Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/385585f267a85c36424249d2256b1389c512ea4f.roa
File:                     385585f267a85c36424249d2256b1389c512ea4f.roa (raw, json)
Hash identifier:          BkB7lUJ7JJlZxM16llbllzpfofObDRUTcebPbwfEpSw=
Subject key identifier:   0F:2A:45:F3:B1:3C:F3:BF:23:E9:92:C6:6F:41:F8:4C:F2:8C:B2:86
Certificate issuer:       /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial:       254508
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/385585f267a85c36424249d2256b1389c512ea4f.roa
Signing time:             Tue 02 Jan 2024 15:20:57 +0000
ROA not before:           Tue 02 Jan 2024 15:20:56 +0000
ROA not after:            Fri 02 Jan 2026 15:20:56 +0000
asID:                     52436
IP address blocks:        2803:b900::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442504 (0x254508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Validity
            Not Before: Jan  2 15:20:56 2024 GMT
            Not After : Jan  2 15:20:56 2026 GMT
        Subject: CN=385585f267a85c36424249d2256b1389c512ea4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:00:3c:97:b1:f2:0b:3c:99:cf:5e:27:17:
                    d3:e7:86:1f:5e:61:28:c3:00:d2:78:64:d6:a4:bc:
                    03:1e:e4:48:00:51:6e:ce:10:66:fc:88:6b:6c:6b:
                    7d:1d:55:9f:e0:97:3c:26:82:ba:34:b3:a9:de:c3:
                    22:55:fe:36:a7:42:25:6b:27:e9:e3:0c:1e:12:ad:
                    3d:14:01:7f:79:2a:2b:1a:cb:76:9a:7d:73:d3:70:
                    93:98:0f:bb:06:1a:0e:c2:67:2d:20:97:ff:a6:8a:
                    a2:9b:37:bf:7f:46:28:ba:83:92:9a:9e:5e:9f:8f:
                    ab:4a:0c:20:3b:1b:c2:ff:17:59:39:a0:3f:4f:0e:
                    ac:50:9d:bf:ab:5e:6b:07:b1:86:a4:df:7e:f5:35:
                    74:e4:b1:4a:4a:6e:c3:fd:c7:12:98:ef:21:fe:36:
                    d8:e8:52:97:eb:70:46:14:1b:b8:49:81:e0:48:74:
                    40:f0:3d:53:60:86:6d:b0:37:43:ac:8c:d9:6e:43:
                    b8:cd:5e:6e:c9:d7:f5:bb:cd:4b:e1:75:be:62:60:
                    4d:6d:7a:17:e9:8b:fb:cb:f3:a4:22:e5:f7:99:f3:
                    5b:18:23:0b:e3:d6:68:f6:76:81:11:f2:6e:3b:8e:
                    ff:e3:5e:ee:16:af:d5:26:04:d0:7e:b6:e2:0d:c1:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2A:45:F3:B1:3C:F3:BF:23:E9:92:C6:6F:41:F8:4C:F2:8C:B2:86
            X509v3 Authority Key Identifier:
                keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/385585f267a85c36424249d2256b1389c512ea4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b900::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:7a:7b:87:91:de:e2:53:7c:15:2d:04:fe:a8:a0:13:c6:
         9a:01:0f:17:4f:b4:6e:d1:b7:45:3e:b5:e6:fd:db:83:14:f8:
         f8:20:77:08:ae:b4:a6:12:46:67:cf:92:b5:c3:4b:6a:a5:ef:
         b4:a8:17:f0:47:5b:36:ba:f9:4e:89:0b:c4:8a:51:4e:f1:db:
         5a:78:f1:0b:ec:48:a1:e1:cf:5b:59:f2:e1:3f:bf:89:e9:3b:
         8a:0e:6a:d0:c4:af:a5:39:94:6a:ec:3b:e7:ca:6f:77:2f:a1:
         15:3b:46:e1:31:44:8f:ff:9a:e8:ae:49:ed:c0:fb:c3:9d:57:
         12:4b:8f:f6:7e:b0:ee:99:ed:c8:83:f1:58:5f:98:c1:8e:5f:
         86:f8:e0:8b:12:a4:b4:bd:71:40:1b:7f:e3:e0:4d:8e:82:bc:
         71:38:29:12:41:ac:79:ac:ea:27:04:d5:c0:b0:84:e4:2c:a9:
         35:55:3a:0c:56:08:8a:f9:db:94:3b:09:1c:c0:4d:90:75:9f:
         aa:64:07:e9:4f:c9:a0:eb:20:fb:7a:3d:66:59:f1:bc:e1:c6:
         8e:64:f9:ce:12:fc:72:70:60:78:12:10:ab:2d:35:ec:3e:6b:
         d1:16:51:39:2d:ab:ce:57:9a:23:a5:18:2a:d1:55:49:c5:bb:
         a9:d9:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----