Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/f0ef9e03efbfc561eb50a103b126e10d02ab0271.roa
File:                     f0ef9e03efbfc561eb50a103b126e10d02ab0271.roa (raw, json)
Hash identifier:          G8a9JbF2WpB88dIE9JwQRn92cTuCD5wrqulUwzx80+Y=
Subject key identifier:   C9:71:4F:F6:43:2C:A9:16:FA:7A:41:1A:3E:50:9D:19:34:EE:4A:C9
Certificate issuer:       /CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
Certificate serial:       1CDD90
Authority key identifier: BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/f0ef9e03efbfc561eb50a103b126e10d02ab0271.roa
Signing time:             Thu 16 Feb 2023 16:40:45 +0000
ROA not before:           Tue 23 Mar 2021 14:38:14 +0000
ROA not after:            Tue 24 Mar 2026 14:38:14 +0000
asID:                     267845
IP address blocks:        2803:4c60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891728 (0x1cdd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e5ae4164aa29d5bd6483552f9d80c8333d29b9
        Validity
            Not Before: Mar 23 14:38:14 2021 GMT
            Not After : Mar 24 14:38:14 2026 GMT
        Subject: CN=f0ef9e03efbfc561eb50a103b126e10d02ab0271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:b7:22:c2:fe:00:c8:86:89:72:c4:4e:0a:
                    11:ec:12:6d:cc:48:2f:bf:a8:4a:77:78:ad:42:18:
                    ad:76:8f:76:53:67:37:5a:88:8b:4e:5b:65:86:f9:
                    d2:7c:8d:2a:4e:24:0d:4b:be:e3:2d:ec:50:97:85:
                    36:fa:ec:e5:b3:34:ca:fe:1e:a1:2c:d7:d5:93:21:
                    28:0a:8b:38:d2:cd:d1:f5:6a:0e:54:48:a8:b5:ed:
                    c1:21:b2:65:3b:56:66:52:fc:e6:0f:c5:b7:71:c5:
                    3d:81:20:36:58:e6:de:30:d5:bf:e6:d0:d0:c3:55:
                    80:21:a7:88:57:74:64:65:e8:14:79:da:a0:c0:c7:
                    4a:f6:5d:aa:b6:5e:ee:3d:b5:56:3f:9f:0a:6e:65:
                    31:e7:d1:67:77:d3:22:24:4a:02:84:d6:75:b9:54:
                    ae:18:02:9c:1d:b6:6d:30:96:a5:f0:34:01:f4:d7:
                    5d:d6:a8:73:ea:ed:45:62:58:53:b4:e4:0f:c2:d1:
                    ad:bc:61:7b:02:a6:8f:51:7c:81:dd:fe:db:a7:33:
                    d2:2a:23:ad:f0:18:c7:96:d0:32:65:15:d8:81:33:
                    fc:d5:9d:dc:7e:67:63:42:99:e3:3e:61:d5:cd:91:
                    12:91:e2:9e:31:a2:a0:d8:f0:2e:d2:f2:26:69:04:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:71:4F:F6:43:2C:A9:16:FA:7A:41:1A:3E:50:9D:19:34:EE:4A:C9
            X509v3 Authority Key Identifier:
                keyid:BC:D9:2E:68:DE:B9:79:F0:EA:74:5D:1D:C6:9B:11:09:09:C6:80:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/f0ef9e03efbfc561eb50a103b126e10d02ab0271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5abc687c-c832-4786-bcc2-e01894ad2a0a/16e5ae4164aa29d5bd6483552f9d80c8333d29b9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:de:eb:8c:71:53:a7:30:0e:8e:45:f3:e9:5f:32:f9:70:
         f2:cc:31:57:10:ad:71:39:52:1c:9d:2b:f3:7a:3b:cf:83:3f:
         66:f9:89:5f:7c:18:62:37:be:16:31:c2:50:6b:79:11:b7:57:
         5d:b9:2d:0f:20:94:ce:49:0b:bb:86:cb:ed:62:dd:7f:7e:3d:
         c4:d8:80:f0:3f:e5:e7:24:77:10:0c:a8:6b:83:5d:57:fd:ec:
         77:c7:9d:df:7e:fd:b6:70:a5:ff:ff:e6:88:5c:d6:ef:9f:b5:
         16:9b:67:86:12:3a:ff:69:0b:40:02:05:3f:20:18:19:ec:84:
         17:e4:f9:d8:20:70:67:46:eb:e1:a2:0e:52:10:97:32:80:a6:
         da:e5:28:b4:65:c0:cc:19:6b:b4:c6:51:d8:79:83:e1:b6:9c:
         2a:87:cb:87:bc:14:d2:b5:2f:8e:4b:4d:14:57:8e:4a:70:8f:
         03:85:ce:f7:23:67:5e:d8:d9:5b:57:df:bc:c7:e7:23:fc:39:
         5e:33:b3:e5:af:0a:f2:68:93:52:8c:09:47:e0:c9:1c:52:ef:
         8f:6b:3b:3d:32:8e:fa:66:cd:08:ee:7d:85:49:82:2e:8b:d7:
         aa:9c:93:76:e8:e6:99:be:0a:62:d1:bc:6c:5a:87:36:0a:ae:
         31:d7:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----