Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4da9c9f4bcc212109fec782e6da7aebf44c0a8ff.roa
File:                     4da9c9f4bcc212109fec782e6da7aebf44c0a8ff.roa (raw, json)
Hash identifier:          fPljwT2P1Og3I/5eIPY/vbN3mD/50bumzqvrPMMX8L0=
Subject key identifier:   D1:D9:83:9A:D4:00:0A:51:74:68:15:2D:14:C8:7E:52:98:37:28:44
Certificate issuer:       /CN=905680316617a29b241d379e0113b16e54308042
Certificate serial:       216CD7
Authority key identifier: 89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4da9c9f4bcc212109fec782e6da7aebf44c0a8ff.roa
Signing time:             Thu 07 Sep 2023 19:02:50 +0000
ROA not before:           Wed 06 Sep 2023 19:02:50 +0000
ROA not after:            Sun 07 Sep 2025 19:02:50 +0000
asID:                     264651
IP address blocks:        2803:fc40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190551 (0x216cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905680316617a29b241d379e0113b16e54308042
        Validity
            Not Before: Sep  6 19:02:50 2023 GMT
            Not After : Sep  7 19:02:50 2025 GMT
        Subject: CN=4da9c9f4bcc212109fec782e6da7aebf44c0a8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:25:b4:13:1c:f9:07:2b:8e:b4:08:6e:47:
                    71:41:a2:bc:11:2a:ce:7e:d7:36:6d:70:e7:dd:48:
                    a9:ea:54:72:54:d0:9a:ab:a6:a3:0a:cd:d0:28:be:
                    4f:e4:cf:cc:3f:d5:fc:d6:88:da:34:c6:e0:46:5f:
                    fd:56:04:95:31:a0:a4:e6:bf:a9:4a:18:1e:d4:b8:
                    92:90:af:b7:ce:84:6c:65:09:46:29:cb:57:37:b0:
                    35:08:9f:d1:88:7d:4c:3e:65:f0:9c:3a:59:96:88:
                    f9:7f:f0:17:16:f7:b4:fa:d0:8d:c5:6c:7b:aa:55:
                    ad:05:2b:6e:87:87:91:5c:3b:31:6b:6e:ea:fd:12:
                    cd:89:6a:d6:43:3d:4f:eb:ce:43:7c:ac:89:be:28:
                    f1:65:35:1b:d1:0c:d7:38:ab:85:db:51:2e:50:5b:
                    58:e2:cf:68:79:d4:bb:c8:5e:a4:98:09:a3:9e:31:
                    a0:b6:9c:76:10:68:f3:d4:b8:d8:b9:91:e7:1f:d1:
                    71:45:de:70:02:a3:c8:a0:8b:9f:53:51:03:fe:18:
                    84:88:d8:60:4f:f7:b2:87:46:de:9a:3e:69:d6:ad:
                    b5:4b:1a:fe:d1:ac:d3:84:92:d5:7c:a1:55:6f:56:
                    61:36:54:98:c3:46:1d:97:cb:4e:20:c1:99:25:2e:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:83:9A:D4:00:0A:51:74:68:15:2D:14:C8:7E:52:98:37:28:44
            X509v3 Authority Key Identifier:
                keyid:89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4da9c9f4bcc212109fec782e6da7aebf44c0a8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:51:54:4d:d3:df:34:79:9e:e6:c4:59:56:8d:b6:34:59:ad:
         02:de:4d:81:e0:64:25:55:ca:9d:16:15:a9:ce:7d:52:a4:09:
         b5:14:20:c5:79:1d:c2:02:a5:75:7b:27:7c:f5:91:8f:54:b0:
         0d:75:a4:d0:8a:b5:b4:8e:ba:9e:2d:b9:09:84:27:60:4b:9e:
         d1:2b:b4:b5:21:ce:b3:9b:e8:ce:72:c2:2a:58:32:2b:d9:5d:
         91:b7:8f:c5:3f:19:59:23:a9:51:e7:74:29:40:ea:6a:f2:9e:
         00:c3:c6:fe:fd:93:7f:ce:6a:4b:df:92:8a:0e:3b:03:16:df:
         07:e8:6f:b7:1b:e0:4e:e0:2e:ea:b2:1c:21:5b:26:fa:9c:6f:
         7f:b5:28:b3:27:49:38:9f:f0:1b:22:57:1f:25:ac:bf:77:af:
         a1:5d:d8:67:e6:1b:fd:32:ef:e0:16:11:6c:fe:cd:86:5a:63:
         7f:54:7b:42:09:55:34:55:f4:63:3c:e1:a4:31:92:b4:73:ac:
         16:66:a8:c7:4c:0b:2a:28:ce:af:71:1b:24:d6:c2:5b:92:08:
         b1:72:d4:e8:0f:75:ce:a5:0f:45:0f:d8:47:4a:76:10:4e:74:
         08:77:4b:9f:7b:b0:64:05:75:99:76:6c:df:9f:00:f5:ad:bf:
         2d:f9:e2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----