Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256e36b4-54b0-4620-9c02-7edb4afe5ad7/b1dde5f112be496a7fab833078ea148013a4f997.roa
File:                     b1dde5f112be496a7fab833078ea148013a4f997.roa (raw, json)
Hash identifier:          ZHWT7X+mUk6aS084vo8mmvKEoEZn1zjxb6/KICZqkiA=
Subject key identifier:   61:18:5D:A0:75:51:08:91:E1:66:20:40:CF:70:AE:EC:3B:5E:19:37
Certificate issuer:       /CN=d4170ff3aec32056c854f0dc72f8f57d2314ac4e
Certificate serial:       03E09E
Authority key identifier: 8A:F2:E9:9A:C7:8A:C3:62:D9:B5:7F:70:66:D8:8B:03:57:06:F7:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4170ff3aec32056c854f0dc72f8f57d2314ac4e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256e36b4-54b0-4620-9c02-7edb4afe5ad7/b1dde5f112be496a7fab833078ea148013a4f997.roa
Signing time:             Wed 04 Oct 2023 20:01:16 +0000
ROA not before:           Tue 03 Oct 2023 20:01:16 +0000
ROA not after:            Sat 04 Oct 2025 21:01:16 +0000
asID:                     272972
IP address blocks:        2803:e590::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254110 (0x3e09e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4170ff3aec32056c854f0dc72f8f57d2314ac4e
        Validity
            Not Before: Oct  3 20:01:16 2023 GMT
            Not After : Oct  4 21:01:16 2025 GMT
        Subject: CN=b1dde5f112be496a7fab833078ea148013a4f997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:28:e0:29:17:a7:70:40:0e:bc:20:39:32:
                    ee:1c:e5:83:3a:36:0f:94:99:2d:2e:fc:94:07:01:
                    b3:7a:df:96:2f:6e:b8:61:a6:14:c1:c8:ed:7a:46:
                    46:aa:c3:51:e0:8c:e8:1b:d0:6e:10:af:75:7a:c6:
                    55:88:83:fc:00:73:a7:e2:90:15:f7:b3:01:50:20:
                    df:a6:a0:ff:b8:f1:68:9f:27:99:5f:3b:31:28:a4:
                    46:e0:af:a9:eb:27:b1:7a:61:75:34:e6:06:e6:03:
                    6b:b3:d9:6c:c4:7c:2e:b8:3a:32:1c:60:a6:85:06:
                    d3:36:d4:3e:06:c2:0a:73:59:ae:95:c5:68:f0:7b:
                    e7:bd:71:f8:59:97:5d:ef:4d:6e:78:29:4e:8b:36:
                    f1:4d:38:5f:ab:a5:d0:c5:44:92:0e:04:11:a2:10:
                    04:28:9e:e4:90:89:05:d1:00:fc:47:95:89:7d:bc:
                    9c:2c:f9:31:1c:33:a5:4a:26:8d:55:76:e5:fc:b0:
                    4c:6a:6f:13:89:b8:cb:3e:1a:8a:70:60:ed:dd:e2:
                    a7:0b:86:a4:6c:e0:a1:d3:94:08:11:ce:95:d6:cb:
                    60:a9:d8:08:60:e5:fe:ae:85:5f:53:a1:8a:32:91:
                    fd:b1:3b:cd:07:95:ec:dc:ab:05:1f:8c:a5:eb:d1:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:18:5D:A0:75:51:08:91:E1:66:20:40:CF:70:AE:EC:3B:5E:19:37
            X509v3 Authority Key Identifier:
                keyid:8A:F2:E9:9A:C7:8A:C3:62:D9:B5:7F:70:66:D8:8B:03:57:06:F7:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4170ff3aec32056c854f0dc72f8f57d2314ac4e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256e36b4-54b0-4620-9c02-7edb4afe5ad7/b1dde5f112be496a7fab833078ea148013a4f997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256e36b4-54b0-4620-9c02-7edb4afe5ad7/d4170ff3aec32056c854f0dc72f8f57d2314ac4e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e590::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:28:67:58:a4:d3:71:c2:68:91:a6:0e:18:37:c7:50:96:c8:
         23:63:42:50:6e:ea:2c:f8:c4:bf:53:18:50:93:7c:a4:a2:48:
         bf:ee:be:2d:d0:8e:31:c3:7a:53:ed:53:5e:0d:92:c9:7e:d6:
         68:f1:34:e7:99:b7:7a:91:7a:3d:46:4b:09:20:de:55:c5:33:
         d1:4e:71:48:7c:28:cb:74:ec:07:b7:82:3e:06:14:21:39:d4:
         e2:c3:57:d9:08:d5:e4:d5:bb:e0:d4:27:05:91:e1:99:b6:7a:
         73:cb:60:b8:11:12:ce:5e:12:e4:0e:c0:eb:93:fd:75:07:89:
         ef:f4:31:37:fa:66:b9:c0:d4:9f:8d:10:01:fc:1a:20:40:35:
         0a:3b:17:b6:d2:bd:26:c5:94:d6:a6:97:c3:28:23:49:3c:b1:
         f0:60:59:fe:3f:9c:76:d2:93:9f:3a:0b:f5:dc:2c:07:ac:a3:
         b4:69:ce:22:c6:a9:6f:9c:ad:6f:a4:aa:ab:9d:b2:d8:6d:1b:
         93:ed:60:de:29:88:d4:fa:a1:46:e1:d4:d4:cc:e7:d0:90:39:
         f8:85:18:44:14:68:33:e7:e8:82:6b:3b:28:62:bb:d8:18:18:
         22:38:fa:f5:3a:ba:12:f2:90:ec:bf:e1:ac:bb:69:92:6c:7c:
         a5:b3:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----