Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/9113ea9c813a90469b19558da485f56cbc839e78.roa
File:                     9113ea9c813a90469b19558da485f56cbc839e78.roa (raw, json)
Hash identifier:          SfolQUN/SJ/+kLUTeW+HurfGcPM900E43NHEhbMvS08=
Subject key identifier:   8F:91:F1:78:32:7F:6C:FC:AF:DB:D5:78:D1:57:8E:EC:9F:F3:97:9D
Certificate issuer:       /CN=4256d043f0685eb4086d27801ca57dd4e1fc8876
Certificate serial:       273DA6
Authority key identifier: 17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4256d043f0685eb4086d27801ca57dd4e1fc8876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/9113ea9c813a90469b19558da485f56cbc839e78.roa
Signing time:             Sat 06 Apr 2024 15:54:06 +0000
ROA not before:           Sat 06 Apr 2024 15:54:06 +0000
ROA not after:            Mon 06 Apr 2026 15:54:06 +0000
asID:                     264760
IP address blocks:        2803:20c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571686 (0x273da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4256d043f0685eb4086d27801ca57dd4e1fc8876
        Validity
            Not Before: Apr  6 15:54:06 2024 GMT
            Not After : Apr  6 15:54:06 2026 GMT
        Subject: CN=9113ea9c813a90469b19558da485f56cbc839e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:08:24:07:bb:68:48:81:1e:ee:ce:0d:68:79:
                    13:30:e9:e0:49:90:d5:a1:dc:c2:f7:25:21:4c:c0:
                    85:b8:3a:70:82:e5:75:9e:7c:0a:78:5b:16:99:38:
                    13:d9:e2:42:9b:be:25:ff:c5:13:b9:00:8d:e7:26:
                    d5:72:0d:97:72:41:3b:a9:27:3d:e7:53:d9:4d:6d:
                    29:13:cf:78:86:84:10:1e:52:7a:57:ea:fd:50:1e:
                    00:cf:71:62:22:b9:e2:cf:13:2c:a5:b4:c2:94:c2:
                    1a:cb:f2:7f:95:91:79:22:17:c5:23:5a:73:b9:f2:
                    cc:eb:91:98:b8:99:d4:7a:2e:ca:a2:28:ad:1d:cd:
                    15:c6:0a:52:3e:93:0f:b6:44:04:ac:31:98:b3:5a:
                    13:75:5d:2c:63:cf:a7:4f:d0:ff:e8:9b:dd:68:0e:
                    16:73:62:10:74:fc:8d:4e:f4:a2:b1:29:68:eb:b1:
                    9c:a2:f6:47:6e:84:f8:00:30:58:46:ce:5d:80:86:
                    08:e4:28:77:70:28:ee:b5:8f:d2:31:6c:ce:5a:0e:
                    d2:da:d9:95:8a:1c:6a:55:fc:b6:8e:e5:dc:1d:47:
                    17:5d:a1:c3:cd:77:88:ce:9c:a2:59:a6:5c:86:1b:
                    32:46:d7:73:01:8d:d2:78:49:68:b1:99:ee:06:29:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:F1:78:32:7F:6C:FC:AF:DB:D5:78:D1:57:8E:EC:9F:F3:97:9D
            X509v3 Authority Key Identifier:
                keyid:17:B5:19:33:05:4E:93:5C:93:B3:2E:C4:E7:53:D5:8E:BC:CB:AE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4256d043f0685eb4086d27801ca57dd4e1fc8876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/9113ea9c813a90469b19558da485f56cbc839e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48450b10-d61a-4251-a09c-4e42a7baf918/4256d043f0685eb4086d27801ca57dd4e1fc8876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:c4:a9:e7:c8:d5:79:34:3f:8a:34:cd:fc:f3:b2:67:b4:ca:
         9f:87:5d:37:0f:cd:0b:a6:24:a9:fb:d5:72:b8:08:ac:ad:ad:
         7e:c9:4a:0b:1b:45:6c:01:6d:09:7f:a7:54:59:e2:d0:ea:aa:
         f2:14:76:38:a3:7d:14:8a:f0:15:97:39:3d:f0:24:88:f3:8e:
         bd:3b:b2:45:6c:7c:07:35:65:e3:34:40:43:b8:15:7f:57:6a:
         81:8d:62:d2:2b:f9:cf:a6:26:f8:73:72:94:b4:cf:fe:fd:59:
         fe:70:78:62:d1:31:f1:de:b8:68:6f:e8:e9:63:e2:57:bc:a5:
         ad:cc:b8:2f:e1:fc:92:18:18:56:e5:bb:49:ab:1f:02:10:a1:
         b3:7b:92:86:8a:aa:bd:be:63:a6:b0:88:39:30:a0:6e:65:18:
         f5:7a:26:f9:44:a9:45:31:4d:4e:84:bf:b8:38:7c:5a:fc:26:
         4f:ea:fc:bb:6c:ee:78:f9:c8:78:ae:bb:c9:d8:6f:c5:b4:0d:
         8b:9b:e2:1b:e6:eb:36:24:ba:0f:7c:d3:fb:2d:e2:b9:ba:ce:
         fd:f9:a8:3f:9c:d5:33:59:92:38:2b:9d:ce:0a:14:8f:12:58:
         8e:97:6e:ad:63:9a:01:ef:36:69:61:a6:c0:39:4a:56:be:ad:
         bf:75:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----