Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/d6959a9ce13f978a5079d5e629420b5bad886008.roa
File:                     d6959a9ce13f978a5079d5e629420b5bad886008.roa (raw, json)
Hash identifier:          gQfDkgvL7XsWOLMokpAHZO1zQv3VBPnX/GQ+fB8f+Wg=
Subject key identifier:   AE:76:BC:B1:5F:C2:80:52:E1:3F:7D:86:2C:AC:71:29:6F:9A:73:4B
Certificate issuer:       /CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Certificate serial:       1C50E9
Authority key identifier: ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/d6959a9ce13f978a5079d5e629420b5bad886008.roa
Signing time:             Wed 13 Dec 2023 16:29:35 +0000
ROA not before:           Wed 13 Dec 2023 16:29:35 +0000
ROA not after:            Sat 13 Dec 2025 16:29:35 +0000
asID:                     273080
IP address blocks:        2803:1010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855721 (0x1c50e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
        Validity
            Not Before: Dec 13 16:29:35 2023 GMT
            Not After : Dec 13 16:29:35 2025 GMT
        Subject: CN=d6959a9ce13f978a5079d5e629420b5bad886008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:1d:9d:51:23:aa:ad:ea:40:e4:8f:ef:6e:
                    b2:3e:60:e8:f0:75:31:c1:d8:7f:0b:38:2a:9e:a8:
                    d6:1a:2a:8c:06:bd:a3:1c:53:60:c1:76:e6:29:66:
                    58:8f:9d:12:1b:df:e2:fe:f1:c4:46:91:6c:7e:ad:
                    9d:dc:e6:04:ce:dc:49:bc:25:ac:59:ba:b7:58:d8:
                    f0:81:8f:b0:51:82:f3:91:ea:2e:53:ab:23:43:e6:
                    eb:41:f9:a1:ab:0b:64:12:04:fd:4a:cb:f4:34:1a:
                    07:b3:56:25:c8:97:df:c7:ad:50:95:5f:b0:2b:4e:
                    ac:a6:c1:c4:6f:6c:0a:38:2d:4b:67:a2:cd:1d:d8:
                    39:cb:c3:d7:6c:34:3b:b5:6b:f6:80:5a:82:d5:96:
                    7e:89:73:8d:5b:32:98:6f:4c:ef:38:11:dc:64:eb:
                    8a:98:71:da:46:f0:1e:3e:16:dc:14:3b:87:e8:83:
                    7f:19:3b:31:97:14:53:98:36:d7:a0:77:5a:c4:76:
                    bd:b4:71:ac:63:1f:ca:0f:13:13:52:94:ec:78:97:
                    00:e2:68:5f:d6:c7:26:28:07:6b:95:8f:c8:b9:10:
                    6b:b2:c5:5a:ba:5e:23:ea:e6:bd:41:cc:3b:18:e8:
                    61:b9:8f:d0:cd:9d:d4:fb:f7:d3:4f:07:50:98:f2:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:76:BC:B1:5F:C2:80:52:E1:3F:7D:86:2C:AC:71:29:6F:9A:73:4B
            X509v3 Authority Key Identifier:
                keyid:ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/d6959a9ce13f978a5079d5e629420b5bad886008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/a3e78c1484e71c4beb14c4af115739b15109a6f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:d6:8a:16:79:5b:6a:01:e3:52:a3:8d:ed:a7:0c:4f:9c:
         22:ca:ae:81:f0:60:e4:0e:e8:be:2e:97:82:33:fa:ff:12:30:
         38:f1:0b:65:ed:91:f0:1f:33:3d:f6:50:ff:3b:cb:75:e6:22:
         d8:a5:50:85:2f:2f:63:d7:b9:48:ad:84:17:a8:04:7f:00:11:
         d8:5a:0b:c6:34:c0:a5:d1:1f:b9:50:d3:5b:39:f6:1d:fb:17:
         6b:c9:c7:6e:bd:8b:fa:69:c2:f7:04:fc:fa:2b:f3:05:35:8e:
         54:66:02:76:14:3a:5c:a0:c4:d5:b1:d3:6c:dc:1f:22:ec:e2:
         5a:70:cf:8a:d9:73:20:2c:03:de:00:c7:71:76:8c:0e:7a:d6:
         37:ab:09:3f:03:f2:8f:29:fb:79:56:22:04:84:77:0a:2f:a6:
         29:80:0c:15:ac:21:14:6d:82:b9:e4:7b:03:8f:54:9e:5f:e5:
         6a:59:da:d3:6a:3a:e1:6e:3b:71:37:1e:4c:0a:a6:4f:17:e6:
         03:c8:2c:9c:0e:71:1a:7f:7d:7f:19:f0:d5:87:28:fb:0f:e4:
         de:ad:c9:0d:a1:62:f8:31:5c:59:95:3a:e8:77:85:35:af:4e:
         58:08:df:0b:5f:7c:1e:ac:16:c7:80:27:28:de:0c:f7:36:7a:
         d7:60:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----