Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/05b384f93cb3cdb00fc43ee40397d181a4000b70.roa
File:                     05b384f93cb3cdb00fc43ee40397d181a4000b70.roa (raw, json)
Hash identifier:          vrKpA2NoD6GiXQCtlNMDrvbxNIDJfpGbRTQ8tne+shk=
Subject key identifier:   26:ED:57:61:CD:30:D1:09:D2:B9:B6:F3:B5:B3:48:72:7B:79:28:C3
Certificate issuer:       /CN=9320cf286d5e9ab8d030eceb13d4663a644d9a38
Certificate serial:       0D315B
Authority key identifier: 40:47:2F:18:F8:D9:0A:D8:A6:3A:88:A3:23:67:82:9C:A5:C5:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9320cf286d5e9ab8d030eceb13d4663a644d9a38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/05b384f93cb3cdb00fc43ee40397d181a4000b70.roa
Signing time:             Thu 29 Feb 2024 22:15:53 +0000
ROA not before:           Thu 29 Feb 2024 22:15:53 +0000
ROA not after:            Sat 28 Feb 2026 22:15:53 +0000
asID:                     272156
IP address blocks:        2803:4890::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864603 (0xd315b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9320cf286d5e9ab8d030eceb13d4663a644d9a38
        Validity
            Not Before: Feb 29 22:15:53 2024 GMT
            Not After : Feb 28 22:15:53 2026 GMT
        Subject: CN=05b384f93cb3cdb00fc43ee40397d181a4000b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:d4:03:7b:6c:f9:0e:3a:8a:d8:54:ad:4a:
                    96:67:64:b3:38:fd:3e:78:b9:49:6c:2a:01:ee:ac:
                    92:a6:96:d3:65:59:f7:6d:c0:f0:59:c7:a8:2c:e6:
                    b5:76:b0:c4:72:78:3a:ec:6a:93:33:dd:4a:9f:35:
                    a4:f6:0d:35:6a:31:25:7d:36:eb:20:58:e6:89:02:
                    d8:fe:1e:1d:f7:4a:e6:56:bb:04:bc:7f:bb:7d:23:
                    28:81:27:ae:7f:2f:04:3f:34:c5:61:32:78:4e:68:
                    23:de:bd:f6:eb:c3:ea:3f:75:f8:f8:8b:22:0e:ea:
                    cd:49:76:60:1a:3d:0b:44:59:51:ae:f5:35:99:98:
                    08:a8:f8:97:89:d5:11:12:7e:59:cb:b5:77:70:75:
                    a8:ce:5d:7f:69:1a:3c:18:be:1e:89:fb:d9:1a:af:
                    6f:84:9d:cf:49:a6:b2:17:44:33:38:cc:74:64:1c:
                    d9:e1:e9:cb:c6:70:11:99:c8:df:16:77:61:45:05:
                    0b:2d:0a:a7:66:1b:01:d6:70:00:cc:6b:e6:17:14:
                    95:d2:d8:ef:5a:53:0f:82:96:b3:83:4c:e2:dc:57:
                    af:26:59:95:56:ca:4a:17:bb:b7:35:d1:59:09:86:
                    a4:50:f0:35:35:58:f9:31:24:bf:11:f0:bc:81:62:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:ED:57:61:CD:30:D1:09:D2:B9:B6:F3:B5:B3:48:72:7B:79:28:C3
            X509v3 Authority Key Identifier:
                keyid:40:47:2F:18:F8:D9:0A:D8:A6:3A:88:A3:23:67:82:9C:A5:C5:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9320cf286d5e9ab8d030eceb13d4663a644d9a38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/05b384f93cb3cdb00fc43ee40397d181a4000b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a6ab581-9392-45b3-be90-e10350426462/9320cf286d5e9ab8d030eceb13d4663a644d9a38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4890::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:8a:35:69:e5:9b:da:16:54:f5:48:ad:71:9c:58:da:5e:
         4d:cf:26:8c:8d:75:17:5c:57:43:b1:9f:73:0c:d3:11:a5:29:
         73:fe:b6:ee:c6:6b:66:2a:b4:d5:0d:20:16:e4:de:f4:96:a3:
         6f:73:2d:93:76:43:78:9c:b6:e0:14:04:86:be:37:d7:f1:29:
         07:20:19:fd:25:03:0d:de:5f:7f:ad:bc:59:50:44:fb:c2:d2:
         cb:59:72:4e:55:3b:fa:c5:38:8f:da:1f:98:80:10:b9:ab:28:
         ba:44:55:31:c6:86:99:ef:10:e6:dc:c1:f7:31:4a:1f:af:79:
         8c:85:c9:fe:9c:05:b9:27:47:57:73:68:cd:0f:30:e7:62:66:
         7a:f0:b7:1e:67:78:6a:74:eb:22:d7:4a:37:a1:a7:7a:a1:f5:
         30:f0:c4:65:57:1d:2e:08:fa:11:38:31:79:00:fb:ef:5b:9a:
         5f:8f:b2:ab:ee:bf:95:2e:af:df:66:f8:50:0b:62:f4:a9:0b:
         44:89:47:a3:26:7e:cc:cb:8d:67:13:13:c4:31:00:0d:d5:06:
         a1:1e:91:b3:3e:a3:93:43:79:30:3d:a3:48:07:eb:e9:48:33:
         9a:52:0d:7e:a1:23:00:e9:9f:42:d6:95:07:9a:22:58:75:13:
         e6:91:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----