Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/8de9b3a86d5dde64ad36ce63c0d3b7a7a267ddcd.roa
File:                     8de9b3a86d5dde64ad36ce63c0d3b7a7a267ddcd.roa (raw, json)
Hash identifier:          7ehAe0AUL5wx8xR881B5+ju18WhCQ4gvBu4BVy0l9f8=
Subject key identifier:   E8:F8:C5:CB:A0:36:8F:22:16:77:47:29:32:83:3E:1B:8D:6C:A6:E9
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       183960
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/8de9b3a86d5dde64ad36ce63c0d3b7a7a267ddcd.roa
Signing time:             Tue 27 Feb 2024 21:09:04 +0000
ROA not before:           Tue 27 Feb 2024 21:09:04 +0000
ROA not after:            Fri 27 Feb 2026 21:09:04 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587552 (0x183960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Feb 27 21:09:04 2024 GMT
            Not After : Feb 27 21:09:04 2026 GMT
        Subject: CN=8de9b3a86d5dde64ad36ce63c0d3b7a7a267ddcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:57:55:20:99:62:5c:39:1a:cb:b2:d0:85:
                    58:66:4e:28:d9:68:6a:22:f5:1a:f4:f4:8b:2a:18:
                    c4:3e:3f:86:b9:88:c1:0e:b9:25:07:ed:68:71:c9:
                    53:3d:96:7c:de:7d:30:57:89:0a:8f:be:48:be:b4:
                    31:c7:c1:94:b0:c4:01:9e:bd:ad:5d:6f:00:44:a1:
                    4b:bc:1b:8e:cd:5b:0a:82:a8:e2:c4:fd:a7:7c:18:
                    f0:95:e4:b4:36:6a:c0:71:3c:fe:3e:ff:59:b2:da:
                    79:95:76:f8:b2:3d:3a:36:55:4c:fa:b1:b9:82:79:
                    dd:39:e7:95:6c:3e:33:39:33:c0:da:1d:f2:4d:4d:
                    e0:5f:e0:0f:0a:fb:f5:fa:14:82:aa:a9:b7:f1:51:
                    40:99:c0:75:f6:03:81:c4:44:f1:71:13:f8:61:22:
                    1a:39:a6:52:ac:03:0b:9f:58:81:cf:5a:ed:7f:d9:
                    2c:fd:d9:ea:bc:49:4b:54:33:0e:ee:3a:31:63:67:
                    d8:a5:56:df:5a:aa:b4:92:b2:48:1b:b8:6a:37:cc:
                    98:5b:77:92:c7:54:2e:38:a0:12:1b:f3:07:29:78:
                    7d:0d:83:77:31:f9:e7:27:17:a6:88:c2:ce:37:eb:
                    2c:45:5a:96:c1:76:48:29:a4:76:62:3a:98:a9:6c:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F8:C5:CB:A0:36:8F:22:16:77:47:29:32:83:3E:1B:8D:6C:A6:E9
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/8de9b3a86d5dde64ad36ce63c0d3b7a7a267ddcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:43:c1:b9:db:d9:68:7f:5b:25:7e:c9:d7:0d:3b:85:9f:81:
         ad:2e:16:55:d1:4e:1d:92:f1:8c:c8:25:2c:67:22:63:59:a6:
         ab:9e:ef:2b:b0:da:5e:dd:d7:1c:8b:4d:fa:20:3a:40:60:d3:
         a6:b1:d6:1f:05:50:80:f4:2d:97:f3:40:e5:bd:61:af:d8:72:
         b3:a8:9c:be:54:dd:98:03:a5:17:e1:af:53:0f:01:73:90:d6:
         88:8f:1c:0c:1f:79:fa:af:d3:53:50:56:4f:28:66:b8:02:ef:
         e9:ad:42:0b:b1:ca:7d:55:bd:23:4d:16:54:9a:ec:bd:b0:31:
         53:96:ed:d3:46:c4:03:c9:35:10:69:5f:00:f8:60:78:53:05:
         e5:64:0b:af:73:c4:7d:46:01:2d:d4:50:c9:ba:4b:5c:86:ed:
         ed:55:fa:92:31:95:07:71:ae:98:04:78:c1:c1:e9:a9:d0:48:
         79:8d:72:03:d6:3a:0c:65:82:39:c6:c0:d5:fc:9c:b1:ef:92:
         d8:1c:fc:7a:e7:34:b8:26:c7:e3:f0:f7:92:27:b3:80:7b:e9:
         6c:cd:54:b6:e2:29:44:42:16:3e:a8:b0:11:0b:9e:12:54:b8:
         2f:90:2a:21:02:82:a7:7b:f7:f2:42:5a:81:c8:89:53:54:b0:
         4c:a3:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----