Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f88c675b87ebc29b89355fb5556de29b58fb82c6.roa
File:                     f88c675b87ebc29b89355fb5556de29b58fb82c6.roa (raw, json)
Hash identifier:          Dmp8eSlLtw41LEIQDaDVdAro/0dCtGsOP5LiLTkmI7Q=
Subject key identifier:   70:C6:13:84:49:4E:E9:C8:10:2A:B0:8E:05:C1:A8:5F:A1:C5:CC:97
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       20AAF0
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f88c675b87ebc29b89355fb5556de29b58fb82c6.roa
Signing time:             Wed 07 Feb 2024 17:47:25 +0000
ROA not before:           Wed 07 Feb 2024 17:47:25 +0000
ROA not after:            Sat 07 Feb 2026 17:47:25 +0000
asID:                     272044
IP address blocks:        2803:b0e0:7007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140912 (0x20aaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Feb  7 17:47:25 2024 GMT
            Not After : Feb  7 17:47:25 2026 GMT
        Subject: CN=f88c675b87ebc29b89355fb5556de29b58fb82c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:f0:64:f7:33:11:6f:54:e1:3d:14:9d:11:
                    c5:e7:03:48:29:4e:4c:9d:dd:b9:fb:8d:40:b2:ac:
                    b3:5c:d8:e4:3b:d9:39:d1:2c:3b:39:f3:a7:39:f7:
                    98:6b:da:e8:e9:94:9b:76:a1:9f:f6:d3:fe:a3:4b:
                    cc:54:39:68:25:5a:3c:77:53:68:c2:70:a9:80:f0:
                    64:45:01:cc:7f:74:13:ee:72:c5:91:da:d1:d0:40:
                    53:e1:16:ca:ef:13:01:e0:a9:ad:07:d7:6e:76:ae:
                    c8:42:c7:de:e7:45:f9:4b:5e:07:11:dc:c8:b3:a5:
                    ec:dd:00:60:28:94:a4:3f:8c:df:0d:30:50:eb:c2:
                    39:4d:51:0e:c3:38:32:b2:5c:54:1b:f3:28:c6:f5:
                    97:59:83:7c:e8:31:f5:ac:3a:9f:df:1b:46:76:62:
                    c5:f4:d0:b7:60:14:d7:2c:98:39:a6:61:32:5e:70:
                    bf:d0:7f:92:e2:8d:01:56:b3:93:a1:2f:10:c8:0e:
                    bf:20:dc:e7:e0:ce:6a:25:2e:4c:de:1e:d3:9b:09:
                    38:69:d9:68:b4:8f:1a:95:d2:22:de:f8:07:79:6b:
                    63:8a:71:55:70:1b:ae:f5:0b:0f:bd:ae:63:6a:f5:
                    26:78:4f:14:90:43:fa:31:62:d9:d8:8a:ca:0b:43:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:13:84:49:4E:E9:C8:10:2A:B0:8E:05:C1:A8:5F:A1:C5:CC:97
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f88c675b87ebc29b89355fb5556de29b58fb82c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7007::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:d8:9d:f8:0b:ba:c7:8d:3c:e1:7e:e2:fc:6b:40:e6:cf:
         ed:34:ac:47:e1:5b:5b:1a:d8:6c:87:4c:d1:47:a6:0d:cd:0a:
         60:de:a9:26:59:1d:d5:0b:46:ae:96:c8:c5:84:53:e0:78:47:
         ee:24:a6:ad:f7:88:e8:4c:56:d9:32:ae:80:9b:0c:52:06:5a:
         ea:24:91:52:d8:ab:96:e1:a4:04:3c:c9:44:09:9a:c0:eb:be:
         35:3a:02:ba:2a:c7:31:28:31:b4:77:88:b9:bf:51:69:67:97:
         aa:50:2a:13:08:65:da:e3:11:ce:7c:23:44:07:70:6d:21:32:
         29:32:24:5d:53:ca:ff:ba:b7:14:dd:ef:50:d9:ab:2d:6e:aa:
         e6:30:3b:07:8b:38:c4:e0:ba:2c:9f:86:cd:32:4c:be:bd:8b:
         69:1e:5d:b5:02:73:db:02:7e:8d:6c:8d:58:6f:09:4e:63:f8:
         ef:db:2e:af:2b:6a:ef:62:ab:53:d9:c7:b6:4e:9d:31:be:e1:
         19:a2:09:22:de:0f:bb:b6:2d:35:7d:4f:56:90:fa:92:19:76:
         a9:ed:1b:bb:63:d4:ac:49:12:ea:75:89:8f:49:e1:0f:5b:3d:
         3b:71:96:c1:c2:bd:03:e1:de:78:27:3a:c2:41:20:1d:99:05:
         3d:f7:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----