Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/e519168b8dfc6e12eeb89a54634974ec320c1ff2.roa
File:                     e519168b8dfc6e12eeb89a54634974ec320c1ff2.roa (raw, json)
Hash identifier:          GHbSNxGhd6LJg/QhxwpIe6fTo28XLRXyt50PgO3xEIk=
Subject key identifier:   1F:DC:8B:4C:97:0A:A1:F7:ED:9C:BE:D5:BD:29:D7:7C:3D:40:33:71
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1CE67A
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/e519168b8dfc6e12eeb89a54634974ec320c1ff2.roa
Signing time:             Tue 19 Sep 2023 17:53:09 +0000
ROA not before:           Mon 18 Sep 2023 17:53:09 +0000
ROA not after:            Fri 19 Sep 2025 17:53:09 +0000
asID:                     271888
IP address blocks:        2803:9e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894010 (0x1ce67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Sep 18 17:53:09 2023 GMT
            Not After : Sep 19 17:53:09 2025 GMT
        Subject: CN=e519168b8dfc6e12eeb89a54634974ec320c1ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:d0:4e:85:b2:fc:4d:4e:73:17:b5:fc:96:
                    48:ab:47:54:e7:e0:ad:e3:ac:9a:f8:98:99:54:e4:
                    5a:16:5f:4e:e4:11:9b:02:b5:d3:8a:5a:03:5b:eb:
                    86:a4:2b:06:12:5b:67:8f:86:8c:8b:1c:c9:30:4b:
                    3d:e4:ec:8a:fa:0b:f0:96:02:d7:1e:12:05:93:26:
                    f1:f3:7a:3b:74:9f:5e:d1:e1:7a:1a:6d:fd:ed:68:
                    ae:12:f1:4c:57:39:cf:04:1c:51:d7:76:8d:00:9b:
                    50:c9:07:e2:9c:9e:66:81:4f:62:32:b7:64:ed:04:
                    5c:88:3f:5f:01:e2:0c:f1:f4:89:9d:bc:81:e3:95:
                    5c:8b:26:49:95:8a:7e:7b:52:cc:96:f5:3a:2d:5a:
                    e2:bc:11:3a:72:99:32:72:b4:05:d1:fd:fc:95:71:
                    0b:03:39:c0:44:4e:ae:21:f8:5f:cb:49:ac:18:7d:
                    fa:a8:90:7e:0d:56:fb:ab:12:a9:ee:10:1a:8e:89:
                    c1:62:4c:69:93:e4:93:7b:a0:f0:99:01:d4:d9:25:
                    d2:a4:5e:ce:65:67:c0:ee:66:2b:53:35:60:33:54:
                    ee:cb:8c:62:1b:08:dd:5c:93:84:77:6e:e8:43:f1:
                    d6:5e:12:1c:32:ae:6e:c2:76:87:19:cb:83:f5:bd:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:8B:4C:97:0A:A1:F7:ED:9C:BE:D5:BD:29:D7:7C:3D:40:33:71
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/e519168b8dfc6e12eeb89a54634974ec320c1ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:42:b4:73:b5:6e:30:9b:e5:74:27:6b:21:3b:79:22:72:8a:
         8c:b4:1b:67:a6:21:52:2d:0d:f6:9d:a6:c5:cd:e4:64:8c:6c:
         35:3e:04:70:eb:87:e9:1a:03:e8:1e:1a:60:9a:5d:de:7b:e8:
         0d:53:8e:46:5d:7b:19:67:03:1c:8b:eb:26:e5:3a:5c:9a:40:
         88:e0:c2:cb:16:12:d5:d0:a3:6e:6f:2a:19:9f:51:76:64:73:
         b0:ab:84:72:82:b5:c3:e4:90:2a:52:5a:de:13:ad:83:fe:fb:
         bd:14:ee:94:67:16:90:4e:57:28:ca:f9:0c:37:05:33:44:5e:
         22:a1:ca:a7:47:9e:84:03:f0:d4:1a:f6:6e:12:17:5f:03:53:
         16:6f:a9:de:a4:2e:6d:16:64:0d:94:a1:68:5e:cf:85:56:ac:
         36:85:5f:d7:83:cf:ff:f4:82:8f:46:44:7b:eb:19:9a:e6:53:
         96:ea:55:f0:a6:fb:48:50:09:ec:b6:0f:e1:8f:a2:c0:90:27:
         9d:f4:bf:a3:ab:fe:35:ac:ce:da:c9:15:60:99:c4:96:2e:31:
         58:86:26:1f:a5:94:a5:6f:00:79:28:d6:cf:08:9c:f8:82:d6:
         27:d8:b5:bc:dd:b4:5b:25:fa:7d:74:76:d5:62:e3:37:b1:eb:
         65:73:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----