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96da91711589e877379a24b4e7e81faaa3d64334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/7b7f893cc93b91c13a57586ea1a0d1729a9198a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08c72eb1-3f89-4f91-9116-b0db3d854f40/96da91711589e877379a24b4e7e81faaa3d64334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:26:fb:95:60:3d:a1:b3:e9:ab:db:82:1b:04:c6:b9:fc:
         c7:c2:a4:d2:37:7f:bb:ae:dd:a6:82:e7:5a:b9:75:c3:07:91:
         3b:08:b9:bd:90:5b:d0:19:14:91:03:7b:df:11:1a:c9:26:2f:
         97:80:e8:e4:67:be:3a:75:c5:54:e1:32:49:8c:1c:b3:98:59:
         50:1d:b0:61:de:46:a0:4f:2a:ad:f9:9e:04:b7:f7:25:9a:11:
         bc:8a:f4:b9:8a:a7:e4:bf:a9:a6:ea:53:08:8b:73:8f:2c:7b:
         69:d7:d0:5f:c5:cc:f7:7e:73:67:0e:7a:38:00:39:df:46:68:
         5a:d8:34:de:8b:30:f9:db:4e:19:13:de:78:21:a8:b5:e2:a3:
         f8:dd:4a:5c:42:fd:99:d5:bd:40:1c:a6:96:d2:91:4b:f4:6b:
         9f:49:f8:70:16:b2:25:f7:c8:5a:11:28:a6:ba:d6:31:48:9e:
         63:b6:5b:90:39:9d:29:f3:89:8c:e4:d8:6c:cf:a4:ba:79:b4:
         94:a0:4b:b2:aa:0a:ed:59:ed:ba:f9:7b:4d:5d:56:4a:1d:e2:
         e3:68:c6:65:5c:06:57:36:d4:79:f0:a4:fa:28:78:11:13:23:
         aa:11:0f:c5:40:95:ab:b1:de:2b:c3:6d:9f:d2:06:eb:61:b5:
         02:b1:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----