Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/1c97061c8ddd396e4f2bc6d661b8ad6c52a2d930.roa
File:                     1c97061c8ddd396e4f2bc6d661b8ad6c52a2d930.roa (raw, json)
Hash identifier:          813hDSDxPwqOBltwf0QKSwUjZhxb2Rr6vkIKvjCglaw=
Subject key identifier:   C4:E6:5D:23:0D:52:F7:DD:39:C2:46:01:CE:86:CF:11:52:A4:DB:16
Certificate issuer:       /CN=d9d8987a151369683bec9eb071c6399a40116247
Certificate serial:       067B2C
Authority key identifier: 36:B7:D0:2E:67:52:7C:93:64:C0:7D:22:71:35:86:E5:6E:B0:58:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9d8987a151369683bec9eb071c6399a40116247.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/1c97061c8ddd396e4f2bc6d661b8ad6c52a2d930.roa
Signing time:             Wed 10 Apr 2024 23:10:50 +0000
ROA not before:           Wed 10 Apr 2024 23:10:50 +0000
ROA not after:            Fri 10 Apr 2026 23:10:50 +0000
asID:                     272122
IP address blocks:        2803:af10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424748 (0x67b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d8987a151369683bec9eb071c6399a40116247
        Validity
            Not Before: Apr 10 23:10:50 2024 GMT
            Not After : Apr 10 23:10:50 2026 GMT
        Subject: CN=1c97061c8ddd396e4f2bc6d661b8ad6c52a2d930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:c2:18:15:5e:d2:c3:74:33:ce:53:8b:52:
                    52:58:db:38:3f:c4:f2:e0:9b:46:c4:4c:31:e1:86:
                    25:0b:6f:d5:e9:f6:c2:d8:15:c2:6e:c5:3a:43:9d:
                    30:3e:7b:3b:b0:17:81:c5:30:d2:3b:86:39:e6:cb:
                    3c:eb:48:3f:85:20:58:ac:4c:96:b0:7e:b9:cb:9e:
                    12:bc:fe:51:86:64:c3:83:b8:f1:68:a1:09:c7:22:
                    1e:c6:bd:d1:24:b1:8c:aa:a2:49:89:ec:4e:6e:2a:
                    6f:c1:36:ae:20:ee:ec:10:95:c1:ed:b4:8b:dd:15:
                    f0:0b:c0:d8:9c:b7:76:ab:9b:b0:83:36:ad:47:00:
                    52:82:49:0a:cb:e1:f5:61:ac:7b:92:a5:07:84:b5:
                    c8:b7:4a:b1:f8:0f:40:d0:ce:a8:13:ac:c7:17:07:
                    61:5c:26:f9:5d:98:86:50:f3:2c:88:c1:89:f3:50:
                    6c:9b:62:c6:c1:8e:43:69:96:2f:f2:e9:fc:4a:88:
                    ac:54:af:94:70:bb:ce:ea:d7:c1:d8:6b:ef:de:2a:
                    f0:cd:3e:89:20:b0:aa:a3:3a:73:12:d7:29:c2:e3:
                    dd:b9:3b:a8:55:68:67:20:a5:7c:58:bc:55:f1:9f:
                    89:0f:ff:29:ef:b9:c6:5f:ad:cc:7a:f0:18:16:4e:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:5D:23:0D:52:F7:DD:39:C2:46:01:CE:86:CF:11:52:A4:DB:16
            X509v3 Authority Key Identifier:
                keyid:36:B7:D0:2E:67:52:7C:93:64:C0:7D:22:71:35:86:E5:6E:B0:58:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9d8987a151369683bec9eb071c6399a40116247.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/1c97061c8ddd396e4f2bc6d661b8ad6c52a2d930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/d9d8987a151369683bec9eb071c6399a40116247.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:08:38:4e:f2:df:d3:85:53:ee:4b:53:f1:91:22:11:d6:
         3e:58:06:ef:c0:a4:f0:26:56:a8:e8:1a:74:90:92:13:9b:1d:
         64:8a:b9:7e:e6:03:f5:6d:cd:dd:23:5d:4b:ce:f5:fe:eb:e3:
         48:e1:13:8a:d6:ce:5a:4f:28:16:ae:25:78:d9:63:71:33:6d:
         31:03:58:84:cb:a2:72:06:3a:40:5b:64:64:27:fb:e0:2a:0a:
         1a:5d:bf:d0:92:1b:eb:07:7a:a1:ad:ad:32:c1:6f:10:2a:b9:
         ef:53:4f:d7:86:a1:5a:1f:46:28:4b:8d:ab:78:48:a2:e7:62:
         53:aa:10:4a:89:d7:e3:97:95:1c:8f:95:d0:fd:a0:63:37:76:
         de:63:c9:c0:41:b3:2a:c7:18:52:51:7d:60:93:14:4f:96:59:
         23:f8:17:ea:03:44:77:60:1d:03:4b:71:58:95:6d:c2:b9:82:
         d8:c0:a5:8a:49:bc:4c:09:0b:72:bd:df:ea:44:f5:d3:01:c6:
         16:0e:41:cc:03:9b:20:cb:7b:7b:7c:82:7e:dd:19:5b:f5:87:
         6e:ca:01:33:e8:36:4d:58:d1:ad:c1:e2:fb:a5:1e:48:da:be:
         03:02:63:c4:07:3e:53:e5:e0:ce:b2:85:fb:6b:98:83:81:81:
         90:9c:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----