Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/e51f3ea165e46e23d122ad7f3606644de894706f.roa
File:                     e51f3ea165e46e23d122ad7f3606644de894706f.roa (raw, json)
Hash identifier:          yWxyKFoeo+i1d4Pv7F+y1rOxuwdPCXeYFF99HXeBTRw=
Subject key identifier:   49:D0:42:36:8D:E6:FC:5F:9B:00:1F:06:9C:6F:45:A4:D2:05:6B:60
Certificate issuer:       /CN=6d083294d684852ceb012f4a73acee2ef7f7b85a
Certificate serial:       1A9F31
Authority key identifier: ED:78:49:6E:9D:D6:8E:DE:4B:73:87:2E:90:DD:2F:66:8D:25:64:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d083294d684852ceb012f4a73acee2ef7f7b85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/e51f3ea165e46e23d122ad7f3606644de894706f.roa
Signing time:             Wed 18 Oct 2023 07:30:00 +0000
ROA not before:           Tue 17 Oct 2023 07:30:00 +0000
ROA not after:            Thu 16 Oct 2025 07:30:00 +0000
asID:                     267913
IP address blocks:        2803:e60::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744689 (0x1a9f31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d083294d684852ceb012f4a73acee2ef7f7b85a
        Validity
            Not Before: Oct 17 07:30:00 2023 GMT
            Not After : Oct 16 07:30:00 2025 GMT
        Subject: CN=e51f3ea165e46e23d122ad7f3606644de894706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:da:e3:81:20:3b:8c:cf:da:90:44:a6:c9:
                    67:aa:2b:b6:02:3f:33:6e:5e:0d:c3:57:d2:2b:d3:
                    29:74:49:14:3a:53:09:d3:ba:c5:7e:7e:81:72:7d:
                    96:5e:de:c9:53:05:22:94:a4:c9:31:c5:d6:4f:92:
                    39:00:fd:34:5a:29:bc:79:ec:8f:ff:76:07:e5:32:
                    62:25:87:9b:0a:ce:a7:64:98:17:c8:8e:3b:46:da:
                    4f:60:56:23:ac:3b:8e:db:64:c9:51:a8:65:df:84:
                    15:0f:80:90:eb:bd:08:9d:08:2e:8b:64:4c:e0:73:
                    56:4a:bb:e2:7d:3d:7c:e3:c9:3a:60:88:82:5b:a7:
                    db:49:72:8e:a3:16:26:9e:47:fb:83:15:92:85:29:
                    9d:5d:52:a7:80:f0:54:c9:f5:9d:80:06:47:f9:85:
                    df:76:62:71:7a:0a:06:9b:d0:38:2b:74:c7:93:34:
                    fe:8f:59:7b:5b:a9:69:b7:15:93:1b:0e:3e:84:db:
                    d2:ed:7b:02:93:c0:27:d8:f9:fe:43:2a:ad:c7:f8:
                    87:45:7a:69:e8:59:d0:99:0b:a8:2a:3a:11:b3:41:
                    42:c6:3f:fb:53:80:68:81:cb:fc:24:50:ca:19:1e:
                    2c:d7:e2:12:ed:c3:4d:f7:31:40:41:d6:c5:d3:7d:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D0:42:36:8D:E6:FC:5F:9B:00:1F:06:9C:6F:45:A4:D2:05:6B:60
            X509v3 Authority Key Identifier:
                keyid:ED:78:49:6E:9D:D6:8E:DE:4B:73:87:2E:90:DD:2F:66:8D:25:64:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d083294d684852ceb012f4a73acee2ef7f7b85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/e51f3ea165e46e23d122ad7f3606644de894706f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1bc68bb9-d21f-40f9-bad6-5de7ddcfa93b/6d083294d684852ceb012f4a73acee2ef7f7b85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:6b:2f:d7:d4:ba:bb:2c:a4:eb:3f:74:c6:c2:b1:c9:6e:
         a3:38:40:20:23:7f:60:5b:44:84:3f:51:9d:16:86:4e:eb:54:
         b5:63:bb:ff:30:47:b8:bd:15:f0:63:03:6a:d5:29:50:de:a7:
         c1:ad:44:70:eb:65:c7:9f:1f:64:6c:78:78:a2:fa:54:fb:65:
         99:d8:77:b8:09:c6:f9:ca:7a:6d:e2:f1:a0:88:95:50:82:82:
         97:6b:77:f5:16:c6:62:5a:89:ab:c3:ec:20:6f:7d:37:31:61:
         6e:48:d5:ce:cb:d9:9d:9f:a7:98:37:d0:74:0f:47:88:c4:5f:
         df:66:82:68:13:61:05:5c:da:a1:db:5b:7d:05:d4:35:01:d7:
         55:a7:d4:9e:2f:30:0f:ad:a7:ae:0c:c4:d3:66:b3:97:9e:3d:
         c0:a5:4a:9c:53:9d:11:15:f2:dc:d9:72:9a:f9:91:89:f2:94:
         14:35:29:83:1d:5f:56:e0:c0:01:38:a9:5a:c2:16:56:12:88:
         29:fc:e0:df:43:b0:99:43:fc:af:56:aa:88:32:2e:aa:6b:5a:
         c5:60:39:51:89:27:08:37:17:92:48:8f:a8:b9:c2:b3:53:10:
         79:8c:c8:6e:30:b7:e7:68:bd:d0:cc:2d:7a:2f:dd:69:bf:1b:
         31:d4:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----