Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/963ab685d13515940ac6cf399e217048ea556468.roa
File:                     963ab685d13515940ac6cf399e217048ea556468.roa (raw, json)
Hash identifier:          pOoONSmkn0xlYsy53IKgvEX2UYb37pwC97dwK4xnJQw=
Subject key identifier:   13:C5:FF:E0:A1:63:F6:15:0C:12:1A:B4:CF:74:7F:EA:6F:7B:7D:B7
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       158C74
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/963ab685d13515940ac6cf399e217048ea556468.roa
Signing time:             Sun 29 Jan 2023 01:11:33 +0000
ROA not before:           Sat 28 Jan 2023 01:09:19 +0000
ROA not after:            Wed 29 Jan 2025 01:09:19 +0000
asID:                     267919
IP address blocks:        2803:ee60:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412212 (0x158c74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Jan 28 01:09:19 2023 GMT
            Not After : Jan 29 01:09:19 2025 GMT
        Subject: CN=963ab685d13515940ac6cf399e217048ea556468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:38:4d:3a:8b:10:49:d1:76:9c:58:6c:f7:
                    0b:66:c6:65:84:ae:75:c7:fb:f1:53:22:59:a3:cc:
                    02:04:d0:75:9f:6f:b8:e2:10:d4:aa:1b:ce:40:bf:
                    ff:5e:87:ca:90:ce:d1:d0:4a:d6:17:a9:ee:4c:e7:
                    2d:18:5a:10:9a:de:e5:92:48:cc:e5:75:74:8b:83:
                    bd:f1:e7:da:01:dd:f4:ce:4a:c1:34:c7:97:86:d7:
                    c0:20:b6:b0:e0:c6:c1:7f:86:73:ab:ef:45:43:50:
                    af:13:61:ac:a8:ba:84:8c:7f:e5:38:3d:d6:70:1b:
                    30:a5:4f:11:68:a6:5f:df:89:b9:22:78:b5:ab:4f:
                    44:90:33:20:d5:13:9d:f7:9b:5e:d2:97:4a:0d:bc:
                    49:e0:fd:42:43:2c:15:58:39:0a:0a:dc:db:34:65:
                    8c:04:6a:28:d3:4a:8d:1b:9c:f1:c5:dd:cd:c7:89:
                    bc:d9:1b:16:fa:68:ed:3b:f2:12:a4:17:7c:6a:40:
                    d2:7d:18:92:ed:fa:c1:87:53:a0:06:68:2c:25:71:
                    a9:72:46:4b:25:a8:1a:0f:db:19:73:06:74:e2:13:
                    25:41:0f:c4:9c:72:72:ca:6b:41:4e:a8:c8:8b:23:
                    07:ad:c9:d8:f9:e0:90:17:99:cd:6c:e3:74:ac:27:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C5:FF:E0:A1:63:F6:15:0C:12:1A:B4:CF:74:7F:EA:6F:7B:7D:B7
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/963ab685d13515940ac6cf399e217048ea556468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:eb:19:ef:79:a5:ff:1a:bd:29:6a:46:7b:f4:1b:f4:ef:bc:
         01:2f:cc:bb:21:74:32:69:14:e6:85:e1:10:6f:2d:d8:9c:1c:
         3a:86:a4:aa:2c:b3:32:56:7a:3e:9c:18:80:f9:bb:66:2f:1a:
         37:1d:ed:a1:65:26:e3:74:e6:8b:b7:4a:88:7b:1d:34:79:06:
         a9:f3:5d:88:4b:b6:c3:6b:8c:5b:18:43:2a:e8:b0:62:24:c9:
         44:a0:4d:8e:17:b5:41:14:84:da:16:42:e9:08:53:6c:9a:0a:
         88:11:71:1b:f1:23:10:d3:42:b0:47:07:b4:d5:b3:9a:31:a7:
         ff:94:cd:b4:f7:c1:9d:22:47:3d:ce:9c:4d:62:ab:0f:88:a0:
         c0:4c:4b:1f:3a:d2:54:a2:f2:f5:88:49:3f:24:5f:5c:3a:e0:
         26:f3:bd:ca:ca:9c:da:a8:e8:e3:76:d5:cc:73:6a:f4:fe:1f:
         b8:b8:17:85:39:d8:e6:4d:fc:d7:db:f7:e6:4b:c9:9e:a1:86:
         6a:5c:9c:e7:32:d4:93:fb:7a:6c:4c:02:91:93:a8:64:50:fb:
         09:dd:6e:e5:07:7a:7c:f7:4c:2b:31:c9:79:24:5c:42:c3:8e:
         47:d0:92:52:9b:97:55:fd:ca:d7:28:65:be:4d:ce:b4:79:8e:
         6b:97:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----