Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/244135967c92b850c86dce0d5be8f0aa3cacdce3.roa
File:                     244135967c92b850c86dce0d5be8f0aa3cacdce3.roa (raw, json)
Hash identifier:          tTR0yDpqwVzGLO6bZSlXsVa0OVRqgoREisdc7m9DaII=
Subject key identifier:   81:04:C9:95:04:01:B6:24:6E:42:A6:50:E0:2E:C2:72:F9:B6:F6:19
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       06F59A
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/244135967c92b850c86dce0d5be8f0aa3cacdce3.roa
Signing time:             Wed 24 Jan 2024 01:08:57 +0000
ROA not before:           Wed 24 Jan 2024 01:08:57 +0000
ROA not after:            Sat 24 Jan 2026 01:08:57 +0000
asID:                     273008
IP address blocks:        2803:b590:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456090 (0x6f59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Jan 24 01:08:57 2024 GMT
            Not After : Jan 24 01:08:57 2026 GMT
        Subject: CN=244135967c92b850c86dce0d5be8f0aa3cacdce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:ce:d1:02:f0:45:cb:40:53:03:c7:39:03:
                    f6:5e:94:8f:9a:5d:01:22:23:7a:31:f3:bd:c6:33:
                    75:dd:49:bc:88:59:44:2a:b8:87:de:a7:a2:5f:18:
                    f2:de:5c:3f:0c:3a:46:88:1f:6b:b4:3c:21:d0:04:
                    91:89:ab:ce:6d:47:5a:ac:47:6e:b9:bc:6c:5b:c5:
                    3e:54:78:ae:63:f4:88:52:be:5e:8a:f0:39:27:ee:
                    2c:0f:00:37:1f:ba:7d:1f:b9:e2:06:c9:27:dd:81:
                    de:e8:68:bd:b9:9d:44:14:82:3d:88:f1:93:38:df:
                    38:54:c1:7b:90:63:a0:51:01:7c:7e:82:0c:e9:8c:
                    fd:13:1d:0e:aa:eb:b1:b8:03:59:ce:63:40:0f:ac:
                    78:c6:ad:d5:33:65:71:8a:56:43:ff:d8:9d:16:e7:
                    7b:17:37:b2:66:13:46:8a:a1:21:b1:6e:d5:e1:87:
                    f3:8e:82:38:b6:e3:d6:90:0b:bf:3e:3c:40:ce:26:
                    16:24:39:f0:7b:ab:f1:e1:a4:86:dd:6c:14:52:c3:
                    07:e6:81:c7:9b:d5:84:2d:ed:94:0e:7b:54:be:61:
                    20:bc:7b:10:8c:1c:6f:4f:0e:b2:31:49:31:bd:aa:
                    7d:ba:63:5b:4e:f7:1e:75:35:c3:7c:71:53:9a:dd:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:C9:95:04:01:B6:24:6E:42:A6:50:E0:2E:C2:72:F9:B6:F6:19
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/244135967c92b850c86dce0d5be8f0aa3cacdce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:d3:a3:89:c9:64:dd:ae:16:45:bf:99:1e:42:40:a1:c6:
         60:c8:78:87:42:b6:ae:bd:c3:d6:96:76:5f:44:a0:47:70:2a:
         f0:06:d1:9d:30:c0:ee:97:59:a5:58:fd:61:06:84:bd:43:b7:
         aa:4a:89:b3:96:cf:93:ea:22:c9:93:76:e0:35:f9:40:11:66:
         25:ec:e0:5c:5b:bf:29:6b:dc:02:b4:b9:69:c0:36:b0:6e:d3:
         37:06:ff:fa:4c:a8:cf:87:8a:c2:5f:a2:f7:f8:dc:73:3c:8a:
         cc:71:31:bd:cc:cf:4a:f5:cb:6a:d8:6e:c7:8f:5e:98:02:9b:
         8d:4b:17:2c:b3:50:47:ed:21:cc:2c:ce:f8:dd:f0:fd:c4:67:
         68:23:85:39:0b:a6:0f:7a:90:f9:a8:dd:db:10:0a:a9:5b:95:
         e5:77:57:92:23:9c:da:66:f4:0b:19:84:ca:99:18:91:71:59:
         3c:b2:08:1d:f3:a0:03:45:e6:bb:db:cf:d2:a8:0b:a1:2a:5e:
         6e:d4:40:5c:e4:63:22:4f:9b:f4:14:ed:d1:71:6a:be:26:5d:
         aa:96:e6:b6:23:68:4e:c9:9f:86:7e:67:03:9c:57:d2:04:20:
         c8:a7:ed:9c:98:ff:0b:02:6b:8b:06:43:4f:99:07:de:fb:30:
         cd:79:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----