Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/8a8e0e1269c2aa92a901be17a2dd7eaa722f21f1.roa
File:                     8a8e0e1269c2aa92a901be17a2dd7eaa722f21f1.roa (raw, json)
Hash identifier:          hSrMT7RbHQfXyB6eVzgtSeJgybaknW767/AoYtJ7P08=
Subject key identifier:   2D:EA:17:CE:99:CC:8C:86:2D:F7:4D:25:BF:57:DD:3D:20:EA:1F:85
Certificate issuer:       /CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
Certificate serial:       06A08D
Authority key identifier: F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/8a8e0e1269c2aa92a901be17a2dd7eaa722f21f1.roa
Signing time:             Sun 04 Feb 2024 14:15:12 +0000
ROA not before:           Sun 04 Feb 2024 14:15:12 +0000
ROA not after:            Wed 04 Feb 2026 14:15:12 +0000
asID:                     272998
IP address blocks:        2803:1d90::/45 maxlen: 48
                          2803:1d90:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434317 (0x6a08d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
        Validity
            Not Before: Feb  4 14:15:12 2024 GMT
            Not After : Feb  4 14:15:12 2026 GMT
        Subject: CN=8a8e0e1269c2aa92a901be17a2dd7eaa722f21f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:5e:3d:26:51:c3:4e:a9:a0:46:a7:a4:13:
                    6d:98:f6:08:41:12:6f:b1:1a:d5:d2:2d:19:d4:1c:
                    d6:2a:8a:14:5a:e2:f1:ef:1b:22:86:99:aa:72:b5:
                    83:9f:91:b8:16:b2:12:c1:0e:82:45:6c:5f:ab:36:
                    0d:04:71:90:3a:31:b7:21:83:90:c1:0a:da:86:38:
                    ab:52:5a:4f:d5:aa:8d:e9:d8:68:de:97:74:75:04:
                    43:72:ec:aa:2b:aa:b2:1c:e3:4d:ed:23:f8:cf:2c:
                    63:61:50:85:d6:92:f9:d7:db:3d:9a:61:8a:67:09:
                    27:15:73:78:ea:8b:f8:cd:99:c0:f6:c0:9b:d5:47:
                    37:cb:04:f7:de:e7:27:d1:cc:fd:9b:6f:cc:2f:6e:
                    5d:35:1f:7c:95:6b:0b:10:b9:9b:9c:1d:0a:99:98:
                    88:a1:78:27:df:82:67:3b:ba:3e:64:4d:20:04:01:
                    9f:83:73:a1:81:d0:1e:a5:bf:29:00:96:8b:68:35:
                    4d:77:fc:5e:91:c3:04:db:60:50:00:c5:8f:49:d0:
                    ec:9a:9e:7a:9b:71:4c:58:b3:68:44:f1:0b:9c:42:
                    df:b4:4e:7a:95:a1:4b:00:60:13:53:08:ad:f9:47:
                    9c:93:9c:e7:ed:28:db:d8:54:88:9a:2e:71:5f:e7:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EA:17:CE:99:CC:8C:86:2D:F7:4D:25:BF:57:DD:3D:20:EA:1F:85
            X509v3 Authority Key Identifier:
                keyid:F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/8a8e0e1269c2aa92a901be17a2dd7eaa722f21f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90::/45
                  2803:1d90:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:96:5a:50:fa:a0:6b:ab:be:c5:a3:ae:2a:b0:77:07:b1:
         cc:a8:a6:39:44:88:00:31:a3:e3:47:7c:c1:15:da:51:ba:26:
         c7:de:43:2c:8d:d6:84:42:11:72:ac:9f:77:c4:a0:3b:f2:37:
         80:2e:dc:86:39:04:49:94:32:00:0f:50:a6:97:38:ec:b1:fd:
         8a:7a:ae:a6:a1:33:93:c3:a5:b6:fa:81:fa:04:f0:6a:bb:5c:
         90:b0:c0:b8:32:53:9e:9e:73:52:0f:ac:f9:b1:d0:e5:95:55:
         e0:c2:64:5b:77:3c:7b:97:db:4c:b0:2b:22:0d:62:d6:15:3b:
         e9:ec:bd:43:97:ce:99:8c:e0:c4:a5:a4:be:a2:08:82:e4:a4:
         fc:5e:c3:86:6d:8c:ba:1b:0b:e5:3a:98:80:24:d7:93:59:b1:
         58:e8:10:7b:6e:61:74:0e:a9:9c:ec:60:18:f8:d3:91:03:f8:
         b3:b3:b5:d2:ac:54:da:be:6a:12:0e:4b:2c:f2:b8:f8:12:26:
         7c:d3:61:a3:9e:0a:97:04:c8:ee:70:d6:f1:b4:a2:c8:22:30:
         6a:68:a6:39:3a:d0:2d:f1:dc:96:39:6e:01:84:31:27:4b:9a:
         53:cb:d5:49:98:b6:75:4b:19:07:ac:05:f0:29:32:14:c8:53:
         de:4b:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----