Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/4212b8234f0e61f4cbc32d9e1dddcad0b155c56c.roa
File:                     4212b8234f0e61f4cbc32d9e1dddcad0b155c56c.roa (raw, json)
Hash identifier:          IhJ7YYwChNF6Mnu+hlBlRwMJIXjE2+DA5vw2o6+A9+k=
Subject key identifier:   E3:2D:02:5A:2A:5A:F1:84:4F:1E:5A:AB:42:B4:0A:D9:E9:34:30:09
Certificate issuer:       /CN=06648e29e39a495ed1db237056c029aa5ab8ead6
Certificate serial:       12EA5F
Authority key identifier: 2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/4212b8234f0e61f4cbc32d9e1dddcad0b155c56c.roa
Signing time:             Thu 04 Jan 2024 07:30:01 +0000
ROA not before:           Thu 04 Jan 2024 07:30:01 +0000
ROA not after:            Sat 03 Jan 2026 07:30:01 +0000
asID:                     269866
IP address blocks:        2803:6760::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239647 (0x12ea5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06648e29e39a495ed1db237056c029aa5ab8ead6
        Validity
            Not Before: Jan  4 07:30:01 2024 GMT
            Not After : Jan  3 07:30:01 2026 GMT
        Subject: CN=4212b8234f0e61f4cbc32d9e1dddcad0b155c56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:05:6c:45:35:ca:10:96:de:dd:ec:31:cc:
                    8d:a3:4c:bf:79:7f:57:7f:19:98:a0:69:c4:0e:5a:
                    b9:e4:bb:5a:7b:3d:57:15:40:d8:3f:02:e2:23:90:
                    36:53:30:74:32:35:86:7e:f5:da:06:80:7e:d4:ee:
                    17:66:77:16:74:01:aa:f6:6c:7b:56:70:c6:63:11:
                    82:0d:df:ba:dd:e5:e6:9b:af:7f:29:af:9c:8a:5d:
                    09:b6:65:3d:65:31:bf:ce:13:37:38:a9:fd:7b:08:
                    16:08:51:89:c6:46:9e:09:be:bc:b2:74:79:17:2a:
                    d7:e8:3c:00:6d:d8:57:7f:c8:c1:25:61:f6:da:78:
                    f9:9b:48:c9:04:a3:af:3e:cd:3f:0c:e0:ae:c9:0c:
                    58:ee:1c:0e:e7:53:81:97:26:02:be:f9:2a:05:8e:
                    5a:d9:ab:6d:76:9f:c6:bf:18:25:1d:ed:40:4d:78:
                    7d:19:78:e6:c0:b6:1f:d0:fb:ff:a2:34:4a:23:82:
                    8f:fc:92:98:13:3b:d2:19:f0:1a:16:75:00:e0:ea:
                    7f:f4:08:51:77:21:30:8c:b5:87:05:3f:0c:ca:c3:
                    63:81:f9:d9:e6:03:52:64:4c:42:e2:cb:ca:83:e8:
                    ba:dc:0a:57:48:c5:33:0b:2c:e5:92:6f:7d:73:3f:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:02:5A:2A:5A:F1:84:4F:1E:5A:AB:42:B4:0A:D9:E9:34:30:09
            X509v3 Authority Key Identifier:
                keyid:2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/4212b8234f0e61f4cbc32d9e1dddcad0b155c56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/06648e29e39a495ed1db237056c029aa5ab8ead6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6760::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:e5:84:e9:5e:ea:07:ed:87:a0:b0:41:66:3b:6f:37:57:
         53:5d:a1:e2:51:54:42:99:99:81:b1:65:5b:ce:41:c9:de:55:
         ab:42:dd:7e:0d:09:ea:49:cb:c7:e6:76:4d:00:d3:f7:9e:89:
         d1:46:48:f2:14:bf:a4:88:fe:9a:ee:49:7b:96:c6:46:b8:cc:
         20:15:54:0c:d8:f4:35:24:77:36:5c:22:f3:ba:d0:13:56:60:
         cd:c6:60:38:eb:9a:80:ac:1a:d8:7c:8a:b8:46:cb:ea:b3:9c:
         63:74:bc:89:c6:3c:a1:3d:65:b3:c9:b0:48:8d:4c:c3:93:8c:
         b5:b1:ef:01:26:00:26:df:75:7c:47:75:df:4c:43:63:3c:08:
         8c:1b:7a:4b:5d:19:c3:b0:50:52:52:d8:21:1a:78:7c:01:fb:
         86:9e:31:b3:c4:b5:ee:28:85:84:bf:c0:8b:df:66:15:c1:9d:
         76:64:74:18:5d:87:1e:d5:8d:5f:b0:40:dd:5e:07:3b:c4:97:
         bf:92:99:74:d5:07:57:5f:02:4c:63:ce:fc:be:24:13:41:eb:
         9a:db:fc:b2:66:15:60:82:c5:0d:ce:e8:ca:b1:55:f3:c9:4a:
         7b:13:cf:88:f0:b9:84:b6:e9:11:88:45:0f:0c:ab:2c:b1:41:
         b8:cf:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----