Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/490b96547884d7262498bdcfd6b1343be65e1396.roa
File:                     490b96547884d7262498bdcfd6b1343be65e1396.roa (raw, json)
Hash identifier:          OrcDiEwmdxR0ZuSfhordvTydYujg9b5Pn0Gvr0i+Tg4=
Subject key identifier:   9D:2D:FF:87:93:3F:52:AC:20:22:20:73:CA:8B:8F:01:B0:E6:DD:F7
Certificate issuer:       /CN=ce130f5228c456e6166d44a338f7c8ee74b3f7bc
Certificate serial:       016A0B
Authority key identifier: 4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/490b96547884d7262498bdcfd6b1343be65e1396.roa
Signing time:             Wed 07 Jun 2023 12:44:14 +0000
ROA not before:           Tue 06 Jun 2023 12:44:14 +0000
ROA not after:            Sat 07 Jun 2025 12:44:14 +0000
asID:                     263230
IP address blocks:        2803:c500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92683 (0x16a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce130f5228c456e6166d44a338f7c8ee74b3f7bc
        Validity
            Not Before: Jun  6 12:44:14 2023 GMT
            Not After : Jun  7 12:44:14 2025 GMT
        Subject: CN=490b96547884d7262498bdcfd6b1343be65e1396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:41:86:1d:42:e8:6f:43:c3:35:99:c7:97:
                    7c:c7:b5:16:81:44:1d:ae:ea:3e:60:ba:97:50:13:
                    0a:a1:e2:b9:36:8d:43:d9:59:40:72:9d:97:76:f9:
                    de:17:9a:fe:f7:92:27:11:a4:e1:4f:c6:4e:9a:82:
                    e5:f6:c6:8d:ea:85:53:db:82:05:e3:13:2e:9f:89:
                    b1:38:a0:8f:86:dd:33:10:ca:28:15:55:91:4b:80:
                    99:0a:a0:8d:41:70:63:c4:f6:96:ef:11:b6:d5:f6:
                    3d:cc:c1:9c:4b:53:df:23:7a:02:4c:d6:da:17:8e:
                    3c:5f:09:49:81:03:68:30:03:6d:17:96:9a:54:11:
                    a9:d1:8c:5c:e9:fe:75:36:f1:33:37:aa:0f:d6:bd:
                    29:af:77:13:90:3d:87:75:5a:05:7b:8a:42:7d:ae:
                    28:81:e3:5b:77:ce:c4:fa:94:83:05:2a:ec:84:22:
                    1f:8c:a8:f1:a2:b5:6e:86:df:36:6b:5e:4f:70:8f:
                    58:eb:e7:c5:6e:6c:ea:4b:53:c3:27:07:06:2d:a1:
                    74:b4:23:7f:bf:c4:22:96:14:b6:d2:f6:dc:6e:d7:
                    fd:ba:8a:a4:8f:5b:e0:08:d3:2a:53:64:db:01:9a:
                    7e:04:20:7a:31:a3:8a:33:db:d2:14:e2:9b:1f:2f:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2D:FF:87:93:3F:52:AC:20:22:20:73:CA:8B:8F:01:B0:E6:DD:F7
            X509v3 Authority Key Identifier:
                keyid:4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/490b96547884d7262498bdcfd6b1343be65e1396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c500::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:29:17:91:f2:5e:78:06:33:ed:ff:7d:b4:06:28:ea:3a:9a:
         f9:99:6d:a1:5c:dd:c8:19:62:5f:fe:40:08:97:1b:df:35:7b:
         88:29:fa:96:eb:e0:91:15:06:04:ee:61:36:5a:95:e4:0b:2c:
         ef:09:06:63:d0:60:10:d0:84:f0:ba:a5:40:11:ba:ca:bd:8c:
         93:d7:be:2a:71:f7:42:f7:d8:fd:62:3a:c9:9b:ed:c4:1b:cb:
         69:9a:b3:67:1e:d9:cb:18:12:1d:94:66:58:8a:d6:c5:e2:50:
         fb:4d:50:2c:7f:37:86:f2:77:fd:f1:7a:5c:75:32:36:a9:58:
         e5:a4:d1:c9:1e:57:33:54:31:fe:04:dc:dc:15:77:8a:31:4b:
         2f:07:0b:8a:d6:f4:ee:bc:71:70:d9:ac:c2:dc:82:71:80:1e:
         5f:a2:ab:c0:b5:ff:87:b6:7e:01:27:35:da:a6:7d:e5:89:0f:
         a6:c4:73:4a:48:f9:07:b3:41:1a:29:bd:19:4b:78:fb:a4:86:
         c4:f3:19:46:10:6d:83:c2:83:cd:b9:0e:2a:12:9a:a2:f2:87:
         3c:b4:89:72:88:94:e1:44:dc:e5:dd:54:18:4d:79:4d:81:4e:
         5e:f3:f0:7d:ed:c0:08:a4:41:2c:51:ad:03:3b:51:c1:4d:d7:
         6b:6f:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----