Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/8c0a67255b6e4c24e76e906dae871467ff4a79c1.roa
File:                     8c0a67255b6e4c24e76e906dae871467ff4a79c1.roa (raw, json)
Hash identifier:          MaOchem15cp8NiGDm6JgibUQ2lMctv96Y0375ubWCH4=
Subject key identifier:   E8:62:B1:3A:C4:56:0C:E8:48:EF:87:FD:7B:E2:78:D6:85:45:EF:E6
Certificate issuer:       /CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
Certificate serial:       036C2D
Authority key identifier: 73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/8c0a67255b6e4c24e76e906dae871467ff4a79c1.roa
Signing time:             Mon 04 Mar 2024 20:13:14 +0000
ROA not before:           Mon 04 Mar 2024 20:13:14 +0000
ROA not after:            Wed 04 Mar 2026 20:13:14 +0000
asID:                     272848
IP address blocks:        2803:a850::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224301 (0x36c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
        Validity
            Not Before: Mar  4 20:13:14 2024 GMT
            Not After : Mar  4 20:13:14 2026 GMT
        Subject: CN=8c0a67255b6e4c24e76e906dae871467ff4a79c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:3f:c9:27:ce:55:83:c3:45:fc:c9:a4:b6:
                    a2:a3:a2:9c:02:f2:cd:7f:69:82:84:59:db:42:6c:
                    f8:50:e5:31:c9:c1:17:36:68:3d:40:e1:bd:40:0a:
                    3e:ab:b1:26:5c:fa:0a:f1:e5:0d:3b:2f:cd:5c:ac:
                    a5:ce:af:67:1e:dc:8a:f6:34:ea:04:bd:df:f1:ae:
                    3d:8f:b9:d0:e2:63:8a:53:c8:61:f9:e7:fc:d7:8a:
                    61:80:3e:aa:62:aa:06:71:ad:2b:9f:01:e8:a2:16:
                    ef:09:09:92:e8:20:96:53:1c:80:ca:ca:6e:4d:3d:
                    d1:2d:c6:06:2a:37:fd:eb:16:99:6b:ea:af:d6:f2:
                    c0:64:50:3f:40:23:45:49:07:c5:e7:ae:d5:1a:d5:
                    e7:62:ff:b6:fa:22:05:d4:38:ba:7e:10:d9:68:da:
                    82:0f:6a:f5:78:e8:64:8c:46:11:9c:60:96:54:2a:
                    a6:2d:77:28:45:18:11:cc:a1:42:01:40:95:51:2f:
                    3b:5c:42:a0:ee:83:cf:08:39:14:0c:15:7a:1a:29:
                    05:4d:2a:a3:2d:54:28:e3:b7:92:dd:04:bf:4e:0c:
                    bd:45:04:0a:36:0c:77:18:00:22:6e:2b:e3:cf:82:
                    5e:3a:66:ff:ac:5b:ef:4b:db:9d:3d:10:f7:48:df:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:B1:3A:C4:56:0C:E8:48:EF:87:FD:7B:E2:78:D6:85:45:EF:E6
            X509v3 Authority Key Identifier:
                keyid:73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/8c0a67255b6e4c24e76e906dae871467ff4a79c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:43:9e:4b:f1:53:74:d3:2e:eb:06:ef:20:0d:d2:b5:11:45:
         b2:f4:44:76:ba:88:92:cc:05:78:b7:d3:2b:ed:6d:46:f4:17:
         df:e8:f2:37:14:01:b9:13:7e:95:bc:a7:a3:ca:60:5f:fc:37:
         d7:04:21:0c:be:aa:a4:c0:66:d7:bd:29:3e:e9:63:bb:4e:02:
         35:cc:75:78:9c:de:33:76:40:d6:2b:be:f3:2d:38:66:43:82:
         ce:5e:20:48:f0:64:9a:5e:93:2a:4a:74:c8:f6:23:61:47:32:
         98:0b:13:3a:22:bb:d7:cd:a3:d5:9d:35:d2:bf:10:80:5e:ff:
         f9:85:1a:f4:da:dd:25:d3:bc:31:22:27:0e:5f:f1:27:4c:0e:
         5f:53:22:a7:f1:6e:1e:3b:2a:cb:c9:1b:2b:94:3d:b8:2c:df:
         f3:84:b3:49:f9:7b:29:f4:ca:be:87:e8:05:ba:b1:8a:c1:0a:
         65:1c:06:2c:77:3b:10:bc:61:da:b1:57:be:70:2e:f4:98:9d:
         58:37:56:98:6d:50:d1:6d:46:b4:b1:38:18:0e:c9:5d:a0:cb:
         eb:76:d7:1e:f7:b3:75:e2:b9:be:a9:98:f9:06:22:91:2f:80:
         95:55:d0:9a:31:f7:d4:b5:ea:3e:2c:32:ce:60:6e:44:26:89:
         00:29:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----