Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/152ce83a87af258bbabf519483b03acb90ba0b83.roa
File:                     152ce83a87af258bbabf519483b03acb90ba0b83.roa (raw, json)
Hash identifier:          /AMrR7ShB7zqF9ebv7pm35o4pNl+ZRdjzgWVs9igA0Y=
Subject key identifier:   A0:6A:7D:32:AA:78:BA:80:4F:DE:F5:C7:D7:9E:EE:08:76:08:8A:D2
Certificate issuer:       /CN=ad988e339348da7ed75d92d210f8584b6870fcc7
Certificate serial:       09E015
Authority key identifier: A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/152ce83a87af258bbabf519483b03acb90ba0b83.roa
Signing time:             Mon 14 Aug 2023 17:35:46 +0000
ROA not before:           Sun 13 Aug 2023 17:35:46 +0000
ROA not after:            Thu 14 Aug 2025 17:35:46 +0000
asID:                     271967
IP address blocks:        2803:ce10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647189 (0x9e015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad988e339348da7ed75d92d210f8584b6870fcc7
        Validity
            Not Before: Aug 13 17:35:46 2023 GMT
            Not After : Aug 14 17:35:46 2025 GMT
        Subject: CN=152ce83a87af258bbabf519483b03acb90ba0b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:a8:13:ac:2c:f1:c7:ec:6f:77:13:04:78:
                    35:2a:b8:38:4f:b8:ee:c9:76:e9:c5:d1:ad:b7:92:
                    73:03:1c:7b:24:7e:bc:88:0b:cb:26:8b:10:67:d4:
                    36:e1:63:35:fd:aa:00:bd:9c:75:24:2f:0d:b5:94:
                    ed:da:d2:8e:9f:98:c1:29:06:b4:29:ea:bd:39:6d:
                    64:a3:ba:fa:72:3e:8f:75:33:75:7b:b0:74:4a:16:
                    4c:97:61:2e:f3:5f:2a:7f:7f:8e:32:20:fa:61:cd:
                    25:58:1d:bc:49:f1:12:6f:f2:e9:a6:ac:de:e2:56:
                    f0:09:2e:59:50:7a:e7:b9:a0:b8:94:64:18:33:23:
                    6f:53:1c:3b:05:98:81:00:10:4b:d9:1f:26:bc:25:
                    6f:39:f4:d7:89:d2:2c:26:51:67:fc:16:f5:23:6f:
                    a5:9b:0d:47:a2:14:1e:bb:69:3e:b7:64:e5:51:23:
                    2c:9c:fd:a9:d9:94:be:d6:9c:8f:cb:6b:37:e0:a3:
                    72:73:86:33:9b:54:49:84:3c:ae:cc:c2:77:48:82:
                    aa:50:bf:76:d4:7b:24:5f:84:c5:ea:bf:62:1d:82:
                    68:88:61:cb:0c:44:67:bc:34:73:8d:76:9d:02:d3:
                    c5:b7:9f:94:c0:59:f4:0f:49:48:0f:6c:8c:61:92:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6A:7D:32:AA:78:BA:80:4F:DE:F5:C7:D7:9E:EE:08:76:08:8A:D2
            X509v3 Authority Key Identifier:
                keyid:A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/152ce83a87af258bbabf519483b03acb90ba0b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ad988e339348da7ed75d92d210f8584b6870fcc7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce10::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:b8:c2:42:38:d1:73:8a:02:86:26:0b:83:e4:6e:f4:cc:
         24:57:4c:98:b7:b4:b1:83:77:ca:36:f4:33:ff:e3:1e:a0:8c:
         2c:2a:c7:d9:b9:49:c2:04:52:7c:8b:8b:46:8b:7b:2d:03:fc:
         ae:64:b2:d9:99:6f:85:70:67:05:90:1a:2a:c8:0a:92:1e:8b:
         ab:04:d4:bd:64:70:94:0a:22:7d:01:a2:4b:67:7d:94:eb:8d:
         8b:10:bf:26:87:c8:33:5b:11:b5:a8:e6:fc:3b:2d:84:ca:29:
         28:f5:97:3b:2d:a4:c6:a6:5a:57:95:35:17:1b:d8:f4:24:93:
         6b:75:5e:8f:48:35:ac:96:8a:d7:6d:53:26:21:13:68:2d:44:
         9a:ed:56:58:f7:d8:92:6e:e5:96:c1:91:a2:5b:68:d1:41:1f:
         1c:9f:c3:c9:ea:6e:ae:59:d4:a9:06:93:53:56:0b:c7:43:d9:
         fc:be:23:3b:1c:ac:f4:1c:a0:0e:cd:11:85:b5:2a:fe:73:9e:
         15:d1:4b:23:68:41:fb:9b:94:f8:22:fc:b6:55:96:99:a7:e1:
         d5:bb:ec:df:60:36:e6:8f:15:6a:a8:8a:e4:19:33:26:95:0b:
         85:93:da:d2:f3:1a:56:90:d0:97:6b:76:78:74:38:16:10:bd:
         65:02:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----