Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/690301ea66498be4aa83641921e63dada185277c.roa
File:                     690301ea66498be4aa83641921e63dada185277c.roa (raw, json)
Hash identifier:          4PoK75yyrj3yxRduWo5SAcT0bJTu//VHoXUkZLUEsUo=
Subject key identifier:   A1:AC:DD:E7:F9:E2:8A:AE:D3:65:AA:03:03:1C:23:FA:43:D6:31:B4
Certificate issuer:       /CN=1f56abce410e73d51495fecd2f14268781937ace
Certificate serial:       0D166A
Authority key identifier: BE:8B:85:75:EC:BC:05:0E:BD:F5:98:12:49:07:BC:62:12:F1:8C:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f56abce410e73d51495fecd2f14268781937ace.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/690301ea66498be4aa83641921e63dada185277c.roa
Signing time:             Thu 15 Feb 2024 16:08:30 +0000
ROA not before:           Thu 15 Feb 2024 16:08:30 +0000
ROA not after:            Thu 15 Feb 2029 16:08:30 +0000
asID:                     64139
IP address blocks:        2803:7090::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857706 (0xd166a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f56abce410e73d51495fecd2f14268781937ace
        Validity
            Not Before: Feb 15 16:08:30 2024 GMT
            Not After : Feb 15 16:08:30 2029 GMT
        Subject: CN=690301ea66498be4aa83641921e63dada185277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:ab:ee:35:a1:2d:be:d3:90:1a:43:b5:9b:
                    65:3e:b7:88:5b:5d:d0:7c:73:83:3d:88:b3:80:1d:
                    2a:00:ce:21:a1:86:d4:ef:02:0c:68:0e:b2:8a:42:
                    dd:51:2e:93:e5:d5:42:89:4a:6b:e3:13:4f:ac:7f:
                    10:fb:07:23:35:07:13:43:78:8d:a8:35:8a:07:2c:
                    34:a0:4a:3c:68:94:fd:66:31:94:60:f8:aa:43:f9:
                    a4:c9:fe:0f:3d:48:4c:ab:11:bd:7e:e4:f9:b0:d9:
                    73:1a:8b:67:36:3d:82:57:26:82:cf:c8:e0:1f:57:
                    8a:20:31:3c:23:c1:23:e3:b8:8d:9e:5a:6e:27:a4:
                    32:1d:20:e1:78:54:b9:78:9f:4e:26:b6:ac:6c:5c:
                    9e:ef:3c:8c:6b:96:73:69:92:1c:a9:c9:b8:a5:04:
                    ce:62:53:3f:da:e9:72:47:df:d5:97:76:66:9d:1e:
                    01:2b:07:21:8a:da:b9:f1:83:8b:10:dc:db:3c:9a:
                    a6:ed:0d:e0:87:fe:33:03:e0:63:4f:0b:fb:ac:aa:
                    bd:28:ab:c8:38:b9:c8:68:5f:76:6e:b3:f6:f9:83:
                    fb:8a:87:82:da:23:c6:c8:07:60:b4:2a:74:e1:d2:
                    66:e9:59:1e:62:42:63:b4:20:e9:dd:43:53:75:97:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:DD:E7:F9:E2:8A:AE:D3:65:AA:03:03:1C:23:FA:43:D6:31:B4
            X509v3 Authority Key Identifier:
                keyid:BE:8B:85:75:EC:BC:05:0E:BD:F5:98:12:49:07:BC:62:12:F1:8C:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f56abce410e73d51495fecd2f14268781937ace.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/690301ea66498be4aa83641921e63dada185277c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25ea30fa-f8e1-4749-bee6-b0d22c0ebddb/1f56abce410e73d51495fecd2f14268781937ace.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7090::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:46:b9:70:66:ca:2e:8a:50:4c:14:1e:df:33:a7:81:b6:
         2d:a4:65:69:21:0f:c0:ca:5c:b2:e3:61:ef:4d:3b:eb:a6:b7:
         b2:ac:b6:10:41:8d:fb:93:3a:a9:ee:aa:37:ca:13:57:e5:2d:
         43:86:39:70:e0:a6:cb:7b:f1:ee:7a:3c:8e:c1:9b:0f:06:ad:
         16:0b:44:2e:db:a8:73:1b:1b:d1:d8:be:01:19:82:a7:4a:2c:
         23:f3:49:ae:55:0d:42:74:13:0c:29:d5:47:6f:d0:f4:8e:9c:
         f3:79:cf:de:8e:16:dc:36:4a:1d:10:d2:03:0e:80:77:69:27:
         f4:3b:9f:73:97:95:ce:a0:14:38:b8:a1:1e:be:e5:3e:dd:2e:
         b9:97:27:3a:95:3f:94:a7:95:55:76:2a:19:cf:83:0d:b1:8d:
         d9:e0:81:05:4a:22:57:23:3b:b1:78:c8:e1:dc:d7:06:6b:52:
         82:74:a5:0a:cb:90:76:65:29:29:1d:f9:aa:31:72:df:3e:00:
         74:6d:51:55:75:04:99:b3:70:db:af:a2:a3:19:b4:a8:9d:cd:
         10:69:1e:4f:e0:94:f2:a1:c2:01:17:bc:d3:72:42:94:ca:bd:
         7b:31:fd:e1:76:41:db:3b:27:06:f9:20:03:49:35:82:61:28:
         cc:96:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----