Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/43c1e7f6512f472e4a32be52cc4ef182b95a5b44.roa
File:                     43c1e7f6512f472e4a32be52cc4ef182b95a5b44.roa (raw, json)
Hash identifier:          SVfhCfuQbyDIe5jLJueU9ATVeUYKmiKfVd7IIxbxKAI=
Subject key identifier:   6B:25:FF:A4:8C:73:B6:54:D0:6A:16:B4:D4:69:8D:F3:FA:6A:FB:FD
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       16A81A
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/43c1e7f6512f472e4a32be52cc4ef182b95a5b44.roa
Signing time:             Mon 03 Apr 2023 21:01:48 +0000
ROA not before:           Sun 02 Apr 2023 20:56:09 +0000
ROA not after:            Thu 03 Apr 2025 20:56:09 +0000
asID:                     270035
IP address blocks:        2803:e5e0:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484826 (0x16a81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Apr  2 20:56:09 2023 GMT
            Not After : Apr  3 20:56:09 2025 GMT
        Subject: CN=43c1e7f6512f472e4a32be52cc4ef182b95a5b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:b0:91:96:c6:69:e3:87:16:89:bc:34:c1:
                    8c:16:28:55:b3:bd:2b:02:ef:2d:ee:fc:10:ba:4c:
                    3d:01:dc:66:a6:78:9c:b7:ab:a9:90:88:17:df:05:
                    6b:13:4e:3d:6b:ae:7a:3e:e8:11:76:a5:8f:82:62:
                    df:67:0e:0c:b3:01:58:f9:2d:6e:72:63:b1:a7:aa:
                    2a:01:ee:41:37:9f:0b:1c:61:c2:ad:fd:15:eb:d9:
                    26:b7:8d:95:b4:1a:21:3e:59:49:88:ad:0c:64:03:
                    b1:f3:1c:e1:72:09:c5:93:ce:76:4b:f0:07:52:5e:
                    18:24:a5:27:0f:c4:f8:46:5c:d2:51:f2:c9:d7:2a:
                    42:56:ef:b6:01:c2:e6:25:fe:4d:5b:2a:11:1b:c2:
                    7d:3a:94:65:87:bd:04:a2:5b:04:70:5a:4f:5c:dc:
                    9a:59:71:a0:cf:3d:a9:86:c7:3a:cd:fe:d6:7b:8f:
                    02:83:af:4e:8e:de:d8:c6:39:f9:29:2b:08:ab:00:
                    30:a6:1c:a2:20:18:80:6a:50:c3:b1:e8:77:3e:4b:
                    ee:29:61:ff:de:c4:ce:21:a9:d4:b3:e4:43:da:e3:
                    cf:18:86:4d:84:ff:3d:58:26:e9:89:fe:bf:cb:21:
                    a2:73:0f:b7:52:40:2c:b9:2a:13:7b:5d:00:58:49:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:FF:A4:8C:73:B6:54:D0:6A:16:B4:D4:69:8D:F3:FA:6A:FB:FD
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/43c1e7f6512f472e4a32be52cc4ef182b95a5b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:cc:15:8c:82:63:6e:30:ee:89:22:0e:b5:23:d7:6e:0e:
         43:f8:b0:1d:61:c2:e5:ba:bb:0b:6d:c8:b3:1e:bb:ef:b3:97:
         3f:c7:2c:0d:71:a4:b1:62:2c:aa:c5:f0:b1:d9:3f:53:c6:c2:
         2a:06:59:e4:3e:28:ce:21:86:eb:b4:8e:8d:fb:b3:d7:7a:15:
         cf:fc:63:6b:1e:65:ad:01:bf:ae:85:29:60:ee:13:5d:b2:9b:
         d1:40:64:64:92:8d:5e:2f:27:f3:b3:b4:4f:b6:fb:31:d6:cd:
         f9:24:55:16:4c:35:51:8b:d5:e9:6a:13:34:bd:0c:3e:68:3a:
         ae:14:b7:51:c1:91:3e:d4:e0:09:fe:8b:46:68:c2:56:03:3d:
         fb:bd:d2:11:00:de:2c:c8:57:15:4e:84:0f:49:93:1c:d7:1b:
         41:7f:7a:50:11:e1:c5:59:45:bf:57:3a:c6:8d:75:63:24:48:
         b0:f8:25:81:29:bd:6f:ce:86:a9:a6:a1:48:94:f8:03:91:e2:
         03:eb:35:83:f9:22:de:c1:50:59:1a:f2:16:a3:2f:cb:a3:07:
         a5:0f:85:c9:7c:62:fe:a1:ee:46:45:83:ef:d1:e7:a1:ce:cb:
         0f:43:0a:50:1d:ae:c6:61:75:c3:fe:ee:97:2a:7e:78:a9:e9:
         98:65:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----