Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/782c0699a2d26177dc1bf64cd48c28e7628e2fe4.roa
File:                     782c0699a2d26177dc1bf64cd48c28e7628e2fe4.roa (raw, json)
Hash identifier:          VfdY+ICVTxbGb3sXD/QnwKEkPLhrglhXjfKz53jWIys=
Subject key identifier:   25:9B:9C:AC:26:A7:AC:8B:CF:56:47:97:75:43:E4:36:31:AE:DF:98
Certificate issuer:       /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial:       20270A
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/782c0699a2d26177dc1bf64cd48c28e7628e2fe4.roa
Signing time:             Thu 30 Nov 2023 16:46:23 +0000
ROA not before:           Thu 30 Nov 2023 16:46:23 +0000
ROA not after:            Sun 30 Nov 2025 16:46:23 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/32 maxlen: 32
                          2803:e5c0::/48 maxlen: 48
                          2803:e5c0:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107146 (0x20270a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
        Validity
            Not Before: Nov 30 16:46:23 2023 GMT
            Not After : Nov 30 16:46:23 2025 GMT
        Subject: CN=782c0699a2d26177dc1bf64cd48c28e7628e2fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:22:94:00:97:97:26:4f:d0:f0:69:dd:72:
                    ec:cd:b1:69:57:c5:5b:33:ac:b3:ba:de:41:2b:24:
                    65:23:0a:b0:b4:5d:2a:6a:6d:4c:e1:67:6e:21:f9:
                    42:42:25:3c:08:88:00:ec:fb:1c:6f:e9:cc:73:1b:
                    08:97:39:ad:04:a3:e1:cd:b8:bc:0f:38:f1:a5:60:
                    8d:97:7a:dc:42:ec:f2:16:8b:82:9a:0b:62:ca:38:
                    0b:39:49:55:bd:62:38:cc:8f:24:9b:60:8b:71:b9:
                    83:89:40:d2:4c:95:85:a5:68:13:b4:d5:18:c5:81:
                    f5:45:7f:fa:31:b1:fd:9f:a6:cd:b1:5b:3e:71:db:
                    c6:cd:96:4e:26:5d:99:0d:63:3e:46:d6:95:f3:0e:
                    22:aa:18:71:51:8f:97:f5:17:28:44:15:e9:4e:89:
                    8e:b0:64:d2:19:3d:1c:52:6b:6c:c0:98:11:6b:77:
                    a4:08:c7:bc:4d:67:8e:da:44:c0:e2:f2:9a:ef:6f:
                    01:83:a5:bb:b0:b9:c1:ca:b8:b5:e8:cf:16:bd:3a:
                    6f:f3:2f:c8:fe:83:d6:8a:d7:2b:b6:65:02:0a:54:
                    17:ea:44:20:3b:33:b7:49:3a:cd:ba:85:16:fc:37:
                    4f:f7:be:bb:09:84:f8:1c:cc:52:af:82:0f:d5:7c:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:9C:AC:26:A7:AC:8B:CF:56:47:97:75:43:E4:36:31:AE:DF:98
            X509v3 Authority Key Identifier:
                keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/782c0699a2d26177dc1bf64cd48c28e7628e2fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:e2:4a:6d:ba:a5:86:7f:af:61:2b:1d:9c:8a:c3:f3:65:
         72:83:14:d4:b1:38:d8:b0:04:4b:dc:02:db:cb:1a:fd:19:f0:
         92:01:68:49:5d:ba:e7:fb:27:85:9d:a9:f9:45:77:a2:89:4f:
         14:6a:c8:a1:c6:b5:51:2f:3e:18:65:eb:af:82:0f:21:1f:33:
         99:ce:dd:52:17:e4:29:06:28:ef:3e:0b:08:2a:6b:fc:a3:5a:
         b7:58:a5:29:63:d2:5a:99:d2:26:c8:a7:4a:10:fb:f7:cf:0a:
         1d:72:40:49:15:54:56:71:60:c9:2a:74:4a:3e:f9:d3:55:6d:
         51:a2:a2:6f:30:2a:42:bf:40:b8:e7:f0:d4:2c:77:42:20:52:
         96:dc:c4:c5:be:96:07:a8:c0:14:ed:72:17:d6:30:b5:63:bd:
         92:00:2a:ca:94:1e:6c:37:47:ff:f8:44:9b:33:bb:71:78:e3:
         59:e6:27:d5:a1:0c:dd:90:ca:57:52:76:55:21:c5:44:c9:97:
         d4:79:33:3f:98:b7:0e:e9:fa:d1:0a:bc:71:37:19:7a:9d:70:
         3b:44:a3:89:8e:4f:49:4e:d9:e3:82:e1:40:b4:0e:dc:ff:01:
         5e:31:e9:03:de:47:b3:04:27:1d:e8:8d:fd:a5:32:a9:75:c2:
         08:d4:3a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----