Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/68abe85d634c22246146b45c8a1035e7ce7ed3fd.roa
File:                     68abe85d634c22246146b45c8a1035e7ce7ed3fd.roa (raw, json)
Hash identifier:          bm2nwm+PHsUz+URWx+pI83+4x/BNQIuzFmyal9EPKk0=
Subject key identifier:   30:92:61:F1:20:36:4C:DB:38:74:96:1E:4A:86:55:DF:84:9E:D0:14
Certificate issuer:       /CN=2e3badce5f4eda115831b8ae848e99b2ecccf3e1
Certificate serial:       055826
Authority key identifier: 9E:D8:28:3A:E3:82:91:3E:AE:C0:71:44:38:E1:C0:B7:79:F7:05:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/68abe85d634c22246146b45c8a1035e7ce7ed3fd.roa
Signing time:             Tue 05 Dec 2023 20:33:49 +0000
ROA not before:           Tue 05 Dec 2023 20:33:49 +0000
ROA not after:            Fri 05 Dec 2025 20:33:49 +0000
asID:                     272930
IP address blocks:        2803:cc50::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350246 (0x55826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3badce5f4eda115831b8ae848e99b2ecccf3e1
        Validity
            Not Before: Dec  5 20:33:49 2023 GMT
            Not After : Dec  5 20:33:49 2025 GMT
        Subject: CN=68abe85d634c22246146b45c8a1035e7ce7ed3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:3b:06:2f:ac:50:f2:a2:04:60:8c:d5:03:
                    a6:4d:52:b2:1c:49:9f:aa:21:0b:d4:1e:98:d4:dd:
                    1e:67:64:19:a8:67:a5:1a:c4:86:5b:76:b0:1c:0f:
                    87:2c:12:c8:00:ca:3e:c0:29:17:8d:74:a3:a3:fc:
                    cc:52:7d:e6:3a:60:ad:ff:53:28:7e:cc:70:20:0b:
                    fa:14:31:8d:ba:87:65:8c:3b:a3:1d:56:b0:13:cf:
                    1b:2b:bc:43:79:de:4a:fb:0d:39:cb:a1:9e:86:ef:
                    95:98:b6:df:7b:f3:fc:dd:a1:16:7c:88:12:6e:10:
                    c4:42:93:d2:43:60:45:cf:8a:43:0d:30:61:bd:c0:
                    7b:0e:60:8e:a5:c3:23:fc:cb:7a:db:b1:26:a8:7e:
                    4f:47:06:48:66:6b:8f:29:24:1e:1e:3e:64:fb:e5:
                    6a:3a:b2:c9:9d:c6:24:9a:c1:9b:53:dc:86:01:2c:
                    fb:14:68:d8:bd:b5:7e:30:be:a0:2e:e5:f7:3c:30:
                    70:db:45:a4:8c:0d:cd:ea:34:db:4c:3e:bf:fe:b7:
                    3f:18:26:06:8d:3e:33:b4:a4:9a:aa:2b:ba:df:93:
                    c6:1f:f1:19:fa:03:04:80:18:91:28:8d:a7:fc:dd:
                    91:fa:40:69:7f:fc:c3:db:2c:b9:ba:05:ec:52:d7:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:61:F1:20:36:4C:DB:38:74:96:1E:4A:86:55:DF:84:9E:D0:14
            X509v3 Authority Key Identifier:
                keyid:9E:D8:28:3A:E3:82:91:3E:AE:C0:71:44:38:E1:C0:B7:79:F7:05:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/68abe85d634c22246146b45c8a1035e7ce7ed3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc50::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:46:9a:dd:9c:43:c1:ef:0a:a2:0c:26:89:96:64:53:57:5e:
         6b:b7:2c:e4:0a:64:e4:46:ae:bd:98:cf:73:46:9c:68:59:89:
         c5:7c:7d:a7:7e:c6:50:ba:fc:bc:db:9e:89:b9:7c:5e:7c:9a:
         ce:61:81:31:f8:39:39:6b:d0:c8:ab:db:d6:69:30:8d:5e:e0:
         c1:a1:1a:c2:b6:ad:a4:20:91:a2:f8:92:84:bb:af:43:eb:bf:
         f0:80:e1:4d:13:1f:0c:fc:ec:cc:5f:ae:66:17:af:9e:5e:ef:
         99:17:24:f3:ad:12:31:c8:27:c7:88:3e:7f:70:b7:b6:7c:9b:
         ad:5a:ea:8d:cb:ca:50:09:fc:da:17:26:9d:19:b8:20:45:8b:
         ba:ff:ce:ca:d7:8b:ef:5f:3b:db:7a:be:6a:5b:a7:25:31:95:
         1d:f2:c4:4f:3b:4d:67:a0:70:d8:0d:9a:1f:20:d3:e3:23:1b:
         23:6c:db:43:8b:69:11:d5:ae:cd:d8:8a:0d:fd:19:5e:3b:26:
         30:4a:dc:6d:25:09:73:4d:b0:19:26:f7:88:94:38:ec:6f:1f:
         9c:08:bf:72:75:20:99:64:46:76:c6:9c:2b:54:68:ea:73:50:
         10:2c:68:c9:82:ca:49:a8:01:b2:3c:65:3f:63:d2:a9:50:ec:
         95:46:c8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----