Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/6dc1ec8ab537f1c0baa6dbfa61d4fda8a8ca9e15.roa
File:                     6dc1ec8ab537f1c0baa6dbfa61d4fda8a8ca9e15.roa (raw, json)
Hash identifier:          HQ/zWuXYDE+gV0P8NdJas0O5FibJ2Fa/6whnxHi7G8k=
Subject key identifier:   0F:03:2B:93:EC:C5:93:AF:D1:EF:D3:DB:E9:A0:3F:D3:C4:3D:38:1D
Certificate issuer:       /CN=d1e0bb312178b8a9593f19007bad41878067f979
Certificate serial:       04BBAB
Authority key identifier: BE:28:32:3C:91:49:DE:93:C5:DF:56:22:FB:CF:DD:42:8B:0B:60:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1e0bb312178b8a9593f19007bad41878067f979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/6dc1ec8ab537f1c0baa6dbfa61d4fda8a8ca9e15.roa
Signing time:             Fri 27 Oct 2023 00:53:10 +0000
ROA not before:           Fri 27 Oct 2023 00:53:10 +0000
ROA not after:            Mon 27 Oct 2025 00:53:10 +0000
asID:                     272970
IP address blocks:        2803:a590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310187 (0x4bbab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e0bb312178b8a9593f19007bad41878067f979
        Validity
            Not Before: Oct 27 00:53:10 2023 GMT
            Not After : Oct 27 00:53:10 2025 GMT
        Subject: CN=6dc1ec8ab537f1c0baa6dbfa61d4fda8a8ca9e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:72:3d:0e:a9:2e:44:bd:e6:95:a6:26:38:
                    d5:91:0d:df:21:8a:27:ab:63:7d:22:b9:b7:75:1a:
                    fe:81:d3:a6:03:ed:e8:ef:8b:db:07:bb:16:52:83:
                    9a:93:3a:6c:34:71:56:8a:aa:49:1d:58:5a:92:d9:
                    2c:07:3b:d8:70:92:3d:2c:d9:3b:54:b1:7f:5f:7c:
                    be:a0:6e:db:26:87:3b:29:bd:86:7a:0c:65:ec:26:
                    31:56:3e:63:93:bd:78:e1:79:ce:7b:0a:87:65:94:
                    3d:ff:8a:ee:7c:04:0b:4e:a6:86:ac:9b:ca:3c:51:
                    ce:d0:97:62:fb:a6:89:dd:e4:29:6a:7f:46:ab:0a:
                    5e:ab:20:6c:11:b8:3b:c8:2f:9c:ac:b3:c4:c4:e8:
                    9a:3e:40:7e:74:05:e4:69:2b:28:1e:4c:c4:84:88:
                    b4:fe:a8:1b:ee:19:33:af:e4:5a:f7:e1:d1:65:bc:
                    a0:ae:c1:3d:a0:55:d9:99:4c:28:9e:2f:d2:97:86:
                    3a:e9:bf:32:26:fb:dd:d7:78:d6:fe:f9:26:b6:60:
                    d3:5f:86:cd:53:20:62:6a:19:4a:ba:e2:f3:43:c0:
                    7c:82:5e:6f:d7:94:7c:e2:26:e7:ad:1a:ed:6b:c3:
                    2a:24:50:78:fc:e4:cb:65:85:8d:44:53:f3:f2:72:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:2B:93:EC:C5:93:AF:D1:EF:D3:DB:E9:A0:3F:D3:C4:3D:38:1D
            X509v3 Authority Key Identifier:
                keyid:BE:28:32:3C:91:49:DE:93:C5:DF:56:22:FB:CF:DD:42:8B:0B:60:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1e0bb312178b8a9593f19007bad41878067f979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/6dc1ec8ab537f1c0baa6dbfa61d4fda8a8ca9e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/d1e0bb312178b8a9593f19007bad41878067f979.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a590::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:44:a0:b8:37:ea:93:40:28:32:74:93:8d:9c:7c:b0:b0:
         9d:86:89:52:53:b7:ab:29:ec:44:d1:e1:41:f5:33:24:56:81:
         be:00:34:3c:56:17:6a:b0:d8:97:c1:18:f5:f5:db:f2:c5:1b:
         3d:31:fa:94:65:a2:1b:6d:9f:f8:ff:36:a0:ad:ac:82:f7:ea:
         27:84:a7:de:d8:47:f7:45:59:f7:f8:19:d7:c7:42:4a:e2:e6:
         64:99:2c:26:f4:c2:a7:a5:06:ec:30:3a:d4:63:7e:0c:77:18:
         f5:25:e6:3c:1d:bc:33:5a:0f:3a:ca:08:07:a2:67:87:81:25:
         9a:cf:ee:d0:86:94:ca:0c:26:5a:3c:3d:ef:2a:a2:c2:19:1a:
         90:18:29:9d:4a:53:86:3f:44:02:99:60:84:05:b4:b7:7e:4d:
         0b:d3:2d:d5:4e:33:4b:f9:40:ea:fa:ae:a6:7e:6a:35:83:ce:
         a5:e7:2f:f6:d2:28:4b:83:5f:e0:1a:cc:42:e6:ee:e7:39:b2:
         c1:4f:33:51:b3:59:ab:35:3b:e0:39:4f:c5:bd:f4:6f:d3:3e:
         74:7d:bc:6f:55:3e:f2:1b:a8:c0:e4:f8:ac:27:03:8d:57:fd:
         a6:bd:eb:59:e6:c7:87:06:18:d3:ca:d8:6b:37:71:f7:f6:05:
         15:f5:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----