Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/8d9e9d0eb99405a23bf5493556d0797cba31dbaf.roa
File:                     8d9e9d0eb99405a23bf5493556d0797cba31dbaf.roa (raw, json)
Hash identifier:          PhFMf0AHuHLuPMoaOdHNx8AmZcQxSBIiE19+wj4yuJw=
Subject key identifier:   1A:79:65:83:44:83:BC:F3:BC:C0:31:6E:76:D3:6C:BE:E6:3B:A6:A7
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       286029
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/8d9e9d0eb99405a23bf5493556d0797cba31dbaf.roa
Signing time:             Thu 11 Apr 2024 00:16:06 +0000
ROA not before:           Thu 11 Apr 2024 00:16:06 +0000
ROA not after:            Sat 11 Apr 2026 00:16:06 +0000
asID:                     52468
IP address blocks:        2803:f080:2c00::/39 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646057 (0x286029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr 11 00:16:06 2024 GMT
            Not After : Apr 11 00:16:06 2026 GMT
        Subject: CN=8d9e9d0eb99405a23bf5493556d0797cba31dbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:bd:06:49:a5:ac:98:8c:1d:0d:b3:dc:73:
                    48:8d:2e:48:5a:78:69:ff:81:9a:42:40:a3:9a:37:
                    b4:52:55:35:a3:6a:f5:27:e6:41:42:33:30:c8:aa:
                    73:3d:8e:5e:0d:53:9a:0d:0c:3e:03:aa:a4:c7:fa:
                    e9:76:44:0e:24:e5:29:db:2a:9e:08:ff:40:53:cc:
                    77:40:f7:b2:c5:e3:f7:49:11:e3:f9:43:01:dc:f5:
                    a5:ee:65:e9:ea:74:d6:9a:a1:1d:b1:d5:98:a5:2f:
                    55:8d:42:c3:bd:62:66:45:b0:f8:a6:10:03:87:85:
                    6e:8e:a4:af:af:1b:2e:34:c6:74:3e:5d:b0:dc:41:
                    38:95:93:07:01:a0:b6:b6:77:ce:a0:40:60:2d:5f:
                    46:ea:9e:74:35:1f:40:6f:80:94:51:4e:93:23:59:
                    7c:8b:24:c8:eb:27:a5:01:d4:8d:fb:7e:72:6b:ad:
                    08:c5:fd:de:98:b5:22:d0:3c:5f:cc:98:82:39:90:
                    ba:f5:e8:ad:c1:e2:c1:bc:86:e7:2d:ea:28:ea:50:
                    a5:2d:df:cd:da:41:a7:31:a3:a3:00:e1:09:f4:25:
                    6a:c9:15:ea:ab:6a:06:05:9a:08:06:6e:23:8d:c8:
                    a7:8f:61:e7:43:6d:bb:c0:ff:60:c0:3e:67:68:dc:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:79:65:83:44:83:BC:F3:BC:C0:31:6E:76:D3:6C:BE:E6:3B:A6:A7
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/8d9e9d0eb99405a23bf5493556d0797cba31dbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:4e:f5:d3:62:ca:1e:79:e3:ce:fa:ec:0b:c2:03:be:5f:
         82:af:de:42:05:ed:0e:c1:02:c3:c8:f6:b9:1c:2d:7b:ec:0b:
         25:b8:c3:3b:00:5e:73:db:20:b5:56:e1:c1:20:86:05:8a:37:
         7e:45:16:86:c8:1a:03:d0:7a:fa:e9:c0:a3:62:71:42:81:1d:
         6c:c2:59:1b:6e:77:d5:19:18:ad:7e:4e:e1:77:7a:b9:b8:3e:
         9c:56:4b:72:2d:8e:bf:c4:f5:80:1a:e4:77:a7:be:4b:70:8c:
         7f:20:85:a9:ab:bd:eb:cf:4c:8c:c5:fc:ef:30:72:d9:aa:d1:
         09:6d:1c:46:33:23:db:c3:6f:26:b6:bf:c6:d2:c1:9f:b0:99:
         10:5d:3c:8e:46:0e:79:65:d7:bc:62:08:d2:dc:c9:76:e2:08:
         ed:a2:6e:64:04:51:41:af:69:73:15:84:75:05:90:e0:98:b6:
         ff:44:27:48:c3:c7:9d:3f:c4:d2:49:92:74:d8:72:39:b1:5e:
         83:dc:5c:8d:99:5f:e6:d8:5d:2f:61:0b:a4:24:8a:1e:64:8f:
         7c:92:3b:72:ec:0f:0d:a8:32:52:97:da:67:f5:55:00:60:ef:
         2d:4f:0c:fe:ef:61:ae:8d:df:29:08:7a:ef:bd:84:5d:c2:7a:
         a7:cd:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----