Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/0e982ca945bc0d8d2c1206d497389a9398f0fe87.roa
File:                     0e982ca945bc0d8d2c1206d497389a9398f0fe87.roa (raw, json)
Hash identifier:          oAHuNFCHKRX2cNCZiJi4zb0Icf4odsxkrc+UeY2eg+A=
Subject key identifier:   B4:93:7C:C1:4A:DA:0F:82:60:FC:0C:36:6B:8E:2F:87:C8:D6:2F:7A
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       06F332
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/0e982ca945bc0d8d2c1206d497389a9398f0fe87.roa
Signing time:             Tue 23 Jan 2024 23:18:35 +0000
ROA not before:           Tue 23 Jan 2024 23:18:35 +0000
ROA not after:            Fri 23 Jan 2026 23:18:35 +0000
asID:                     273008
IP address blocks:        2803:b590:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455474 (0x6f332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Jan 23 23:18:35 2024 GMT
            Not After : Jan 23 23:18:35 2026 GMT
        Subject: CN=0e982ca945bc0d8d2c1206d497389a9398f0fe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:78:04:98:59:9c:07:eb:f8:2c:41:69:62:
                    fe:1e:80:38:62:b7:68:ab:3a:7d:ed:66:9b:df:0a:
                    d3:5c:3f:ff:3f:17:b7:e5:74:06:52:40:28:4f:66:
                    85:8a:6b:e3:e1:04:3a:d0:6f:0e:17:90:43:2b:5b:
                    4f:39:ee:bc:e2:21:6f:5c:a8:53:dc:7d:92:49:97:
                    75:08:74:59:00:56:f9:aa:47:43:86:75:d0:36:94:
                    8c:f4:83:37:d9:89:f3:25:80:63:4b:b1:80:8d:2a:
                    5c:32:13:31:2b:09:20:e2:82:a4:76:ed:75:a4:fd:
                    5a:ca:f0:0b:db:14:c1:36:c6:0f:7f:96:9a:95:e2:
                    f4:90:74:7a:68:70:c9:ca:b3:6c:b0:9c:46:62:ed:
                    84:60:c7:1c:a6:41:40:9b:17:bb:4d:07:52:6c:a7:
                    9d:50:79:e3:25:62:49:ce:70:1b:00:8e:25:d9:c8:
                    f2:e4:a7:30:d1:be:09:74:12:ff:fa:09:21:01:d2:
                    6d:f5:fb:74:31:45:54:32:cf:e5:dc:8e:84:9c:a0:
                    2b:e1:45:e0:a2:be:07:b0:a0:f2:14:21:0d:92:05:
                    4c:aa:f7:19:7b:c3:a5:d8:51:d8:fd:0d:fb:74:e0:
                    3e:ed:be:cd:f1:0b:72:0d:a7:0b:fe:20:49:9b:d1:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:7C:C1:4A:DA:0F:82:60:FC:0C:36:6B:8E:2F:87:C8:D6:2F:7A
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/0e982ca945bc0d8d2c1206d497389a9398f0fe87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:81:75:c8:75:5c:3d:57:20:59:73:2a:f3:1c:5b:ba:f8:54:
         a7:81:f3:ce:f2:af:54:6d:e1:4b:ff:58:d9:1a:c3:50:f0:35:
         f5:07:e8:a5:07:b5:a9:77:47:67:61:f6:46:3c:68:5b:85:54:
         14:65:0d:1a:ef:b4:98:ad:46:da:26:c4:2c:6b:76:2e:3b:38:
         07:a5:fe:2c:de:2b:94:04:da:15:53:ef:4a:38:ee:68:4d:98:
         ae:ff:48:fb:07:0b:eb:20:73:aa:a2:3c:7f:ed:c8:b6:42:53:
         c0:61:04:1e:da:38:33:b2:00:25:6a:46:f8:3b:a4:92:31:4d:
         2c:01:9f:79:52:d8:8b:ca:a2:d7:0a:2d:9b:10:39:44:7d:c0:
         58:5d:d0:98:90:10:bd:0b:15:46:05:5f:b2:c3:0d:97:44:87:
         d0:ad:27:4e:72:50:d4:5c:0c:37:ba:90:bd:4e:d7:19:72:27:
         16:38:9b:12:19:38:83:86:ae:fd:a7:74:95:d8:70:7a:39:ec:
         6f:3e:12:5e:11:ae:33:23:40:a5:f5:c5:b8:00:dc:d1:8c:9b:
         fa:11:dc:32:d5:00:3f:ef:db:ab:8d:71:b0:a7:b1:6f:a2:a5:
         99:cf:87:6c:16:1c:19:ad:9f:5e:35:f2:71:68:0a:49:12:42:
         02:2c:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----