Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7829e15c1a7449fd1c9d84008d2b436ebdda0c85.roa
File:                     7829e15c1a7449fd1c9d84008d2b436ebdda0c85.roa (raw, json)
Hash identifier:          4J3oKxNz6XdYmrGo7fE4jC2AHH3XezpI33USAhRV+fY=
Subject key identifier:   35:7D:91:DE:14:3F:C4:05:DF:CA:0F:52:77:92:90:8E:9B:75:DA:6A
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1E7FC7
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7829e15c1a7449fd1c9d84008d2b436ebdda0c85.roa
Signing time:             Mon 15 Jan 2024 20:24:00 +0000
ROA not before:           Mon 15 Jan 2024 20:24:00 +0000
ROA not after:            Thu 15 Jan 2026 20:24:00 +0000
asID:                     267919
IP address blocks:        2803:ee60:a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998791 (0x1e7fc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Jan 15 20:24:00 2024 GMT
            Not After : Jan 15 20:24:00 2026 GMT
        Subject: CN=7829e15c1a7449fd1c9d84008d2b436ebdda0c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:5e:eb:98:5b:c5:2c:72:87:ef:f0:74:61:
                    6c:cc:76:6d:35:79:a6:2c:4a:cc:04:d2:2a:1f:8d:
                    5a:55:1f:41:96:26:1b:ad:6b:a3:8a:ae:1b:5d:f1:
                    47:16:94:fb:3f:b3:40:e1:b5:73:82:62:16:8f:23:
                    cf:fb:e1:73:ff:83:fb:ef:0f:01:2f:81:76:db:ae:
                    8e:ba:12:ae:17:a5:ff:75:87:5d:c8:88:9f:f1:8b:
                    09:f1:e3:e0:55:c3:3b:21:3a:46:c1:56:28:aa:5f:
                    2b:cb:00:5d:dd:ca:6d:c6:ee:01:80:2d:91:e6:48:
                    43:34:30:c6:8b:57:88:fe:3c:6f:6d:67:d5:46:1a:
                    aa:48:0d:22:06:a9:47:e4:e6:af:72:a4:a4:5a:dc:
                    a9:d8:7f:80:ea:b1:6b:88:1a:b2:14:3d:f9:1e:d2:
                    ab:da:47:e7:75:a8:88:9b:23:f1:8f:99:74:29:74:
                    9b:c5:9f:39:96:b5:36:c6:1e:b3:94:91:99:d4:33:
                    d0:dd:76:fb:1b:a7:a7:5f:c1:9c:df:76:ea:17:c8:
                    8b:ed:34:71:9a:18:b2:a6:6e:86:37:09:d6:d6:02:
                    fa:83:71:15:ad:21:90:c8:5a:18:2d:73:20:6b:74:
                    f7:2b:40:f2:cc:e8:c3:d9:8c:a7:96:5e:a2:ae:64:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7D:91:DE:14:3F:C4:05:DF:CA:0F:52:77:92:90:8E:9B:75:DA:6A
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7829e15c1a7449fd1c9d84008d2b436ebdda0c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:93:a1:9a:b0:ce:de:9d:12:d7:20:72:63:b2:36:58:a0:
         95:e1:d2:f2:36:b7:57:9e:e3:85:57:f2:93:85:88:3b:5a:ff:
         9b:8e:68:e5:60:78:43:26:5b:ad:12:23:dc:9f:0a:39:8b:55:
         a7:33:82:df:f8:a4:40:1f:56:c3:f8:28:39:22:88:fb:71:1c:
         8f:a5:58:85:60:7e:ae:ca:66:ea:14:d2:99:3b:18:d3:de:18:
         b4:19:39:3d:c7:15:2f:4c:97:34:2d:3a:c5:a9:74:44:97:64:
         c2:e2:22:da:bf:9e:ce:f8:ba:c4:ea:03:f8:59:76:ff:88:7a:
         e0:30:16:65:38:35:4a:9e:af:cb:8f:72:0c:b0:53:16:4a:e6:
         41:b9:0f:d0:7d:18:de:0f:a5:82:be:a0:fd:6b:df:5e:df:a5:
         f9:eb:0a:51:9d:b8:7a:e0:ba:84:4f:05:38:f1:f6:b7:17:d9:
         d1:82:87:9c:02:f0:33:f1:85:8d:cc:0d:d7:7a:fc:a2:db:b2:
         50:1c:69:00:18:2e:cb:c7:71:ad:fd:00:4f:2e:09:e5:68:0c:
         1a:45:77:5e:bf:76:d5:f7:a6:bd:b1:10:9f:bd:45:e2:d2:6b:
         06:46:e0:b3:6e:7e:30:76:b3:b3:01:e9:f2:fc:ea:50:2c:b2:
         6a:2d:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----