Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/8de5bf23bdb8f5a75e793c631dbda049ece58cb0.roa
File:                     8de5bf23bdb8f5a75e793c631dbda049ece58cb0.roa (raw, json)
Hash identifier:          WOBUPRMovfCaUQrLVmaYroJHW+7kamIJUB3yYHpteoU=
Subject key identifier:   A6:C5:A4:F8:AB:2C:5E:3A:67:77:AD:F9:62:6D:E9:E7:F5:F0:ED:DA
Certificate issuer:       /CN=acb9a086100edca85e2275f5f7dc2b5cf8f57ab9
Certificate serial:       06F290
Authority key identifier: 16:B4:87:48:AF:68:95:77:45:84:F4:08:78:0D:B8:4B:B0:CA:2D:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/8de5bf23bdb8f5a75e793c631dbda049ece58cb0.roa
Signing time:             Sun 03 Sep 2023 16:28:12 +0000
ROA not before:           Sat 02 Sep 2023 16:28:12 +0000
ROA not after:            Wed 03 Sep 2025 16:28:12 +0000
asID:                     64134
IP address blocks:        2803:8910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455312 (0x6f290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb9a086100edca85e2275f5f7dc2b5cf8f57ab9
        Validity
            Not Before: Sep  2 16:28:12 2023 GMT
            Not After : Sep  3 16:28:12 2025 GMT
        Subject: CN=8de5bf23bdb8f5a75e793c631dbda049ece58cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:11:40:0b:e3:cd:a1:6b:03:57:e0:15:b7:
                    d8:76:61:cd:53:fb:92:4c:91:a1:99:18:6f:a2:4c:
                    f1:6f:3b:9d:fb:88:68:a5:6d:64:36:b5:3e:78:de:
                    06:1d:01:4f:df:3b:09:d4:3d:e9:f9:3d:69:9d:d0:
                    82:b0:0c:c9:79:3f:f5:54:53:2c:69:18:f5:b2:b6:
                    9f:46:0a:33:14:51:dd:b3:4a:43:c7:91:ba:1d:d6:
                    cd:2f:8d:af:83:85:ff:9d:27:a2:24:86:4a:cc:3a:
                    5e:61:be:4a:a8:ff:95:ee:44:ee:28:9f:c0:31:11:
                    4b:fd:26:a2:fd:01:47:f0:c4:38:e4:e8:e9:cb:20:
                    f2:8c:8d:12:5d:a2:6c:3a:fa:ad:78:ac:a7:f6:8e:
                    3f:a2:aa:19:96:2a:8c:9b:bc:7f:40:18:0e:2b:13:
                    88:cc:c5:3e:aa:b0:f2:6f:4a:f8:34:a0:9c:50:11:
                    cf:93:de:e7:ef:88:95:7e:27:a6:65:36:10:6e:25:
                    30:4b:c7:07:ea:1b:be:2d:98:c9:a7:44:fc:e5:fa:
                    25:6d:27:7d:5f:2a:db:d6:39:95:94:2d:23:6f:85:
                    fe:f7:96:64:e3:89:19:34:d1:b1:c3:4c:5d:7f:49:
                    97:ba:81:41:d3:a6:70:c6:68:ed:e0:d6:0c:fd:3f:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:A4:F8:AB:2C:5E:3A:67:77:AD:F9:62:6D:E9:E7:F5:F0:ED:DA
            X509v3 Authority Key Identifier:
                keyid:16:B4:87:48:AF:68:95:77:45:84:F4:08:78:0D:B8:4B:B0:CA:2D:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/8de5bf23bdb8f5a75e793c631dbda049ece58cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3eae0cb9-5b24-40f4-ba98-e46eb576f000/acb9a086100edca85e2275f5f7dc2b5cf8f57ab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:94:9c:f1:39:cc:6b:91:64:56:eb:d0:9a:1c:0c:0b:90:
         97:0f:e1:44:7d:a6:f4:51:ad:bf:87:6d:27:8a:a4:a9:80:bf:
         51:b4:5b:45:d7:36:ee:c3:bf:72:3a:56:b1:51:06:3b:ad:95:
         da:c6:ac:55:39:3c:a6:53:06:6e:74:9d:d3:59:99:80:80:7f:
         f3:d5:79:7d:23:56:ea:d9:8a:19:cb:1a:03:c5:88:c4:ed:09:
         36:c5:4d:ae:74:6f:de:fd:45:93:c0:be:dd:dc:fa:a3:d3:aa:
         ab:7e:08:33:08:a1:a2:39:32:c5:e1:28:d7:8c:55:61:b4:ab:
         2c:99:27:3e:93:e6:88:e9:0f:28:10:5c:c8:4f:b5:16:58:21:
         ff:25:aa:50:40:ce:02:c9:82:61:ea:c2:ce:76:fc:95:6f:f6:
         2c:63:cb:ae:b8:a8:28:73:8c:b0:1b:3d:b3:61:4e:f2:8e:72:
         37:b8:cc:fd:99:41:49:d0:9c:fa:1d:c9:d1:0d:53:c5:b3:31:
         ec:63:8b:d1:f8:99:c3:25:ad:58:b8:88:9b:d8:95:cd:1d:76:
         0a:4c:a6:16:96:6d:d6:e2:4d:11:fc:48:0a:15:1a:8f:2e:3c:
         d5:f6:88:18:f1:60:d2:34:8d:d0:c2:e7:4d:ef:e2:fe:f9:dc:
         52:c8:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----