Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/cee66698e2abb154376f2b61c8b11559a62f5feb.roa
File:                     cee66698e2abb154376f2b61c8b11559a62f5feb.roa (raw, json)
Hash identifier:          RaPXCPX5JXkMUorwiAfCLroEnT6KhyFCG4AwAP+khOs=
Subject key identifier:   4C:C6:EA:6A:7B:59:58:6F:D2:9B:B6:B4:C5:82:D4:46:24:6D:3F:94
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       214998
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/cee66698e2abb154376f2b61c8b11559a62f5feb.roa
Signing time:             Tue 05 Mar 2024 21:18:46 +0000
ROA not before:           Tue 05 Mar 2024 21:18:46 +0000
ROA not after:            Thu 05 Mar 2026 21:18:46 +0000
asID:                     271803
IP address blocks:        2803:b0e0:801b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181528 (0x214998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Mar  5 21:18:46 2024 GMT
            Not After : Mar  5 21:18:46 2026 GMT
        Subject: CN=cee66698e2abb154376f2b61c8b11559a62f5feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:21:3b:86:90:ee:d2:24:a1:3a:9e:1a:5b:67:
                    d2:61:66:f9:0c:4a:fb:55:b2:55:9d:34:01:eb:61:
                    77:79:22:2f:04:fd:a5:87:6e:91:a9:6c:8b:37:7f:
                    14:fb:78:15:6e:18:f8:9a:55:56:d7:4e:ad:8b:b6:
                    f1:c8:21:88:ab:7e:6d:5c:3d:97:b7:1f:dd:4b:55:
                    b8:ed:40:d6:fd:3b:7a:19:a2:3e:ec:16:10:05:30:
                    98:64:99:8f:a9:0f:da:8d:1f:cd:bf:56:18:f3:53:
                    f3:5c:96:6a:62:c9:65:bf:58:93:5b:69:c7:79:7d:
                    7c:de:27:9f:53:db:a3:94:2a:4d:8e:13:9b:55:b7:
                    bf:c9:b4:c9:cc:8f:a5:0b:53:ea:7a:79:0c:24:4c:
                    ca:97:94:9b:8a:3c:8c:f9:18:f2:13:d1:17:15:0f:
                    e1:7b:3a:4d:ef:c8:98:9c:b8:11:6d:e2:7d:3d:ba:
                    f1:67:c1:8a:e6:c4:cb:b9:c2:2b:f5:73:c5:da:39:
                    63:a5:11:90:99:77:79:59:0c:33:c2:96:22:40:c7:
                    7e:9a:76:6a:ab:1f:1f:2d:cc:28:95:8a:c6:e7:7a:
                    d2:a1:f4:1f:6b:bf:89:28:ce:86:16:15:83:ad:62:
                    c4:ee:8e:83:69:44:e8:77:76:99:1e:a2:67:ce:29:
                    c0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:EA:6A:7B:59:58:6F:D2:9B:B6:B4:C5:82:D4:46:24:6D:3F:94
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/cee66698e2abb154376f2b61c8b11559a62f5feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:2a:00:7d:c3:fe:d7:c6:fe:ab:f2:d8:36:7d:b0:66:d9:
         94:b8:18:49:e3:5a:fb:2b:66:36:3c:6d:6c:2b:c4:9d:3b:e0:
         94:47:5f:f1:76:0c:1b:87:1c:59:5b:d3:97:21:43:15:d0:91:
         b5:22:0a:5c:26:fa:f5:0a:2b:b6:7f:b7:01:1d:37:fc:19:7b:
         a6:da:72:a8:46:d2:90:71:56:a2:3d:40:f5:32:a9:f7:9f:3f:
         b8:ed:30:28:47:41:40:4f:f1:74:02:de:69:d7:25:44:09:d4:
         b4:48:3c:16:86:7a:56:87:2b:9b:d0:9f:6e:57:55:87:23:26:
         8a:3f:c6:8a:59:b4:35:06:83:a4:25:13:9e:4a:7a:ee:ba:84:
         23:5f:e3:0f:83:fd:04:27:27:19:a4:7c:22:63:68:1b:ab:e1:
         36:56:9b:de:18:58:03:3f:5c:f5:07:3a:bb:f3:14:b5:62:64:
         5d:89:10:34:67:72:4c:a2:64:2e:1b:75:a3:82:f2:09:42:b7:
         99:e9:d8:b7:40:a8:72:20:fa:46:12:73:b2:8e:a8:c4:cb:e5:
         e0:53:91:98:22:b9:6e:b2:65:4f:31:b8:bc:9d:06:ad:9c:6b:
         e1:20:1e:f6:b5:f3:ff:61:72:a8:5d:3c:cf:3d:8b:54:ed:de:
         cd:06:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----