Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/73f6abb5b7170e07d7e7cfc404b6de9cacff524e.roa
File:                     73f6abb5b7170e07d7e7cfc404b6de9cacff524e.roa (raw, json)
Hash identifier:          umX4k3T5cT3xpjyTJGRRx3sPuYn97MouLi2K2lpUdr8=
Subject key identifier:   8F:96:E6:A3:8C:25:83:59:8B:AB:9A:AC:48:9B:D3:02:F2:05:E5:0C
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1DEF7F
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/73f6abb5b7170e07d7e7cfc404b6de9cacff524e.roa
Signing time:             Tue 26 Dec 2023 19:05:25 +0000
ROA not before:           Tue 26 Dec 2023 19:05:25 +0000
ROA not after:            Fri 26 Dec 2025 19:05:25 +0000
asID:                     267919
IP address blocks:        2803:ee60:b0::/44 maxlen: 44
                          2803:ee60:c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961855 (0x1def7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Dec 26 19:05:25 2023 GMT
            Not After : Dec 26 19:05:25 2025 GMT
        Subject: CN=73f6abb5b7170e07d7e7cfc404b6de9cacff524e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:9e:97:04:61:49:4b:00:32:fc:f6:fa:be:
                    98:80:5f:3d:10:36:13:eb:a8:98:40:cb:ce:92:cb:
                    26:cf:04:19:a0:92:19:50:ae:46:48:d4:c2:1d:74:
                    66:98:a2:b8:2d:c2:82:35:35:c6:55:c4:56:1b:e1:
                    a8:3c:ac:04:f9:c6:56:73:fc:b6:33:18:a4:f2:5a:
                    11:01:fd:19:91:32:0e:56:2e:ff:a0:a7:7b:aa:16:
                    c2:26:ca:f7:cd:7f:08:14:63:0b:ac:fa:d6:80:2b:
                    60:f5:f7:b4:22:4f:a3:fe:d6:0d:7a:c2:b4:3c:66:
                    c6:ea:53:37:89:31:81:a2:24:28:03:18:f7:59:64:
                    97:9b:66:a3:e7:4a:f0:53:eb:8a:a5:f7:3e:8a:9a:
                    d1:dc:c4:80:fa:ec:61:b1:25:29:6b:eb:a7:91:03:
                    03:95:83:25:00:22:bf:ba:91:74:39:1f:23:34:16:
                    d3:a5:d3:3c:4b:55:f6:7d:c7:91:eb:72:ed:75:35:
                    dc:bb:52:ca:77:d6:f8:ff:76:8a:39:a0:97:52:25:
                    7c:fa:22:18:55:bc:83:c6:b2:db:a5:c0:d2:aa:46:
                    23:01:ba:9b:11:88:79:18:02:7f:d7:f4:23:28:6a:
                    5a:3d:33:d8:4b:15:b9:0f:a9:45:30:82:8d:e4:af:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:E6:A3:8C:25:83:59:8B:AB:9A:AC:48:9B:D3:02:F2:05:E5:0C
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/73f6abb5b7170e07d7e7cfc404b6de9cacff524e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:b0::-2803:ee60:cf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:2b:24:1a:b8:b5:f9:58:a0:12:bf:da:c9:ad:ce:07:58:
         aa:35:68:1f:fc:50:c2:55:a3:28:2f:fc:f1:79:e2:30:b7:c2:
         be:4b:a5:d9:1c:99:8b:7e:4f:05:88:18:42:23:0f:73:b2:e8:
         d2:dc:7d:af:38:b1:b7:cb:b4:7a:ce:d4:d4:58:ae:76:35:f6:
         57:b1:77:c9:a7:74:cd:79:a8:e5:40:37:19:bc:8c:dd:7f:1d:
         46:5a:d9:4c:26:7a:85:f4:35:5d:b8:6a:ec:0c:1c:d5:52:0a:
         cf:db:4e:c3:7e:b1:2b:12:c7:b0:15:08:d1:06:31:7e:b3:11:
         00:14:1b:40:f8:5b:a0:a6:80:37:ff:4a:97:f9:93:31:f3:ea:
         76:e1:cd:25:6b:3a:a6:fc:b4:0f:66:e5:74:85:11:4c:43:18:
         0d:8d:a0:99:61:57:67:2c:cb:a4:c4:bd:90:bd:eb:95:c9:00:
         19:2c:21:42:3a:44:d8:74:31:2e:05:24:89:21:0c:a3:2f:0f:
         cd:ad:15:0b:c1:0f:9c:c2:42:95:70:6e:01:41:94:fa:73:ad:
         a9:d8:e8:a4:0f:cd:c1:18:31:0f:a4:c0:b9:46:32:b0:f2:6c:
         46:31:8c:84:3f:31:54:ac:e7:46:f9:2a:22:df:61:53:3f:9d:
         42:07:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----