Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/1ed81307d3cccf18ea8ca58cfbe76ccabde6011f.roa
File:                     1ed81307d3cccf18ea8ca58cfbe76ccabde6011f.roa (raw, json)
Hash identifier:          mEz9lJWf+bV0V0LyDz8P3rDMA+upyXjvZ7lr4rw900M=
Subject key identifier:   E9:4E:59:CA:51:68:0F:67:DE:0B:AE:F8:81:96:3A:AE:42:8D:38:B9
Certificate issuer:       /CN=d21229289c57a4e5d9288cb35fdfe657f437216e
Certificate serial:       027FDB
Authority key identifier: 59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21229289c57a4e5d9288cb35fdfe657f437216e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/1ed81307d3cccf18ea8ca58cfbe76ccabde6011f.roa
Signing time:             Fri 28 Jul 2023 16:18:47 +0000
ROA not before:           Thu 27 Jul 2023 16:18:47 +0000
ROA not after:            Mon 28 Jul 2025 16:18:47 +0000
asID:                     272838
IP address blocks:        2803:9c90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163803 (0x27fdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21229289c57a4e5d9288cb35fdfe657f437216e
        Validity
            Not Before: Jul 27 16:18:47 2023 GMT
            Not After : Jul 28 16:18:47 2025 GMT
        Subject: CN=1ed81307d3cccf18ea8ca58cfbe76ccabde6011f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c9:89:be:82:ac:e7:b5:dc:c9:9a:1e:c4:45:
                    70:a9:1c:0f:43:5f:e2:43:1b:b4:ef:31:2f:ef:09:
                    1e:ba:b3:db:f5:6f:18:fc:44:51:89:0f:89:46:28:
                    6f:08:3c:bf:ab:2f:e9:c1:9e:3a:4b:86:86:a4:2e:
                    25:bf:ce:3b:d2:fe:3c:40:94:73:40:44:37:be:f9:
                    d3:f9:ef:1f:21:b9:ac:ee:d5:5f:ca:1f:3f:e6:09:
                    ca:79:02:0f:39:e6:f2:52:94:c4:0c:14:cb:c3:13:
                    d9:f4:62:7c:6c:bb:ce:61:5a:24:b0:17:a1:36:92:
                    f1:34:78:3f:7d:cf:2b:8f:52:45:f2:a5:d6:e9:9e:
                    9c:23:74:d7:93:71:69:7a:1a:2e:92:76:b7:d7:e5:
                    67:c9:b7:02:d1:60:e5:d2:39:b4:ff:69:fc:1b:41:
                    89:59:fa:59:e6:04:b6:e3:6d:a0:94:d1:b9:d7:64:
                    58:29:ac:fb:28:1a:94:c9:12:24:33:e9:22:c1:2f:
                    24:d1:3e:da:f0:9b:f5:d1:d8:c3:39:f0:61:e7:d9:
                    49:bd:25:a3:ad:4d:c6:08:2a:d3:4c:32:bc:39:24:
                    95:12:39:6c:23:b1:a3:10:ea:1c:50:e2:59:37:89:
                    25:cf:42:b7:05:7c:f6:95:36:5a:b2:53:18:dd:fe:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:59:CA:51:68:0F:67:DE:0B:AE:F8:81:96:3A:AE:42:8D:38:B9
            X509v3 Authority Key Identifier:
                keyid:59:AE:DB:AB:E5:8C:86:79:FA:DE:BA:C7:F4:BA:1A:EB:B3:EE:76:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21229289c57a4e5d9288cb35fdfe657f437216e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/1ed81307d3cccf18ea8ca58cfbe76ccabde6011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67c19d8d-96fe-4e48-8547-852e67d67124/d21229289c57a4e5d9288cb35fdfe657f437216e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:3a:06:fd:c8:06:14:90:b2:e4:d9:45:d6:b6:34:a8:cf:
         05:ab:f4:b2:40:4d:82:5a:de:8d:d4:ef:6d:b6:da:1e:ec:e1:
         ff:91:5c:51:be:c5:9c:30:d9:a0:9c:60:59:dc:74:f7:70:4f:
         cb:96:4d:f3:b1:23:05:24:8c:a2:b1:21:03:16:d8:3d:54:15:
         ee:95:00:8b:a9:26:df:50:14:19:bc:65:27:a8:bb:18:c1:7c:
         c2:df:a5:cd:b6:11:ee:40:1c:a0:53:a5:79:fa:97:c1:53:bc:
         c1:b6:9d:12:86:3f:7f:d9:11:ce:15:16:6b:82:62:11:0b:e0:
         9a:2e:b6:ac:20:78:1e:74:bb:71:a3:1d:c0:d2:15:dc:f8:c1:
         f8:e0:b8:14:df:1a:d7:49:ae:b4:56:55:92:a0:04:bd:a0:73:
         ff:e9:10:f0:34:b5:a6:57:9e:45:44:7e:21:bf:f0:11:9c:f1:
         13:53:ea:37:7c:5f:10:11:5b:3f:9c:4e:2f:fd:d9:4d:ab:c0:
         e9:64:c7:b0:57:ce:f5:b7:6a:f5:d1:79:9a:49:f7:99:48:5f:
         a9:26:14:fc:24:7f:f0:ea:93:24:08:a9:e8:99:25:1e:1a:ed:
         9d:f7:9f:cd:fd:09:09:d1:f2:d4:5d:65:b1:e0:5a:13:a6:a4:
         11:2a:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----