Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95e314404b9f48e76a1355132b9f34bed973fe35.roa
File:                     95e314404b9f48e76a1355132b9f34bed973fe35.roa (raw, json)
Hash identifier:          IC1xzaDGwJOBCo3c7XvpGhnAi/bVvF8GHwAGSwfjYwE=
Subject key identifier:   50:F9:6B:04:B9:DD:C6:76:D7:03:7A:0B:5E:FB:C4:E3:41:4F:D7:1E
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       20A1F7
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95e314404b9f48e76a1355132b9f34bed973fe35.roa
Signing time:             Wed 07 Feb 2024 16:40:47 +0000
ROA not before:           Wed 07 Feb 2024 16:40:46 +0000
ROA not after:            Sat 07 Feb 2026 16:40:46 +0000
asID:                     272979
IP address blocks:        2803:b0e0:8013::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138615 (0x20a1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Feb  7 16:40:46 2024 GMT
            Not After : Feb  7 16:40:46 2026 GMT
        Subject: CN=95e314404b9f48e76a1355132b9f34bed973fe35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:fd:d9:9a:99:9e:cb:3c:ff:a3:2a:1a:ad:
                    ab:ee:98:d7:28:8b:85:01:ab:83:da:6b:c3:4a:ff:
                    6d:8a:b7:ec:76:3b:bb:3c:2f:22:ae:f7:f8:e7:61:
                    87:d1:3c:95:b2:85:58:0c:ef:ec:6a:5e:17:b4:aa:
                    36:a0:d8:13:e1:ce:7e:cd:cc:48:33:91:b9:8a:93:
                    e9:36:87:e3:8c:37:c5:1b:b1:6b:3d:47:67:c5:63:
                    e9:eb:b8:0b:12:ad:47:a0:11:6c:45:26:f9:e1:d0:
                    1d:ed:7f:3e:8a:ae:2f:22:04:9b:dc:31:2b:83:20:
                    e4:25:2a:4d:be:d1:c4:85:ea:13:d2:44:4d:2c:04:
                    67:91:7a:23:35:a2:43:1a:3f:d4:bd:71:67:1e:6f:
                    b0:51:38:68:a5:ff:31:4f:70:d7:1d:e1:8a:3b:1e:
                    d2:f7:db:ef:0e:8c:6f:46:8c:9e:35:65:30:61:3e:
                    10:60:bf:47:f2:d9:ad:10:de:d0:dd:f2:d3:84:19:
                    b2:c0:d0:e8:2a:4f:4f:be:b7:12:ed:3a:40:b6:1b:
                    4d:b2:2a:46:a8:2a:39:92:16:d6:e1:62:bc:c6:cd:
                    bb:49:85:1a:f7:6b:45:eb:c0:26:6a:31:61:29:6e:
                    9d:fe:7c:30:41:f0:d5:e0:16:3b:26:20:78:59:45:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:6B:04:B9:DD:C6:76:D7:03:7A:0B:5E:FB:C4:E3:41:4F:D7:1E
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/95e314404b9f48e76a1355132b9f34bed973fe35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:8013::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:77:19:90:fa:1a:07:33:e5:7e:f4:5f:80:06:fd:2c:98:
         8b:ec:48:f5:ea:fb:3b:f2:03:dd:b5:bd:09:52:05:48:06:5c:
         da:90:7a:c8:fb:c3:06:29:13:aa:08:56:06:b6:7d:fb:e3:9b:
         65:8a:b0:bd:19:c2:69:02:4f:c0:f5:4b:27:6f:5d:7a:f5:2f:
         be:f7:36:66:b7:07:bd:de:22:d4:ac:d0:70:c8:91:b7:67:ed:
         5d:d3:cd:bd:f4:03:96:9b:e0:d5:e7:a9:20:92:31:ce:4b:8c:
         c5:65:27:6e:4e:6f:41:64:45:e4:5d:e9:f6:ac:d1:17:e9:3b:
         fd:fd:a6:dc:f6:c0:8c:eb:85:86:e6:1f:48:a0:a0:3b:13:a7:
         d9:d1:db:db:bf:71:6f:34:25:2a:61:50:53:a8:e9:c4:61:0b:
         4a:91:f7:fe:45:d1:76:3a:bf:f8:d0:0f:ec:1d:72:25:53:ae:
         c9:bc:8b:6b:f2:42:39:ad:85:5a:9f:a3:02:a2:58:5e:2e:14:
         8c:12:14:17:97:88:0e:72:cc:8b:97:7d:29:d8:52:fd:4a:a1:
         65:86:3b:67:d1:89:b3:2c:d7:9a:e8:74:d3:0a:7a:46:e3:56:
         70:79:01:f7:11:8d:44:6c:0a:10:39:95:7f:31:25:0e:c1:84:
         11:69:b1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----