Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/634c8e030b1bc59253541e9b210fe3ce551aa087.roa
File:                     634c8e030b1bc59253541e9b210fe3ce551aa087.roa (raw, json)
Hash identifier:          xqVLy8KUPVqJymXgST8653MN9U0vEGr0/XS7+7Pv70k=
Subject key identifier:   22:F0:73:C0:51:E9:C8:52:13:07:D2:4B:0F:8B:C1:55:7C:99:A5:77
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       26A3F0
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/634c8e030b1bc59253541e9b210fe3ce551aa087.roa
Signing time:             Fri 12 Jan 2024 18:26:30 +0000
ROA not before:           Fri 12 Jan 2024 18:26:30 +0000
ROA not after:            Mon 12 Jan 2026 18:26:30 +0000
asID:                     52458
IP address blocks:        2803:480:9::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532336 (0x26a3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Jan 12 18:26:30 2024 GMT
            Not After : Jan 12 18:26:30 2026 GMT
        Subject: CN=634c8e030b1bc59253541e9b210fe3ce551aa087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:1a:76:e8:fe:13:6e:6c:b5:87:70:db:0b:
                    55:b0:c6:80:c1:0b:0a:2e:58:4d:a1:7a:60:18:d6:
                    01:b9:2c:c9:dd:82:59:ad:c4:01:e0:21:5b:d9:ff:
                    5d:14:b4:e9:7c:8f:24:09:8d:7e:f4:df:65:32:d7:
                    ad:cc:be:01:78:7f:78:f8:e4:bf:0d:97:e4:a6:13:
                    b9:9e:1e:28:12:7a:28:26:21:28:60:ff:04:24:b3:
                    b8:1a:94:1e:ce:ca:bd:06:97:bb:93:3d:ad:29:42:
                    5a:79:72:ad:86:00:09:73:d3:22:50:a1:c7:7f:b4:
                    c2:38:66:76:38:c1:9c:17:e7:b2:86:5c:c8:4e:e4:
                    8a:7f:f8:94:27:0d:c0:01:c2:97:fa:e4:64:16:6c:
                    5d:a8:83:23:52:00:81:75:c1:07:83:87:8c:ba:65:
                    e3:2b:c7:ef:e5:4e:1c:ce:15:e3:86:33:73:07:70:
                    ba:99:7c:61:93:42:c4:cb:00:39:1b:58:cf:ba:bb:
                    c1:04:ac:71:dd:aa:6d:d0:14:24:e8:f6:4a:79:28:
                    1c:45:e4:3e:e9:a8:2b:56:b2:06:89:f8:d8:3f:1f:
                    9f:a4:4b:a0:85:96:0c:79:68:27:a9:b9:c9:de:94:
                    9e:3e:64:8d:3f:9a:35:d5:ec:ab:cf:26:15:d8:3b:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:73:C0:51:E9:C8:52:13:07:D2:4B:0F:8B:C1:55:7C:99:A5:77
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/634c8e030b1bc59253541e9b210fe3ce551aa087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:1e:9c:b5:5a:e2:a5:34:9c:35:79:57:26:46:72:42:c9:
         fd:79:d1:be:7f:a2:28:38:3a:0b:41:1b:6c:3d:d4:fe:cc:1b:
         43:55:b9:fb:92:a2:94:04:1b:72:04:f8:32:37:c4:e4:25:89:
         c5:38:18:4a:a0:b9:80:aa:33:6f:eb:f2:93:c1:07:1f:8f:45:
         02:06:19:f1:d2:5f:ca:26:8b:84:f5:2a:81:d2:e1:de:86:88:
         f8:90:fa:9a:d4:b9:ed:26:ac:09:e5:ec:9e:37:87:d3:32:56:
         3d:72:f2:30:9d:3c:ee:77:7f:18:f8:db:6b:fa:83:d8:9c:98:
         34:31:0f:ed:cf:41:42:d4:00:63:27:59:68:fc:eb:41:99:ae:
         d5:90:ff:dd:79:eb:63:24:89:05:60:7e:75:20:7b:4b:2c:50:
         53:ef:65:7a:fa:6a:33:57:7c:92:37:9f:0d:2e:d7:48:c6:46:
         de:53:68:5f:04:bb:40:a2:1f:e9:12:ac:bd:38:2d:49:5a:5f:
         83:52:0d:6f:6c:c8:8b:a6:e6:69:6b:d4:1d:3f:2d:05:14:ca:
         4c:60:b8:2f:bf:2b:bf:ce:d5:c8:17:7b:a1:7c:89:ff:8b:b8:
         33:e5:95:30:70:86:65:d3:4b:6e:fe:0c:dc:3c:4f:bb:1d:b2:
         84:e1:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----