Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/4cd599b6c5034bef9ab7810a91ab7965c05d4e99.roa
File:                     4cd599b6c5034bef9ab7810a91ab7965c05d4e99.roa (raw, json)
Hash identifier:          Nblr+ToxknEwntPbCJH4bIDQ/ShGmPqWR7Zt56qGsQA=
Subject key identifier:   2F:A0:C8:EA:A6:B4:C6:81:AA:BC:EB:53:9E:15:3D:AC:CB:60:B8:7F
Certificate issuer:       /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial:       150F7B
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/4cd599b6c5034bef9ab7810a91ab7965c05d4e99.roa
Signing time:             Mon 15 Apr 2024 08:30:00 +0000
ROA not before:           Mon 15 Apr 2024 08:30:00 +0000
ROA not after:            Wed 15 Apr 2026 08:30:00 +0000
asID:                     271855
IP address blocks:        2803:6410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380219 (0x150f7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Validity
            Not Before: Apr 15 08:30:00 2024 GMT
            Not After : Apr 15 08:30:00 2026 GMT
        Subject: CN=4cd599b6c5034bef9ab7810a91ab7965c05d4e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:42:6f:bf:42:98:a6:57:1c:b5:ec:34:f5:
                    83:99:37:c7:ef:5b:2e:f6:ce:34:3a:14:f9:3d:30:
                    a1:13:1a:33:ea:3d:99:e3:f2:00:10:a5:d2:0b:09:
                    af:f4:58:97:80:d7:40:01:8a:ef:33:ec:97:15:a2:
                    ed:03:60:2d:6e:2d:28:2a:42:69:9d:54:ba:b4:9b:
                    5f:28:27:4a:9e:8e:a8:08:4e:e8:ef:ca:80:d3:7d:
                    0d:25:fe:01:59:2c:01:eb:74:34:de:e8:77:e4:57:
                    11:1c:0a:b3:e3:05:cb:16:ed:33:d5:b3:9d:f9:3a:
                    ba:53:90:d5:79:7c:03:97:b3:fc:63:19:af:8e:b2:
                    46:07:e0:99:37:c4:87:05:47:03:f8:41:55:ea:a7:
                    df:2f:83:59:bf:6d:f1:92:d6:21:ea:90:7c:84:dc:
                    2e:1d:5e:f9:62:ac:b8:ec:9e:cc:8e:7d:5e:74:ea:
                    f4:89:06:da:65:62:8b:6e:70:f9:e9:d8:08:40:29:
                    b4:bb:a8:d2:b3:d8:ab:8f:bb:19:42:54:70:83:f8:
                    b4:59:75:c0:7c:b1:13:58:b6:ce:76:15:bd:1c:26:
                    58:c9:a6:70:a4:d1:a4:21:7d:87:a3:c2:92:4e:73:
                    22:02:4f:01:60:f0:f5:6c:a6:26:54:4c:1e:7b:3c:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A0:C8:EA:A6:B4:C6:81:AA:BC:EB:53:9E:15:3D:AC:CB:60:B8:7F
            X509v3 Authority Key Identifier:
                keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/4cd599b6c5034bef9ab7810a91ab7965c05d4e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6410::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:26:0a:62:9a:9a:41:3c:5a:b9:f5:d8:f0:c1:60:0a:70:
         6f:a9:aa:06:7c:55:e7:12:5c:06:cf:0e:79:65:47:6f:2a:66:
         a8:7b:ea:9d:a3:10:b4:21:40:bb:53:be:40:05:9d:be:0f:ae:
         9c:5e:97:c2:6b:1b:af:21:e0:28:87:19:d9:65:20:fb:2b:8d:
         08:e6:c0:b9:a5:a6:c8:17:95:1e:e9:4a:c1:20:34:7b:d8:4c:
         bf:d9:2c:28:e0:08:a2:78:e2:dd:bf:48:7c:d4:a4:00:0d:9f:
         a4:74:5c:37:98:cd:3d:2a:93:d0:a1:e1:0c:0b:8b:79:96:f8:
         f4:f0:09:0b:58:14:06:29:6d:57:55:50:79:d0:13:5b:5b:16:
         dc:5f:92:7a:86:f3:c0:5c:9e:7e:98:df:36:53:ed:95:94:3e:
         49:2a:fe:a4:06:b7:30:91:ba:12:fa:45:53:af:7c:92:f7:e2:
         8e:f4:6c:4e:e0:56:84:7c:13:d1:7c:4b:c9:00:0f:d7:ac:13:
         24:64:cd:5c:49:9c:73:bf:0f:03:42:f0:c8:86:fa:d6:97:c9:
         90:c7:92:f4:90:c9:97:96:bd:f0:a4:78:77:fc:ca:01:a8:f7:
         20:3b:33:1d:6e:c8:10:f5:2e:f2:1b:2e:55:a5:24:67:7d:1d:
         31:af:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----