Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/38326ad0c99af33b2cdcef4d3e4f70d68fcb1461.roa
File:                     38326ad0c99af33b2cdcef4d3e4f70d68fcb1461.roa (raw, json)
Hash identifier:          Yfv2MM+bzc0a1jDD1s+WGmZNUtiGHHWQqI1hhv2w2ds=
Subject key identifier:   01:04:ED:C6:24:3D:47:D0:15:83:35:F8:6D:A0:38:4F:2E:4F:DD:C1
Certificate issuer:       /CN=5c657c326adeece70c1e8bb9038ff79bc5e67ae6
Certificate serial:       190F21
Authority key identifier: BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/38326ad0c99af33b2cdcef4d3e4f70d68fcb1461.roa
Signing time:             Sat 09 Dec 2023 07:30:00 +0000
ROA not before:           Sat 09 Dec 2023 07:30:00 +0000
ROA not after:            Mon 08 Dec 2025 07:30:00 +0000
asID:                     271822
IP address blocks:        2803:810::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642273 (0x190f21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c657c326adeece70c1e8bb9038ff79bc5e67ae6
        Validity
            Not Before: Dec  9 07:30:00 2023 GMT
            Not After : Dec  8 07:30:00 2025 GMT
        Subject: CN=38326ad0c99af33b2cdcef4d3e4f70d68fcb1461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:dc:6b:8f:db:66:4f:71:b3:f1:b4:50:54:
                    d5:c3:1d:68:98:d1:32:ca:06:84:52:9e:86:be:27:
                    1f:19:0f:b8:a0:7a:c2:41:f9:89:29:4c:d4:ff:43:
                    c2:b5:a6:a8:d3:28:58:62:7a:44:26:d7:fe:ca:bb:
                    fe:20:08:96:e5:ca:33:43:84:b9:29:a6:95:ff:7b:
                    9a:81:7e:4f:a6:6b:fb:54:ea:34:de:8a:b0:e9:b3:
                    80:bc:9f:6c:a3:0d:06:55:ec:f3:75:96:ca:cd:7c:
                    57:50:b5:e8:ee:ed:07:b1:6f:0f:0e:c2:cf:aa:9b:
                    3c:27:df:e1:8f:76:a9:db:d0:e6:0d:5b:d5:8b:57:
                    da:45:23:5e:3f:a2:7b:cd:82:f1:c7:ec:d7:5a:62:
                    02:0f:14:3d:91:f0:05:cd:36:94:ce:34:b8:a4:56:
                    23:a2:9a:a2:fc:e6:d2:2e:a2:75:ee:79:be:22:07:
                    22:d8:30:94:c6:a0:9c:89:a8:85:f4:a8:ad:5f:00:
                    ff:a1:a4:a3:07:92:13:63:8c:b6:33:06:59:55:fe:
                    37:8e:eb:d3:f2:68:b5:4c:fc:5a:e4:67:20:a9:8b:
                    f4:52:cd:6e:c4:a4:94:db:83:9a:e8:72:db:8d:36:
                    60:17:c8:e2:ed:b5:af:ca:5b:c9:dd:9e:38:6a:48:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:ED:C6:24:3D:47:D0:15:83:35:F8:6D:A0:38:4F:2E:4F:DD:C1
            X509v3 Authority Key Identifier:
                keyid:BA:88:1C:E9:05:6D:44:63:2F:CE:98:92:2D:F9:F6:30:CF:D9:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/38326ad0c99af33b2cdcef4d3e4f70d68fcb1461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f982222-0ef7-4c29-9587-da04370898b1/5c657c326adeece70c1e8bb9038ff79bc5e67ae6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:810::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:ca:02:8a:96:e6:8e:6d:e9:9e:47:4d:40:d9:c1:09:3b:
         08:84:04:33:cb:ca:d1:a6:fa:6e:ec:68:1d:3a:f0:c9:0d:90:
         7a:0a:27:f2:80:52:fc:88:9a:96:08:4d:51:03:13:e3:a3:f8:
         27:3f:2a:65:3a:71:6b:d1:f3:92:93:66:79:30:04:c4:36:d7:
         85:d3:7b:b7:3e:f4:8a:bd:2d:50:93:34:f6:b8:41:ee:80:26:
         5d:f7:50:dd:a9:e0:f5:7a:40:de:5e:66:25:40:3d:6f:5d:04:
         ed:ed:1b:a0:a5:0d:02:cc:91:81:b1:d5:a2:70:97:87:38:f4:
         85:b5:35:6f:df:8f:40:a9:cd:56:5f:47:e2:eb:f7:33:c3:ad:
         91:d7:f4:ae:05:13:28:b5:89:16:a7:e6:94:ab:49:1a:9e:be:
         46:dd:99:54:f8:c3:79:64:cc:bb:63:b5:61:a4:b2:ce:f2:fb:
         0b:b7:94:73:f0:28:cf:14:49:cf:3f:39:f2:56:5c:a3:82:7e:
         af:8a:2e:82:e8:04:a6:e7:70:15:e2:83:4e:94:bf:d8:9a:c3:
         cd:b3:53:8c:66:f5:ae:ce:7a:8f:8a:a3:49:07:07:0d:bd:29:
         8c:bb:19:7d:b5:3f:b6:84:10:04:cf:ff:a6:e9:4b:30:48:4d:
         ee:3c:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----