Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2643b7854aa9276af8aa180acb134d6a599e5f4e.roa
File:                     2643b7854aa9276af8aa180acb134d6a599e5f4e.roa (raw, json)
Hash identifier:          yGUB2PnbyBxE1qru/v3pPB/uozfbWPmInac+qxPDthY=
Subject key identifier:   C8:F2:1D:2F:70:F1:F5:AA:28:20:0E:3F:D9:9C:5C:41:A2:3D:A3:8E
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       13C437
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2643b7854aa9276af8aa180acb134d6a599e5f4e.roa
Signing time:             Tue 24 Oct 2023 07:30:02 +0000
ROA not before:           Tue 24 Oct 2023 07:30:02 +0000
ROA not after:            Thu 23 Oct 2025 07:30:02 +0000
asID:                     271956
IP address blocks:        2803:7610:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295415 (0x13c437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Oct 24 07:30:02 2023 GMT
            Not After : Oct 23 07:30:02 2025 GMT
        Subject: CN=2643b7854aa9276af8aa180acb134d6a599e5f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:57:f5:5e:1e:ad:70:c4:75:e9:f4:50:0f:
                    dd:9d:5c:39:35:35:5c:75:5a:46:3d:fa:02:bf:2f:
                    16:b5:2b:b6:85:7a:0d:1e:36:7b:43:d5:b0:1a:49:
                    16:9b:fd:3a:9a:fd:17:de:72:fe:8e:49:02:cd:bc:
                    43:d7:e9:b4:55:b3:08:d5:ba:e5:d1:f7:40:a8:28:
                    43:a5:7c:d0:1c:9b:74:48:7a:94:94:fa:14:ac:63:
                    f7:18:f5:8e:46:90:cc:5a:24:c0:ab:cc:6e:bd:02:
                    1a:e6:9f:6a:22:31:33:64:99:2e:5e:19:17:b2:93:
                    4e:43:c6:79:19:4c:de:5d:87:c1:f5:17:ae:02:0b:
                    9b:14:4f:1f:2a:39:b6:34:6b:33:57:b1:13:ab:bb:
                    52:ff:fd:e7:22:bf:47:57:dc:ba:c7:08:59:5a:9b:
                    73:fa:69:af:0c:cc:dd:f4:36:66:5e:b8:2b:42:be:
                    84:1e:ea:f0:4c:57:a4:f3:a6:00:1b:52:26:e6:55:
                    67:37:41:80:15:43:45:85:c9:dd:f6:13:64:27:2e:
                    f5:ec:9a:37:ba:cf:9b:49:d2:1a:5e:8b:59:21:7f:
                    ac:4e:99:25:4e:4c:5e:30:0f:2d:69:bc:42:93:ff:
                    1e:22:89:db:c4:ff:4f:fe:2b:e5:bb:0a:67:b7:46:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:1D:2F:70:F1:F5:AA:28:20:0E:3F:D9:9C:5C:41:A2:3D:A3:8E
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/2643b7854aa9276af8aa180acb134d6a599e5f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:68:2b:ad:5d:dd:1e:a5:20:82:67:35:ef:61:3d:4f:ad:
         f3:0b:17:a5:ab:b5:e0:d0:7c:c1:e2:a8:25:cf:aa:dc:98:e2:
         65:2d:0f:15:a0:98:9f:f9:64:b4:18:c3:6d:94:cc:8f:aa:1b:
         7e:07:a4:52:e7:06:0f:45:eb:54:54:0a:d5:1a:2a:39:e6:5d:
         d3:44:91:43:94:57:f1:78:40:7f:da:83:b4:fc:d6:77:d5:44:
         10:42:11:c9:33:e3:aa:04:43:b8:68:84:bf:e5:0a:0a:0d:0f:
         a6:29:cd:a1:1f:da:a3:ca:9a:f1:91:e5:2c:3b:8a:f5:f0:ee:
         4a:ba:bb:f7:58:f8:5c:4a:c5:56:f1:a9:5c:b9:e6:1f:88:5d:
         a5:36:9c:39:62:73:9b:0a:f5:f7:85:66:bd:8a:86:0b:b7:17:
         12:1c:f5:73:9f:bf:d1:a1:7a:f1:da:73:ca:7e:ed:dc:6f:71:
         a2:a5:89:31:83:4d:61:46:d0:d6:dd:37:23:22:90:bd:4d:3e:
         3f:c9:68:d9:14:34:3b:90:6b:dd:34:bd:86:47:06:8f:b3:03:
         9f:a5:13:e6:1f:44:7f:20:87:09:8e:02:c9:24:67:5d:cb:62:
         13:64:a9:f6:45:37:ed:74:1d:24:57:71:f2:63:cf:20:de:e0:
         84:8e:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----