Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/b788e80c780f98630f4de514f83e759317c1d722.roa
File:                     b788e80c780f98630f4de514f83e759317c1d722.roa (raw, json)
Hash identifier:          aCABNado0ITI7eeu2kZdNlAp0m4rYRTUJbrlmFCPVn4=
Subject key identifier:   72:BA:FC:AA:86:FA:DF:39:88:D3:AB:0C:0A:0B:E8:B4:60:18:64:72
Certificate issuer:       /CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
Certificate serial:       121E7A
Authority key identifier: CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/b788e80c780f98630f4de514f83e759317c1d722.roa
Signing time:             Sat 17 Feb 2024 07:30:13 +0000
ROA not before:           Sat 17 Feb 2024 07:30:13 +0000
ROA not after:            Mon 16 Feb 2026 07:30:13 +0000
asID:                     272004
IP address blocks:        2803:6910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187450 (0x121e7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb
        Validity
            Not Before: Feb 17 07:30:13 2024 GMT
            Not After : Feb 16 07:30:13 2026 GMT
        Subject: CN=b788e80c780f98630f4de514f83e759317c1d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:9e:5f:5e:51:7f:0d:58:82:f8:06:6e:e4:
                    3b:2a:4d:29:a3:48:a9:c2:28:c7:cc:12:e6:93:d1:
                    72:08:18:f8:06:f9:b9:98:2d:a3:45:a3:10:16:4c:
                    a7:ba:19:58:c2:d4:37:32:56:1d:81:f9:46:86:73:
                    d7:59:ee:94:eb:24:93:22:c3:e9:8e:9e:11:a8:74:
                    14:6b:56:01:4d:e2:a8:a5:85:12:80:9f:26:f7:dc:
                    12:ff:97:14:7b:34:37:b7:62:05:47:0e:e3:04:e4:
                    55:5d:73:91:d4:c7:8a:9f:ed:cd:9b:37:3d:c5:39:
                    9a:05:46:db:73:0a:23:2d:d5:97:d3:c8:2e:a6:62:
                    1d:dd:24:f6:e0:64:4c:1d:66:c8:e2:21:17:2c:23:
                    44:c0:8a:d2:57:02:74:3a:1a:ae:c7:9c:c5:51:15:
                    61:cf:9c:b3:6e:85:20:15:55:39:4c:1b:c6:7f:25:
                    41:38:f3:aa:76:ab:e4:87:4d:36:f7:4e:9d:99:95:
                    7d:33:7b:1a:2a:fe:90:1a:ac:48:b9:93:3a:1b:af:
                    86:e7:a5:d7:23:eb:de:c8:13:ac:39:bc:ff:17:0a:
                    fd:7c:4b:d4:0c:80:fb:55:76:82:e8:35:66:56:6e:
                    63:fc:b9:cb:0f:36:9b:02:3d:79:d6:58:20:c8:86:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:FC:AA:86:FA:DF:39:88:D3:AB:0C:0A:0B:E8:B4:60:18:64:72
            X509v3 Authority Key Identifier:
                keyid:CE:65:61:1E:20:D7:63:69:5B:1B:57:37:32:E3:CB:FA:80:EF:E7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/b788e80c780f98630f4de514f83e759317c1d722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27ad8d62-5452-47d0-b425-505bad9890c3/19fdaf7213e9c0035d7ccdc05f07ceca37cdfdeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6910::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:d7:bd:62:1e:c7:7d:b2:3e:93:e5:9f:ad:f0:73:4b:e9:
         11:70:cc:94:52:5d:75:d0:43:7e:95:2b:a5:b2:b0:26:79:37:
         96:44:a9:91:c4:9d:91:53:9b:82:13:29:fb:29:0f:fd:58:db:
         d4:0f:bd:c5:38:bc:c5:e0:5b:e4:17:75:94:d1:08:b0:ba:63:
         dc:1d:fa:f0:2d:ae:ad:7f:3d:72:8c:8f:4e:38:8a:21:23:22:
         17:9c:07:a1:bc:c6:04:46:88:3d:e3:18:27:5a:e5:b7:67:a1:
         fb:01:ca:65:2a:51:0b:85:e8:3b:af:0a:71:10:ab:f5:2f:15:
         ef:37:3c:eb:01:da:59:20:0e:cf:5d:c4:98:9e:2f:a1:f6:0e:
         e3:73:ac:40:a6:7b:21:5b:5e:cc:47:6f:49:22:70:9e:dd:e9:
         38:5a:cb:6b:db:43:fc:39:b1:2c:8f:b2:d3:7f:6f:55:a8:7e:
         a1:22:b2:2c:3b:85:12:92:c8:3d:e6:24:9d:9a:45:d6:b6:ba:
         ce:d3:6c:59:2c:35:71:db:54:5c:43:a0:34:67:98:f8:fd:1f:
         17:69:a8:1a:2c:7f:cd:28:db:d3:e5:be:ef:4f:a4:b8:b9:60:
         06:cf:d6:cb:d8:dd:f8:b9:de:28:43:b0:08:d4:0b:a5:3a:01:
         cf:b2:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----