Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/06d8785be57946fe86aa3bf17f9fe9974b4888d4.roa
File:                     06d8785be57946fe86aa3bf17f9fe9974b4888d4.roa (raw, json)
Hash identifier:          xj2layafCEDiiElzsoOktq4WuZQI4tq0RnDeFwtJ8LE=
Subject key identifier:   34:02:AF:97:BC:FD:F1:80:42:1A:4C:29:C1:78:59:25:A6:6D:19:95
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       03DDB0
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/06d8785be57946fe86aa3bf17f9fe9974b4888d4.roa
Signing time:             Sat 11 Mar 2023 20:42:37 +0000
ROA not before:           Mon 10 Oct 2022 15:32:28 +0000
ROA not after:            Sun 13 Oct 2024 15:32:28 +0000
asID:                     272875
IP address blocks:        2803:4a90::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253360 (0x3ddb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Oct 10 15:32:28 2022 GMT
            Not After : Oct 13 15:32:28 2024 GMT
        Subject: CN=06d8785be57946fe86aa3bf17f9fe9974b4888d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:13:e4:84:5c:14:8a:34:69:d0:61:d2:6e:
                    c2:a7:2d:c9:29:8d:1f:83:2f:82:49:02:b4:e6:7f:
                    dd:a8:ba:fc:81:8d:9d:07:b7:f3:7f:0f:d3:d1:4f:
                    28:a9:9f:c1:43:f4:cd:5a:80:6d:5d:84:33:c2:8f:
                    8a:b9:6b:32:e6:37:8b:b0:75:5e:f2:a9:c9:51:b3:
                    59:7d:9e:07:9a:40:23:c1:03:06:73:d1:cf:9c:d5:
                    58:f3:a3:26:c6:95:d1:2f:f5:5d:a4:ae:f0:08:d5:
                    93:a9:2d:bf:88:4c:b2:7d:75:24:4d:84:de:6f:2a:
                    43:66:84:65:60:e0:8b:ab:2b:30:cf:75:d5:a0:72:
                    56:3c:11:2f:1f:4e:17:c9:45:bd:e4:75:f1:64:d7:
                    62:ee:db:10:fc:12:10:9a:84:07:0b:46:21:82:3b:
                    69:07:60:46:3f:ea:51:e9:c7:9c:68:89:7f:16:a2:
                    8b:79:8b:d3:c7:cc:69:fb:88:8c:4a:dc:4d:49:0e:
                    b3:14:6b:30:fe:55:06:65:b5:aa:39:e2:58:3b:13:
                    89:af:71:9e:ad:21:b5:c3:6b:7b:b9:79:b4:6a:fa:
                    43:e3:14:b1:64:73:62:67:81:4e:4c:42:62:65:b5:
                    c6:18:9c:55:a1:dc:12:61:3c:8b:c8:be:90:04:1e:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:02:AF:97:BC:FD:F1:80:42:1A:4C:29:C1:78:59:25:A6:6D:19:95
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/06d8785be57946fe86aa3bf17f9fe9974b4888d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:9b:b1:c1:61:4d:3c:37:e0:b0:72:f6:6f:83:c7:f3:22:
         d8:9d:87:bc:92:2e:2f:02:52:21:2d:08:55:c2:a6:ba:e8:ed:
         03:53:51:f7:29:67:f0:8f:25:ee:22:3d:57:7f:90:a9:f1:2b:
         84:db:6f:f9:63:63:01:c7:35:e4:f9:87:a2:3d:8a:14:a5:72:
         92:fb:a0:be:89:b3:b6:b6:00:ed:e0:0c:95:b2:1e:ef:f8:d3:
         4b:2a:cc:79:27:a3:e5:0e:8c:68:35:7d:8e:ef:25:d8:fb:74:
         98:1f:64:08:07:6c:56:f6:44:0b:f3:17:f9:0d:d0:68:84:5a:
         c9:8d:48:86:52:78:2b:2e:c7:d4:8f:cb:44:f9:21:ad:56:11:
         d1:fe:43:21:80:c3:dc:44:c4:bc:60:79:02:c3:4e:fe:c1:5f:
         ff:bd:53:ec:57:f5:cf:bb:11:a8:22:9f:4f:bc:7d:dc:f8:4c:
         06:72:51:57:88:82:91:04:6f:ad:a7:20:34:40:b1:5d:b7:54:
         02:be:c2:d2:11:10:99:cb:55:d2:97:b4:2d:2d:14:0e:63:19:
         21:fa:19:04:88:ac:fd:57:f9:1b:7e:b5:20:9c:a5:ba:6a:ca:
         5b:c6:44:0d:55:79:ac:46:12:32:90:1a:2f:1d:14:53:07:17:
         55:ed:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----