Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/818f7ca9c2041a99678d49b9dd12a9c05a2a2545.roa
File:                     818f7ca9c2041a99678d49b9dd12a9c05a2a2545.roa (raw, json)
Hash identifier:          DwqsGjAiTxaBk/SwvUfxIBF5ljhUi+BFAibrl21Xeb8=
Subject key identifier:   D9:A3:D3:FE:15:9D:47:A2:EC:5D:A3:78:F0:13:C2:6B:3C:FC:85:7C
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       03E587
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/818f7ca9c2041a99678d49b9dd12a9c05a2a2545.roa
Signing time:             Sat 11 Mar 2023 20:44:41 +0000
ROA not before:           Fri 10 Mar 2023 20:44:08 +0000
ROA not after:            Tue 11 Mar 2025 21:44:08 +0000
asID:                     272875
IP address blocks:        2803:4a90:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255367 (0x3e587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Mar 10 20:44:08 2023 GMT
            Not After : Mar 11 21:44:08 2025 GMT
        Subject: CN=818f7ca9c2041a99678d49b9dd12a9c05a2a2545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:3a:d2:41:64:b9:84:98:02:25:31:be:8a:
                    d6:a8:70:59:5a:ad:9f:53:81:cb:ee:ed:8b:3b:11:
                    c0:cc:db:05:02:26:9b:93:85:80:f1:fe:20:a7:3c:
                    bd:dd:a5:be:2c:79:4a:51:8a:97:a1:1d:3c:84:55:
                    7b:d0:6f:03:8c:23:f3:7a:3b:9f:d6:94:da:21:27:
                    b5:65:aa:e8:83:83:9a:b2:1b:54:2f:b6:1b:ef:7b:
                    37:fe:a9:db:99:b3:af:7e:7c:6d:e2:71:eb:c5:75:
                    a1:ad:79:a0:4d:72:1a:8f:f6:85:0c:dc:33:7e:3d:
                    80:f1:ca:3f:b7:7e:36:2b:76:ed:2d:d6:47:7b:ee:
                    34:2b:86:95:28:4f:a5:13:be:43:15:59:99:9c:6a:
                    e0:3a:59:bb:e9:e0:53:3a:ac:f4:73:25:11:a1:46:
                    db:b3:8c:f1:d4:14:0a:d1:c4:1b:2c:c1:f3:e1:76:
                    28:09:87:cc:09:2a:df:2e:a8:87:57:6d:2e:97:a6:
                    a7:e1:90:15:b5:26:2d:13:28:d6:33:de:53:a8:4c:
                    4e:f4:1d:68:1a:4a:43:df:91:88:2c:5f:6e:23:5b:
                    9b:fb:68:d9:a6:89:84:6c:33:74:fc:68:83:92:7e:
                    fc:7c:f5:38:0b:be:50:3d:ac:2f:39:73:de:e8:36:
                    08:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:D3:FE:15:9D:47:A2:EC:5D:A3:78:F0:13:C2:6B:3C:FC:85:7C
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/818f7ca9c2041a99678d49b9dd12a9c05a2a2545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:96:1d:82:10:e9:10:65:7c:44:b8:51:df:1b:56:ac:81:57:
         3a:b9:9d:9a:1e:81:f2:d5:94:0e:61:30:2a:c0:9c:36:f1:17:
         e0:96:b1:e5:bc:ae:b3:cb:33:03:0f:aa:ad:3f:cd:78:a5:a4:
         c6:1f:14:4d:2b:dc:ce:68:98:bd:80:75:d3:06:d3:c0:cd:62:
         9d:96:00:5f:a4:ae:d9:be:e1:eb:1d:63:0a:fb:5c:be:94:7c:
         03:ec:9e:25:6a:2a:6a:88:6d:6a:d7:6d:50:8c:68:bd:3d:79:
         76:22:95:0e:d1:f8:07:1d:60:da:89:d0:eb:30:58:db:1d:4d:
         6f:42:33:b5:7a:9a:d5:a6:0a:07:47:96:fe:a0:fb:f3:89:a7:
         3a:d4:61:81:25:de:bb:63:f1:f9:1e:5b:fc:62:3b:2b:95:fe:
         a5:51:1f:b1:af:d6:29:af:8a:15:83:27:3f:da:33:5b:03:73:
         a9:9c:74:9c:48:df:ec:b1:e4:b1:e1:78:8c:d7:43:eb:0b:05:
         c4:f0:f7:a4:5d:42:b6:70:c6:1a:14:eb:f5:be:82:d6:c0:66:
         81:52:e3:63:5c:fa:df:54:c6:9b:eb:f4:1b:39:65:29:0f:c2:
         df:f9:ad:02:12:fc:25:84:a5:8f:af:22:38:62:ef:99:a7:b1:
         72:16:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----