Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/f88d3e1f0700504793bb65312331d671093e2dab.roa
File:                     f88d3e1f0700504793bb65312331d671093e2dab.roa (raw, json)
Hash identifier:          c7C5XylpB3i+zysQNysePskeeLU2nSafRY1X5XKr0D4=
Subject key identifier:   A8:50:FA:CC:7C:11:FB:B0:BA:31:89:09:E0:C0:97:C2:6A:91:29:24
Certificate issuer:       /CN=4383829aa6915025fadcb4bbf75331e70af7916f
Certificate serial:       C884
Authority key identifier: 1F:3F:4A:45:F2:A2:3F:EF:56:13:69:8D:F8:37:32:E3:73:78:EB:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4383829aa6915025fadcb4bbf75331e70af7916f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/f88d3e1f0700504793bb65312331d671093e2dab.roa
Signing time:             Mon 09 Oct 2023 20:18:38 +0000
ROA not before:           Sun 08 Oct 2023 20:18:38 +0000
ROA not after:            Thu 09 Oct 2025 20:18:38 +0000
asID:                     273075
IP address blocks:        2803:af90::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51332 (0xc884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4383829aa6915025fadcb4bbf75331e70af7916f
        Validity
            Not Before: Oct  8 20:18:38 2023 GMT
            Not After : Oct  9 20:18:38 2025 GMT
        Subject: CN=f88d3e1f0700504793bb65312331d671093e2dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:8d:7b:26:82:be:57:2a:6f:ff:71:b0:45:
                    ea:db:ee:00:c6:bc:7c:ee:6b:da:ee:11:a6:46:19:
                    9f:ca:06:ac:7f:dc:1b:a8:63:73:73:18:c3:01:1a:
                    42:ba:a6:7b:aa:b2:9e:0e:7d:31:c2:b8:3f:d9:45:
                    a1:11:de:fe:b4:a5:50:29:19:53:3f:e8:fa:05:4e:
                    b1:d5:20:cb:33:fc:68:97:fd:f7:bb:c4:2a:3a:6a:
                    24:c9:af:0b:d8:ba:d1:80:4c:08:ea:2d:a4:dc:82:
                    db:d5:5f:df:21:80:84:bd:34:f6:a6:f9:1d:fc:f4:
                    25:ac:ee:7b:bc:6d:20:5b:ab:4e:81:02:cb:65:c6:
                    eb:43:ac:ee:e5:2e:aa:ef:a6:83:90:b3:32:12:9c:
                    a6:af:c8:00:d3:2a:50:ac:af:c1:c2:bd:ed:7f:24:
                    92:79:a1:1e:79:ab:d6:2e:a4:1c:40:09:47:03:99:
                    86:da:1c:90:f0:4e:7a:e4:97:d0:f3:33:8c:33:37:
                    12:15:02:c1:e9:46:b1:ec:e0:39:c2:3f:63:f3:d4:
                    da:7f:7b:9e:1b:dd:cc:d2:71:bd:ce:3c:6a:2f:f3:
                    58:bf:c3:51:aa:34:c2:16:7f:66:ee:3f:3c:c0:97:
                    c2:d5:5b:fc:ea:e0:44:50:b8:a3:1d:1d:88:1d:bf:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:50:FA:CC:7C:11:FB:B0:BA:31:89:09:E0:C0:97:C2:6A:91:29:24
            X509v3 Authority Key Identifier:
                keyid:1F:3F:4A:45:F2:A2:3F:EF:56:13:69:8D:F8:37:32:E3:73:78:EB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4383829aa6915025fadcb4bbf75331e70af7916f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/f88d3e1f0700504793bb65312331d671093e2dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1131bcba-2602-4b4c-8867-d855fb3b8d77/4383829aa6915025fadcb4bbf75331e70af7916f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af90::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:0f:00:18:ab:93:dc:7a:87:d6:79:1d:e8:1b:f7:c8:d2:
         67:fd:9e:50:53:be:8c:24:fe:eb:4c:53:4a:c7:85:fe:8f:28:
         41:33:bd:d8:da:aa:f9:7a:3b:a5:be:65:6d:5c:d2:56:4c:05:
         aa:36:29:8c:db:f9:9d:d0:fd:26:aa:96:fb:fa:65:df:8d:60:
         7c:26:e8:fb:02:64:4b:cc:4d:e4:b7:e0:a3:74:ba:b5:ed:de:
         c6:36:f0:9b:e6:3a:22:da:8c:5d:79:43:e5:3a:6a:c3:49:00:
         ec:9f:1e:3a:70:96:d4:ad:5e:fd:ee:8b:ab:8b:c9:26:12:d2:
         3c:a6:69:38:9b:bc:82:b4:a1:66:bf:1a:ba:74:8f:fa:ae:54:
         09:92:66:e3:51:d6:2b:d1:a9:ca:43:db:f1:16:89:8d:0e:48:
         fa:e0:4f:eb:e5:1d:7d:a3:dc:46:4a:3c:3b:ab:82:ed:e1:64:
         09:28:e7:32:ce:bc:0c:a7:ae:34:bd:d8:fd:e3:70:29:31:eb:
         f5:29:7a:a7:af:17:64:8a:04:bc:f4:8e:d6:1e:90:73:6b:61:
         3d:1d:a6:56:4e:c7:59:8a:56:0c:e3:f2:da:a6:24:98:d5:11:
         69:a2:9c:92:93:8a:d3:05:32:ae:ba:8f:44:ef:9e:8c:14:86:
         da:a1:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----