Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/52816e42f8fd32ca5e59a1148f20589d9942cfe1.roa
File:                     52816e42f8fd32ca5e59a1148f20589d9942cfe1.roa (raw, json)
Hash identifier:          UXzaQOxgikgLyb3i4MMv6zGUnx0B7T0dbQQifCwHzcM=
Subject key identifier:   43:9F:6A:3B:FD:F7:E3:3D:BF:74:CB:7B:BA:CB:25:A1:6A:A8:AD:61
Certificate issuer:       /CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
Certificate serial:       0979
Authority key identifier: 73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/52816e42f8fd32ca5e59a1148f20589d9942cfe1.roa
Signing time:             Thu 26 Oct 2023 14:20:14 +0000
ROA not before:           Thu 26 Oct 2023 14:20:14 +0000
ROA not after:            Sun 26 Oct 2025 14:20:14 +0000
asID:                     273112
IP address blocks:        2803:a850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
        Validity
            Not Before: Oct 26 14:20:14 2023 GMT
            Not After : Oct 26 14:20:14 2025 GMT
        Subject: CN=52816e42f8fd32ca5e59a1148f20589d9942cfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:8e:02:95:94:f0:49:45:c8:24:e4:c1:32:
                    e1:12:4b:7e:45:cc:2c:58:6c:d9:b6:11:96:1c:08:
                    e7:cc:80:69:f4:db:96:9c:28:02:14:fc:d6:21:92:
                    7e:19:41:7e:54:dd:d8:96:26:c3:d0:37:1f:b0:00:
                    d1:70:ac:ab:73:d9:65:c6:01:d6:0b:35:bd:6f:f1:
                    28:f1:5f:4c:c7:f4:89:77:03:e8:5f:a8:e2:21:12:
                    6b:4a:0f:d8:c6:f7:87:cd:44:de:09:2b:51:05:ac:
                    8a:97:19:ba:35:5b:cc:bf:c5:b8:fc:ab:33:71:d6:
                    a5:6c:85:66:f3:86:e2:15:25:6e:18:ce:b6:d4:ad:
                    6a:c0:82:ba:fe:f9:13:7b:ba:98:75:fb:64:99:12:
                    22:19:c8:bf:d4:53:c9:12:5d:01:81:ed:d2:aa:93:
                    03:d9:35:df:48:f0:d6:58:26:e3:8f:58:e4:fb:90:
                    54:97:49:4f:ee:0e:67:39:9e:21:79:e9:1f:98:03:
                    03:a7:a2:f5:8f:ed:a1:ac:9b:96:44:b4:2c:f5:dc:
                    09:2f:2d:a3:b2:14:ff:6a:f3:04:fe:cd:db:21:c2:
                    4e:2b:bd:ac:e8:83:3d:27:0e:fb:24:aa:92:72:c4:
                    c7:9a:9c:22:15:43:f2:67:24:b4:9e:29:59:0b:c2:
                    d9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:6A:3B:FD:F7:E3:3D:BF:74:CB:7B:BA:CB:25:A1:6A:A8:AD:61
            X509v3 Authority Key Identifier:
                keyid:73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/52816e42f8fd32ca5e59a1148f20589d9942cfe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:dd:dd:ef:01:d3:48:5f:b0:ac:eb:d2:4b:39:2b:aa:12:
         57:bd:fc:30:75:a2:5e:18:55:5f:8a:95:54:4d:f6:7e:4c:55:
         3f:ed:7b:3d:38:d7:9d:65:ac:bb:ae:10:60:92:cd:f4:55:fd:
         7c:51:98:72:b9:50:50:b9:11:e3:65:30:ba:3d:78:ed:99:08:
         e2:e3:e7:6b:09:cc:00:49:fc:e1:dd:36:0e:87:1f:95:d6:bb:
         43:21:ed:14:d4:64:0e:78:34:62:fa:15:24:d8:33:2b:fd:92:
         12:38:ad:e4:2e:d5:1e:d1:39:91:ab:51:60:4e:09:40:d1:6d:
         73:86:2f:b2:92:00:16:f1:e0:cb:10:ca:47:23:b3:3f:07:82:
         4c:a2:08:a9:87:6c:3e:92:93:87:78:ee:6b:e7:db:e4:7c:cf:
         52:39:56:69:c4:33:a7:32:f6:1f:20:e1:cd:d0:c0:73:ee:99:
         aa:e1:f6:f6:34:73:04:97:98:5f:4e:e0:74:b4:92:13:ed:95:
         d5:55:d6:29:f6:71:3e:66:f1:c2:a8:cb:20:43:f6:c7:1e:f2:
         7b:20:23:50:40:00:47:84:ce:e3:c0:78:71:b6:af:6a:08:86:
         fd:fd:7a:f9:84:7a:1a:1c:ca:4a:b6:eb:50:5e:8c:01:2f:d7:
         d1:ab:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----