Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa
File:                     a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa (raw, json)
Hash identifier:          hQFe+KHUXjoKoj9ngb76elDVIlBtQbCAf21o/xswyhw=
Subject key identifier:   C9:BB:F9:7C:21:2D:89:F2:89:51:D1:A6:AF:58:C8:FE:8A:13:BE:77
Certificate issuer:       /CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
Certificate serial:       03E027
Authority key identifier: CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa
Signing time:             Sat 11 Mar 2023 20:43:35 +0000
ROA not before:           Fri 10 Mar 2023 20:42:39 +0000
ROA not after:            Tue 11 Mar 2025 21:42:39 +0000
asID:                     272875
IP address blocks:        2803:4a90:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253991 (0x3e027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Validity
            Not Before: Mar 10 20:42:39 2023 GMT
            Not After : Mar 11 21:42:39 2025 GMT
        Subject: CN=a253325131d5466608f4efd9de4ecc4cf18d4c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:0e:b1:f1:85:c7:23:a7:a4:90:b9:be:1a:
                    3b:17:fb:e7:5e:08:46:9e:7b:c8:e2:32:c6:1d:53:
                    5e:72:08:cd:c0:1e:23:b9:17:df:2c:b3:59:78:e8:
                    d5:20:17:f0:4d:ca:84:f8:9d:3a:5e:26:41:68:92:
                    e9:91:36:46:92:03:0d:35:16:fc:a4:83:f7:8e:51:
                    4f:2a:55:47:35:35:24:7c:79:d7:e6:b3:9c:33:ae:
                    1d:56:57:8b:b4:56:3e:5b:a1:8b:8f:5e:44:8b:ec:
                    37:3d:72:49:71:18:3d:19:bd:b0:e5:a1:22:4a:2a:
                    0f:41:d5:b6:9d:5b:4b:ef:89:8e:fb:67:11:53:30:
                    25:05:27:71:5f:2c:4c:37:aa:0e:2c:1e:4d:18:7d:
                    60:6b:b8:8d:05:14:44:ff:0b:0e:56:c8:41:ad:67:
                    cc:09:54:ac:b4:f0:40:80:dd:47:0f:fd:b5:bc:20:
                    cb:3c:57:2f:62:22:38:5c:04:0c:70:e3:83:05:19:
                    6b:ff:88:31:aa:5d:e4:42:b9:b8:95:d5:09:6c:69:
                    52:51:77:5a:6d:26:33:41:c6:78:27:30:7e:c2:ef:
                    2c:05:5f:e8:a8:99:b7:65:54:98:1e:72:13:4b:3e:
                    83:4d:2c:e4:52:69:3b:2b:41:c6:de:3d:59:74:f2:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:F9:7C:21:2D:89:F2:89:51:D1:A6:AF:58:C8:FE:8A:13:BE:77
            X509v3 Authority Key Identifier:
                keyid:CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/a253325131d5466608f4efd9de4ecc4cf18d4c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:14:d6:37:e9:49:01:3f:a4:0e:6e:cd:46:20:c4:84:cd:
         c0:f7:9f:f5:de:6a:b3:3a:74:ae:54:b5:b9:d6:85:11:89:c8:
         83:42:07:12:8f:4e:79:b8:95:1f:76:99:6d:74:49:a3:f7:27:
         7d:21:1b:03:bc:e5:d9:e6:e5:a1:81:da:f3:b8:43:c6:3a:c2:
         e8:37:67:62:d7:87:c7:90:7f:bf:26:da:d4:7d:d7:cf:4f:7e:
         eb:8c:fd:ce:20:ae:11:aa:86:ef:4b:e0:2c:52:6d:5f:3b:9e:
         32:eb:ee:b8:7c:b5:4b:75:42:58:26:63:be:10:50:87:22:f8:
         00:eb:1c:6e:16:89:76:27:b4:07:94:84:13:ad:bb:4c:f3:0f:
         37:02:3d:20:8f:05:9a:ae:a3:dc:ad:cd:4c:1b:58:ed:63:d3:
         e8:e9:4a:c8:0b:0c:95:2e:77:6c:f2:41:7c:c8:bb:22:7f:4b:
         19:df:bc:8b:64:90:36:9c:47:36:28:28:e2:8c:27:53:59:0b:
         3f:5c:3c:6c:52:f1:6c:d6:f9:f1:ac:a9:52:6e:30:f4:8b:e5:
         b0:19:df:26:8f:1a:42:dd:10:ad:97:07:a6:75:cd:a3:22:dd:
         a5:49:49:dc:6c:b8:f6:0c:dd:c9:1f:cf:f7:5b:00:ad:6f:13:
         bb:59:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----