Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/26f357c156a18cdffb0c8359816613541068f66f.roa
File:                     26f357c156a18cdffb0c8359816613541068f66f.roa (raw, json)
Hash identifier:          mD1OHrFyJlkUpXfZgYb2VQpqiEE0YrWCYkROgycYFt0=
Subject key identifier:   A7:A4:44:0F:AD:69:00:91:18:79:C1:FF:0F:D8:8B:1D:16:93:26:A5
Certificate issuer:       /CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
Certificate serial:       0B9106
Authority key identifier: 9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/26f357c156a18cdffb0c8359816613541068f66f.roa
Signing time:             Sat 21 Oct 2023 17:17:14 +0000
ROA not before:           Sat 21 Oct 2023 17:17:14 +0000
ROA not after:            Tue 21 Oct 2025 17:17:14 +0000
asID:                     270083
IP address blocks:        2803:2be0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758022 (0xb9106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
        Validity
            Not Before: Oct 21 17:17:14 2023 GMT
            Not After : Oct 21 17:17:14 2025 GMT
        Subject: CN=26f357c156a18cdffb0c8359816613541068f66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:09:25:fa:e7:d1:71:49:af:a3:db:34:7a:
                    0d:0a:00:5f:61:6a:b9:b1:9d:15:3b:2b:9c:90:13:
                    9e:ff:eb:a7:dc:87:70:4f:30:0b:4d:ae:68:21:e6:
                    6e:93:39:5e:03:4a:6e:b3:89:aa:a5:31:76:d8:13:
                    0d:73:f4:a3:b1:09:38:04:a7:8c:49:d0:f8:c9:32:
                    dc:7e:3f:12:81:74:e7:f5:82:21:c4:77:77:68:80:
                    5d:42:41:10:45:c1:d7:52:38:34:ae:01:ba:fa:4d:
                    57:69:14:5a:30:2b:e7:37:16:da:0d:ef:d3:d6:88:
                    be:ac:ba:b1:d8:0c:2b:98:46:0e:84:b6:8b:d8:3d:
                    e3:b4:2c:6f:93:01:cd:c8:a0:12:df:2a:40:aa:73:
                    72:cb:aa:4a:21:e5:28:73:09:a8:5b:ca:92:68:ce:
                    2c:1c:e9:0b:b4:48:92:05:18:c3:f7:91:7a:1b:89:
                    09:3e:76:59:24:a5:13:fa:a2:9d:1f:22:15:84:2a:
                    53:be:de:3b:50:c9:69:92:56:4c:7d:a7:12:23:e9:
                    0c:0c:90:d5:51:bc:2b:ca:51:5f:13:37:c6:1c:50:
                    76:b0:9a:a3:4c:79:85:69:4c:c8:a6:96:8f:a0:c1:
                    0a:03:54:03:c3:57:da:02:14:79:d4:18:ac:a7:bb:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:44:0F:AD:69:00:91:18:79:C1:FF:0F:D8:8B:1D:16:93:26:A5
            X509v3 Authority Key Identifier:
                keyid:9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/26f357c156a18cdffb0c8359816613541068f66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/2741c4b95ce4e26190e9cd3600e7acc3be164b12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:b6:0a:92:d0:5d:8b:68:ee:34:51:8b:f5:80:5f:ff:ff:
         77:03:ac:e2:4e:09:6f:47:a8:da:28:2c:83:bf:02:62:80:2f:
         01:d4:9a:a4:0c:d5:13:4f:9e:d2:c4:db:fa:fd:52:ec:f3:a0:
         fe:2b:f7:3b:01:6a:a4:03:77:34:2f:49:62:b9:31:4a:e0:c5:
         3e:48:65:ad:d9:19:f1:b0:7b:28:6a:35:a8:c3:20:99:d6:6d:
         87:2d:58:fe:59:cd:e3:9f:49:9b:dd:9e:c4:31:d3:2e:28:24:
         2c:ea:aa:77:a1:80:53:16:77:be:a8:fc:b9:5b:af:10:ca:f2:
         39:f2:3e:f9:4f:6e:e2:88:5f:35:de:63:19:a1:ba:ec:6f:cb:
         bd:2b:d8:73:30:02:26:9e:7a:01:bc:30:12:97:eb:00:20:a1:
         98:db:5c:81:ac:7f:75:1a:fc:29:19:3e:3f:af:b8:b8:44:f9:
         24:24:cd:3c:8d:3c:84:9b:bc:a7:a8:67:93:93:ed:76:3d:f8:
         cc:8a:3a:de:39:35:56:14:21:6d:fb:3e:ec:97:26:78:3a:4d:
         0b:4d:bd:74:8e:ad:10:ea:0f:20:dc:12:9c:da:61:00:8a:aa:
         75:17:a7:8e:b0:9a:cc:48:2d:02:f8:8c:da:6f:c8:48:33:c8:
         59:aa:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----