Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/73da2bc60d963b6b0c1c131d7c656b94cc331fab.roa
File:                     73da2bc60d963b6b0c1c131d7c656b94cc331fab.roa (raw, json)
Hash identifier:          BYOOvkh9H2jEfHdX9B8nuBGn5lq/c6Zx6fa7j0wVTqQ=
Subject key identifier:   70:82:DE:08:9B:1E:51:FA:C6:C6:D8:89:4E:F5:72:B8:62:87:E8:A2
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       247935
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/73da2bc60d963b6b0c1c131d7c656b94cc331fab.roa
Signing time:             Thu 28 Sep 2023 19:14:04 +0000
ROA not before:           Wed 27 Sep 2023 19:14:04 +0000
ROA not after:            Sun 28 Sep 2025 19:14:04 +0000
asID:                     271882
IP address blocks:        2803:9ac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390325 (0x247935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Sep 27 19:14:04 2023 GMT
            Not After : Sep 28 19:14:04 2025 GMT
        Subject: CN=73da2bc60d963b6b0c1c131d7c656b94cc331fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:ed:50:e9:85:21:b9:c0:14:34:6a:e1:c1:
                    0d:b2:e2:f4:53:a4:9a:03:5f:82:0c:d6:93:59:7f:
                    dd:5c:42:ac:34:65:90:b8:47:47:7f:fb:ea:aa:79:
                    a0:74:d4:61:69:51:3e:f6:e1:9c:a0:a8:b5:e1:6d:
                    3c:b0:e7:2e:9a:3b:b0:75:58:c2:0f:41:5f:09:31:
                    c4:fd:29:05:0b:8d:12:8d:f7:58:4a:89:a6:47:d2:
                    ce:63:df:38:69:46:18:b0:c3:a9:23:9d:94:91:e3:
                    f9:78:d5:da:8c:19:56:c2:bd:28:f5:dd:56:bd:5a:
                    df:00:96:6d:7c:cd:0a:aa:f0:5b:91:c2:41:cb:28:
                    49:d0:c8:c9:70:0b:8b:74:b7:15:f7:c7:9c:7b:c3:
                    a6:22:07:4d:26:7d:57:e7:1c:8f:c7:54:03:3e:ed:
                    18:ce:3b:64:cc:78:65:40:7d:8f:b6:57:eb:1b:02:
                    bf:62:da:55:27:17:04:b1:e1:51:30:00:df:c4:44:
                    53:49:bc:21:67:84:b1:58:65:82:83:9c:09:1b:d9:
                    de:16:f1:e4:d6:d1:c4:ad:c3:ff:14:c7:d0:13:4c:
                    f7:39:b2:8a:7c:79:2d:e4:78:57:b9:6d:f6:0f:a3:
                    71:47:fe:98:d8:9a:dc:23:b7:8d:e8:d7:a1:77:4e:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:DE:08:9B:1E:51:FA:C6:C6:D8:89:4E:F5:72:B8:62:87:E8:A2
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/73da2bc60d963b6b0c1c131d7c656b94cc331fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:0d:4e:5e:74:b5:ad:a5:42:f2:06:93:2b:e8:4b:20:0e:73:
         07:5d:cd:a2:b2:a8:58:88:f6:aa:e6:cb:ba:56:61:85:d7:24:
         1f:ce:2d:8f:69:f1:45:70:d3:51:51:0d:91:8a:6c:75:a2:58:
         b2:5a:6e:06:91:22:af:84:5f:27:da:22:a0:8f:dc:da:ed:eb:
         47:91:68:d0:54:c6:40:5d:3a:71:e5:43:ce:c4:75:82:4c:24:
         f8:55:45:41:77:c1:25:0b:20:a3:ba:42:3f:32:4b:4b:b3:4a:
         9c:64:72:f9:12:6e:6a:58:6c:1c:72:a1:df:19:ba:fb:30:8d:
         f1:72:5c:06:05:50:d6:e7:d2:2e:04:15:4d:c3:bb:cb:4c:20:
         24:5f:38:23:62:47:35:37:83:c1:6f:5c:ed:b4:aa:ca:5f:9b:
         95:30:81:48:76:c6:c5:78:54:e4:15:54:d6:15:8e:18:ae:90:
         bc:82:02:eb:82:d3:3e:85:e8:86:ee:0d:1a:65:70:30:77:17:
         9e:9a:c7:5e:1a:eb:97:0f:b8:ed:b2:4f:9d:a4:bb:bd:75:e6:
         45:2f:f7:82:92:30:f7:3c:09:80:7e:e4:60:c6:9c:68:b7:60:
         df:42:80:d6:23:3b:bd:f5:dc:3a:03:f3:5e:46:e0:57:4e:c3:
         e9:52:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----