Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/11f93ef5a03a70762d48571486534969c476b529.roa
File:                     11f93ef5a03a70762d48571486534969c476b529.roa (raw, json)
Hash identifier:          i8AbBb+3ITNR8bDMRG/3LiWVGLC4ebcF085mWH7HFX8=
Subject key identifier:   35:F7:1E:2A:B3:8C:50:6F:08:67:1C:6A:32:E2:45:89:B9:8C:18:69
Certificate issuer:       /CN=1a618361eac522f65082711b4397accad057fff5
Certificate serial:       15ABC1
Authority key identifier: 9E:4D:4A:13:DA:54:3E:64:6F:85:0F:8F:3C:5B:FA:9B:02:60:FA:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a618361eac522f65082711b4397accad057fff5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/11f93ef5a03a70762d48571486534969c476b529.roa
Signing time:             Sat 18 Nov 2023 07:30:02 +0000
ROA not before:           Sat 18 Nov 2023 07:30:02 +0000
ROA not after:            Mon 17 Nov 2025 07:30:02 +0000
asID:                     265680
IP address blocks:        2803:21c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420225 (0x15abc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a618361eac522f65082711b4397accad057fff5
        Validity
            Not Before: Nov 18 07:30:02 2023 GMT
            Not After : Nov 17 07:30:02 2025 GMT
        Subject: CN=11f93ef5a03a70762d48571486534969c476b529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:30:93:3e:36:3c:4c:11:99:3e:d9:ec:58:
                    2c:ac:f3:13:8d:9c:7e:2e:2a:83:a3:2c:3b:6b:ca:
                    21:ab:d0:85:bc:5e:4f:40:9f:6d:75:bd:07:f8:c5:
                    97:6b:90:95:de:5e:ad:b1:f3:15:cf:12:39:ff:7e:
                    f8:66:c9:39:87:b0:5b:5c:c1:0e:4a:9d:bd:a0:ec:
                    d6:b3:81:89:13:fd:cf:4a:8a:47:41:f4:27:77:49:
                    e5:8d:94:fd:aa:e9:97:f8:0c:be:a6:85:7f:b2:d2:
                    ca:1a:91:47:29:31:17:c1:9a:5b:ea:12:40:f5:17:
                    59:b9:16:41:6e:69:83:7e:0c:1c:84:b6:90:9d:5c:
                    c8:ab:d1:9c:1b:97:23:44:c7:dc:36:a2:1c:1b:1b:
                    c7:34:05:b8:49:2d:2a:9b:5b:3d:f6:49:8d:33:81:
                    a4:ab:b6:46:24:82:b4:f2:83:13:0c:84:b0:fa:aa:
                    e5:af:16:b4:32:93:54:eb:90:03:9d:a6:aa:30:aa:
                    8d:8d:14:29:02:9a:fe:69:84:19:a0:83:2f:f4:22:
                    bb:6c:46:59:6a:e0:60:a5:91:f6:6d:61:6a:46:ac:
                    da:4e:99:75:54:75:0f:22:a7:33:38:49:19:ac:f0:
                    61:3d:16:28:de:39:3b:aa:a8:58:88:d6:ec:7e:13:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:1E:2A:B3:8C:50:6F:08:67:1C:6A:32:E2:45:89:B9:8C:18:69
            X509v3 Authority Key Identifier:
                keyid:9E:4D:4A:13:DA:54:3E:64:6F:85:0F:8F:3C:5B:FA:9B:02:60:FA:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a618361eac522f65082711b4397accad057fff5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/11f93ef5a03a70762d48571486534969c476b529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a0e4224-ea21-4d63-a94c-e66f4a23aad3/1a618361eac522f65082711b4397accad057fff5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:a7:d5:15:2f:86:5d:78:f1:bf:fd:43:4c:70:af:7f:96:97:
         43:fa:b8:50:ed:f6:fa:41:73:2c:c4:ee:86:d2:94:d3:ac:2b:
         1a:58:f8:94:87:59:55:92:3a:cf:a6:be:42:11:77:1a:06:ea:
         1a:68:5f:c1:0e:d8:d8:03:23:a9:c1:84:2f:35:ce:4a:68:1c:
         ac:83:48:c0:7e:8b:f7:43:d0:70:1e:70:9f:44:e5:6b:67:ce:
         6c:8c:3d:4a:9e:ce:93:2f:1b:77:7c:07:15:18:7e:87:56:42:
         6b:79:f2:2b:ee:05:72:7f:d9:f6:dc:d8:ce:dc:e3:e6:18:b6:
         52:b5:f4:fe:06:bd:ce:26:98:57:f7:c7:aa:aa:31:4b:ab:72:
         f0:2b:f8:d9:72:5f:15:18:02:8b:61:5a:23:5a:83:1c:89:58:
         c1:0a:01:39:a1:a6:54:19:2a:3f:a4:bd:1b:79:48:98:4f:64:
         c2:e3:31:3f:b6:35:3b:8c:cc:9d:4f:8f:75:ae:79:02:cd:36:
         ad:05:37:b1:e6:27:30:12:83:c4:90:30:43:fa:0d:ab:78:9e:
         62:de:0c:06:34:5b:2c:1a:a3:51:70:8d:5b:0d:51:87:f2:37:
         93:ab:a9:76:1d:73:38:d4:3c:94:51:d0:58:5d:f3:51:37:c1:
         90:c4:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----