Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/68e295ce647582ba8e659054a272bd5ab992c046.roa
File:                     68e295ce647582ba8e659054a272bd5ab992c046.roa (raw, json)
Hash identifier:          qbd6tC3gu84nqcEd/n/3BOsqU8FysMXmdYtfEesqUmk=
Subject key identifier:   7A:3D:D7:A5:24:B7:65:C5:8A:DD:D4:63:82:E5:D1:11:29:F4:19:34
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       283697
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/68e295ce647582ba8e659054a272bd5ab992c046.roa
Signing time:             Tue 09 Apr 2024 04:32:58 +0000
ROA not before:           Tue 09 Apr 2024 04:32:58 +0000
ROA not after:            Thu 09 Apr 2026 04:32:58 +0000
asID:                     12252
IP address blocks:        2803:f080:2200::/39 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635415 (0x283697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  9 04:32:58 2024 GMT
            Not After : Apr  9 04:32:58 2026 GMT
        Subject: CN=68e295ce647582ba8e659054a272bd5ab992c046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:5c:87:68:41:18:41:cb:4e:33:ee:5e:f6:
                    08:98:df:2d:4e:95:00:80:01:e9:b3:73:75:d4:e6:
                    80:5c:ea:27:d0:d9:83:fc:21:4d:51:0f:19:bc:0b:
                    cf:23:14:12:6d:f6:f6:02:3d:c4:78:31:a3:d4:99:
                    5f:ca:64:8b:2c:67:03:95:72:e7:62:f1:07:eb:b4:
                    64:e1:2c:4a:de:16:20:34:9a:a4:19:7a:4e:92:01:
                    64:b5:b0:8b:5a:1b:4a:29:38:16:37:38:5a:2b:f8:
                    2b:2f:bf:f4:9f:8c:70:51:85:8d:eb:fe:b2:78:76:
                    72:78:b8:05:d0:e7:92:d3:f2:c4:23:fb:63:b1:c1:
                    05:11:df:1b:91:0a:81:80:f7:35:bc:07:be:da:1a:
                    ca:c5:83:ab:25:12:95:64:66:47:1e:df:5c:e5:0d:
                    8d:81:6a:95:e1:ac:3e:c5:35:41:30:a2:bf:fd:33:
                    3a:06:53:f6:35:8b:52:46:a9:cb:e8:5d:56:b1:7b:
                    4d:6f:54:b3:ff:55:58:77:d7:f3:bd:55:ba:cd:5e:
                    96:de:cc:10:2c:44:c8:41:f8:96:b5:de:5e:80:48:
                    82:a2:42:65:e1:aa:e4:a2:72:3c:10:a7:a1:17:03:
                    49:14:68:94:2c:e8:0e:31:77:80:dd:70:da:be:35:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3D:D7:A5:24:B7:65:C5:8A:DD:D4:63:82:E5:D1:11:29:F4:19:34
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/68e295ce647582ba8e659054a272bd5ab992c046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2200::/39

    Signature Algorithm: sha256WithRSAEncryption
         72:00:b3:dd:68:94:7d:69:7f:48:dc:8d:30:db:bf:7f:73:16:
         5f:63:2c:1e:c5:60:f0:3e:54:ba:98:22:0d:23:03:ac:9d:5f:
         69:27:52:a4:cb:e3:97:63:a5:d7:e8:00:bc:94:4a:41:8a:09:
         3e:77:dd:16:61:44:df:bc:54:bb:bd:f7:e2:61:3a:19:38:25:
         da:39:35:b4:ac:4b:bc:d6:c5:b5:0a:36:8d:7f:6f:6c:27:32:
         46:01:3f:c2:81:7f:f4:6d:13:6e:99:09:83:ea:66:c2:38:61:
         34:27:e0:7a:39:87:2c:5d:3b:9b:59:d4:0e:8f:c3:e3:96:3f:
         5c:5a:18:27:85:89:e5:e0:4e:b0:2d:cc:85:c6:ea:72:1c:77:
         16:f5:da:72:71:6f:45:af:f1:81:de:3d:49:70:0b:91:1f:bc:
         04:f4:45:bb:f7:9d:7b:94:c4:20:5b:f8:ae:74:37:65:fc:2f:
         04:3b:ae:83:71:f7:9e:0e:8a:05:da:64:99:58:37:b8:65:8f:
         7d:38:62:f5:62:57:2d:8c:fe:c3:41:09:fb:63:0e:28:20:cd:
         b2:93:08:c1:f8:8c:cd:c4:d8:3f:d3:0e:6c:8d:2d:c2:75:f8:
         09:70:3a:a0:6f:32:09:a6:ef:a6:fa:50:e4:ed:e1:84:1b:c6:
         2e:db:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----