Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/d8b8039f96dc54b44751325e11378acd512dc190.roa
File:                     d8b8039f96dc54b44751325e11378acd512dc190.roa (raw, json)
Hash identifier:          XLFBKKnIS8LHqujLRi1DHitxdgqxyay93bjpT2jgKk0=
Subject key identifier:   D8:32:4A:D9:71:C7:E2:DF:5D:E4:04:E7:F1:F1:CB:28:04:0F:5F:20
Certificate issuer:       /CN=401380c90d8fea0a750a73c0fb6afea72dbcc30c
Certificate serial:       1D14
Authority key identifier: DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/d8b8039f96dc54b44751325e11378acd512dc190.roa
Signing time:             Sun 25 Feb 2024 16:10:25 +0000
ROA not before:           Sun 25 Feb 2024 16:10:25 +0000
ROA not after:            Wed 25 Feb 2026 16:10:25 +0000
asID:                     273186
IP address blocks:        2803:da50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7444 (0x1d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401380c90d8fea0a750a73c0fb6afea72dbcc30c
        Validity
            Not Before: Feb 25 16:10:25 2024 GMT
            Not After : Feb 25 16:10:25 2026 GMT
        Subject: CN=d8b8039f96dc54b44751325e11378acd512dc190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:80:49:9f:7a:4d:3d:24:79:5d:46:20:50:f7:
                    31:49:e2:51:f3:dc:4a:82:b8:89:35:70:bc:c7:77:
                    8f:35:d9:db:29:ba:98:b9:60:cb:06:6f:54:61:71:
                    55:83:d3:bc:b8:59:71:24:8e:20:33:f0:49:c6:cb:
                    f3:c9:d4:83:35:3c:f9:a1:6e:ed:13:c8:09:11:0a:
                    a8:d4:08:5e:30:2d:32:21:b0:77:a3:ae:e9:5b:b7:
                    9e:bd:b1:3e:88:80:28:3f:0c:1d:7d:3b:83:f8:0d:
                    bd:98:d3:06:6d:1c:35:ea:7e:ee:74:40:41:58:6a:
                    29:a2:b5:6d:56:20:cf:8b:9d:ae:6d:20:f7:3b:1a:
                    f2:3e:c5:b1:c4:e3:0d:11:c3:84:b1:af:27:52:66:
                    59:81:08:7b:53:98:e0:ef:97:4c:08:3b:0b:14:87:
                    d8:15:8a:8f:bb:83:65:e6:38:a7:7a:7e:d9:f8:21:
                    99:f4:95:1d:b5:a5:e5:9f:16:2b:00:32:5b:bf:76:
                    e5:44:44:74:5d:bd:d0:4e:e7:8d:b9:ee:54:90:23:
                    39:5c:8b:f4:cd:6f:b6:ab:55:1d:b9:19:a6:ad:6d:
                    cb:48:c6:12:9a:06:e8:3e:a3:28:fa:a1:9c:40:4a:
                    dd:d7:48:e6:34:e7:9f:d3:c0:f9:27:e2:8b:86:d0:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:32:4A:D9:71:C7:E2:DF:5D:E4:04:E7:F1:F1:CB:28:04:0F:5F:20
            X509v3 Authority Key Identifier:
                keyid:DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/d8b8039f96dc54b44751325e11378acd512dc190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/401380c90d8fea0a750a73c0fb6afea72dbcc30c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da50::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:f6:b4:c6:31:46:b4:ad:e3:1a:18:f6:78:58:12:17:29:
         22:73:e0:ce:2d:00:8b:54:53:f8:5c:6d:12:ec:e3:aa:b1:15:
         17:c5:f7:17:cb:a7:d1:6c:80:03:a4:87:10:68:09:45:25:2a:
         b1:bb:58:43:11:e2:8c:10:16:1e:47:2f:8c:75:46:e8:40:f6:
         4d:b8:f4:68:48:4e:53:9a:88:b2:d2:a4:b3:95:fe:f4:40:2e:
         7b:69:70:19:93:61:37:0c:45:fd:b8:f8:4f:21:a9:0b:4c:0e:
         8b:42:64:2b:29:1c:eb:53:c4:07:11:e8:35:c9:91:81:1f:ad:
         ef:b2:f8:3e:ed:67:20:db:ea:d6:2c:3a:f2:2d:85:2a:44:95:
         d2:b2:d7:87:11:3d:2e:03:ce:38:5b:05:40:11:91:17:da:8a:
         ae:e5:8f:e1:e5:d3:b6:cc:5c:c5:de:73:d0:a8:8a:e1:08:9d:
         5a:6f:94:71:0e:d3:26:da:90:c6:b6:90:61:ba:f3:6e:1c:78:
         ef:30:da:30:3a:2e:dd:55:74:d9:84:82:af:5f:e4:3b:9c:93:
         2f:42:47:76:0e:d0:5e:6e:4f:64:dc:c3:27:58:0c:17:8f:c9:
         5b:56:51:e3:e0:5f:96:39:f6:03:9a:80:76:04:c2:a7:c7:84:
         af:41:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----