Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/1ec4766f39ffc9d79621f8f1550ce341956965fb.roa
File:                     1ec4766f39ffc9d79621f8f1550ce341956965fb.roa (raw, json)
Hash identifier:          T/rTf1xAEFs3NGHbfGPqqJ1UgsdZoOVxi0CXWvvKJqY=
Subject key identifier:   A9:0D:C5:9F:9D:9F:13:D4:23:43:43:15:4E:D0:28:0A:B1:62:11:0F
Certificate issuer:       /CN=82fe4a0135f82eec72b53d9bfbe6e1b67185e211
Certificate serial:       12832C
Authority key identifier: C3:4F:58:02:B8:B0:48:ED:2F:53:A1:DA:06:E6:8F:90:E5:B5:A9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/1ec4766f39ffc9d79621f8f1550ce341956965fb.roa
Signing time:             Sun 07 Apr 2024 08:30:00 +0000
ROA not before:           Sun 07 Apr 2024 08:30:00 +0000
ROA not after:            Tue 07 Apr 2026 08:30:00 +0000
asID:                     266865
IP address blocks:        2803:8aa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213228 (0x12832c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe4a0135f82eec72b53d9bfbe6e1b67185e211
        Validity
            Not Before: Apr  7 08:30:00 2024 GMT
            Not After : Apr  7 08:30:00 2026 GMT
        Subject: CN=1ec4766f39ffc9d79621f8f1550ce341956965fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:5a:9a:fc:27:16:e5:2e:29:86:29:6d:b2:
                    45:67:41:81:bc:cd:cd:c6:b9:95:3f:6e:be:44:3c:
                    f4:85:b5:b2:df:c0:c7:c7:e4:d5:ae:95:0f:87:14:
                    88:ea:8d:d0:b5:1a:32:7e:a1:19:89:c6:95:b1:5b:
                    20:30:a0:ca:b8:3f:7d:0b:de:c0:c9:a0:6c:4a:94:
                    e1:76:97:98:50:4b:e8:a6:60:68:91:af:39:3c:30:
                    23:41:d0:76:7e:ce:79:5e:83:1a:96:73:49:c2:e1:
                    2e:91:49:26:87:19:e7:7f:84:ce:76:cf:a8:af:61:
                    76:5f:75:2a:06:d6:05:e3:8a:52:48:78:51:22:03:
                    d6:d4:9d:73:44:c1:fa:3f:fc:83:4e:dc:e9:d5:06:
                    2e:a4:2a:9b:dd:58:9d:21:40:5f:bf:6b:52:b9:44:
                    b7:15:34:5d:8e:70:81:45:7f:3a:7c:af:f4:99:24:
                    f8:34:20:a8:3b:9c:87:03:c8:da:a0:91:53:1a:a2:
                    db:a8:c3:4c:55:a3:a9:48:20:62:22:0c:bc:d5:a2:
                    42:58:5e:89:a8:83:57:cc:71:bf:9f:11:38:b3:be:
                    68:ec:2b:af:40:9f:8d:7c:bb:f1:73:84:d7:41:88:
                    be:5b:95:28:86:ab:d2:2a:59:07:07:2d:a7:d4:f2:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0D:C5:9F:9D:9F:13:D4:23:43:43:15:4E:D0:28:0A:B1:62:11:0F
            X509v3 Authority Key Identifier:
                keyid:C3:4F:58:02:B8:B0:48:ED:2F:53:A1:DA:06:E6:8F:90:E5:B5:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/1ec4766f39ffc9d79621f8f1550ce341956965fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:cd:ef:d5:88:c7:72:a5:b9:5f:48:a7:38:41:fd:b6:32:
         e0:18:6a:99:27:85:27:0b:b2:e7:c9:d8:6c:30:a9:7b:aa:e4:
         00:ae:95:58:0f:94:5b:0d:f2:5c:b5:19:cc:89:e8:c4:97:e0:
         e4:b2:60:6d:0f:4e:6c:11:da:0f:c1:71:3f:c7:8a:cd:5f:b4:
         94:d5:fd:af:7f:4d:94:4b:64:e4:a7:ea:5b:2e:83:ac:ea:bb:
         86:5c:63:5a:3e:06:53:06:e5:68:a3:bb:bf:51:1c:2d:56:64:
         ec:29:04:3c:3c:a6:20:5c:d3:92:5e:86:54:ed:bf:a4:48:00:
         ba:e6:39:e1:68:b6:41:8d:67:87:2f:7b:34:e0:d8:57:7d:b1:
         87:ef:f9:ef:8e:a2:9e:d5:c8:ac:b4:2a:43:ea:ff:e2:0f:34:
         34:72:cb:0c:7c:4c:27:79:4f:38:94:02:d2:d4:2f:b6:66:b8:
         7f:42:ea:04:20:c7:58:8a:dd:6f:71:14:4a:4d:8b:8c:06:1f:
         72:3d:53:b4:c4:d6:89:78:e4:65:d2:48:4f:b2:ce:6e:ea:18:
         07:9e:5d:2d:70:15:fd:d0:ee:ab:b9:65:14:8a:71:81:c3:3e:
         82:a2:4b:ed:49:a3:60:93:94:de:be:4c:1c:9c:39:ee:05:75:
         cd:ec:b2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----