Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/dc7647dd7972bc9fdcee99eeba7dbc7b4ec3eb0d.roa
File:                     dc7647dd7972bc9fdcee99eeba7dbc7b4ec3eb0d.roa (raw, json)
Hash identifier:          Tq/dk/kX8E1APsfavFVC7sThHlvtWCFDd+UY/1tAbik=
Subject key identifier:   01:E7:30:C7:68:89:35:B1:9F:AD:AB:86:15:8D:57:E8:0B:23:B5:48
Certificate issuer:       /CN=bd4b0b8420da1fd896d6937879c1e602c4aa4f35
Certificate serial:       0386F5
Authority key identifier: 09:FA:5E:B5:A5:1A:B4:08:B1:A3:B7:F8:17:DF:16:D5:ED:1D:FA:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/dc7647dd7972bc9fdcee99eeba7dbc7b4ec3eb0d.roa
Signing time:             Thu 07 Dec 2023 15:28:50 +0000
ROA not before:           Thu 07 Dec 2023 15:28:50 +0000
ROA not after:            Sun 07 Dec 2025 15:28:50 +0000
asID:                     273021
IP address blocks:        2803:9390::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231157 (0x386f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4b0b8420da1fd896d6937879c1e602c4aa4f35
        Validity
            Not Before: Dec  7 15:28:50 2023 GMT
            Not After : Dec  7 15:28:50 2025 GMT
        Subject: CN=dc7647dd7972bc9fdcee99eeba7dbc7b4ec3eb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:60:87:9d:2c:7f:b9:6f:1e:cd:87:49:cf:
                    26:e5:f3:eb:3d:4a:b5:54:85:d9:e3:9a:13:a1:b5:
                    15:80:60:a9:61:ad:bc:91:4a:c5:b9:e0:7f:f8:65:
                    30:f1:f9:5b:6c:8c:3e:4d:36:bc:02:94:eb:ea:c9:
                    5d:93:52:a3:7d:35:14:90:52:17:13:ef:44:8f:3a:
                    cc:1c:77:70:a9:ce:b3:36:9d:8c:80:87:83:cd:fe:
                    82:01:60:f1:a8:98:e1:2f:fc:20:66:05:b5:78:b1:
                    0b:cc:95:0e:b3:e7:96:93:8f:d4:d4:18:40:00:95:
                    4e:38:c6:8b:2e:a9:08:0a:7b:0a:e7:12:c4:82:31:
                    04:6e:8e:44:2e:3c:b1:02:dc:2c:37:ce:22:55:80:
                    e3:a7:89:ee:7f:11:16:56:2e:de:47:d7:b5:1f:df:
                    aa:57:17:1c:d4:0a:4d:98:ec:65:37:ae:23:6b:43:
                    5c:54:8a:c2:da:78:11:5c:34:75:1f:34:cf:57:af:
                    e5:30:64:72:5e:83:18:0a:92:de:c9:1f:09:73:0c:
                    82:e9:3a:59:e6:02:d8:7f:b1:2f:41:32:29:08:2d:
                    fc:27:af:80:93:8d:22:31:84:a1:9c:a3:d0:4a:c6:
                    37:c5:05:cb:eb:67:89:2e:46:5d:7f:f7:f9:b2:f4:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E7:30:C7:68:89:35:B1:9F:AD:AB:86:15:8D:57:E8:0B:23:B5:48
            X509v3 Authority Key Identifier:
                keyid:09:FA:5E:B5:A5:1A:B4:08:B1:A3:B7:F8:17:DF:16:D5:ED:1D:FA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/dc7647dd7972bc9fdcee99eeba7dbc7b4ec3eb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6d2a3a81-399a-42e6-989a-0a6996c7b08a/bd4b0b8420da1fd896d6937879c1e602c4aa4f35.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9390::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:45:6c:e7:ae:39:6c:e5:9e:7f:4e:2a:30:af:d3:28:49:
         05:41:90:4c:10:aa:f0:c0:68:82:35:f4:a7:db:15:e8:0e:02:
         35:96:6b:ff:09:28:06:5c:bf:11:52:17:c5:96:47:88:1d:79:
         ee:69:62:b5:98:b4:73:53:75:1b:3a:af:04:64:00:1b:2b:fe:
         2e:d7:54:27:eb:af:0e:5e:91:d8:3c:22:42:13:3a:1e:7d:e1:
         ee:ce:56:20:2f:b3:3f:00:58:e7:d0:35:4d:da:82:8e:8c:89:
         56:cd:a1:93:7e:20:b7:b5:93:90:5c:14:f5:fa:aa:6e:0e:c6:
         fb:a6:9b:53:15:e3:1f:06:03:2c:99:d9:07:97:ca:03:be:ae:
         f8:d1:07:8d:07:38:85:c0:c8:57:84:99:30:83:33:84:cf:34:
         e3:86:0c:25:cc:7d:42:52:fd:8c:d6:e0:bf:f6:c3:d7:d5:2f:
         f9:14:80:0e:63:78:04:7a:c5:ea:87:b1:6c:8f:87:42:2e:ef:
         a5:b0:bf:ca:79:c1:81:23:e4:a1:b0:c7:d9:70:8f:d8:e4:71:
         3c:54:16:ca:c4:a5:62:03:0e:7b:f3:4e:07:5c:36:cc:9b:e3:
         f2:0d:2f:7c:08:e6:52:6f:2f:b4:de:5c:7f:da:b6:80:69:76:
         24:e1:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----