Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/e55111f0d6b95fbe0498a4229b8acf1bce644448.roa
File:                     e55111f0d6b95fbe0498a4229b8acf1bce644448.roa (raw, json)
Hash identifier:          ecwKPq64rybjH0nIeU8okpSXNOnHMvKKDYwvj6WeS/s=
Subject key identifier:   D7:F2:34:CC:59:0A:BA:B9:82:2D:30:A5:19:6B:22:24:D9:E2:B8:D0
Certificate issuer:       /CN=0c52d96df726ea79c974679f2004b57e6211c902
Certificate serial:       019E34
Authority key identifier: B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c52d96df726ea79c974679f2004b57e6211c902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/e55111f0d6b95fbe0498a4229b8acf1bce644448.roa
Signing time:             Tue 20 Feb 2024 16:06:24 +0000
ROA not before:           Tue 20 Feb 2024 16:06:23 +0000
ROA not after:            Fri 20 Feb 2026 16:06:23 +0000
asID:                     273142
IP address blocks:        2803:2c50:a000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106036 (0x19e34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52d96df726ea79c974679f2004b57e6211c902
        Validity
            Not Before: Feb 20 16:06:23 2024 GMT
            Not After : Feb 20 16:06:23 2026 GMT
        Subject: CN=e55111f0d6b95fbe0498a4229b8acf1bce644448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:0c:dd:eb:dc:83:05:bb:56:b6:90:2a:76:
                    e1:71:2a:9b:65:a9:b1:c5:4f:cc:98:09:af:b1:a1:
                    4f:9e:70:72:8f:ab:bf:82:74:d5:a3:70:4d:56:13:
                    97:18:54:67:b5:1d:f3:79:ea:dc:b8:e8:2c:9d:37:
                    b0:71:3b:ec:6c:e2:96:3d:95:76:3b:5e:29:65:45:
                    17:01:aa:3b:5e:ce:02:f2:52:2f:76:bc:0f:6e:8d:
                    3b:2c:f9:09:a9:07:5b:57:e7:51:a5:d8:df:2a:84:
                    80:08:4e:05:af:fe:18:22:d1:46:39:c5:25:0f:93:
                    bb:f9:fb:ef:3c:f1:8c:91:eb:3e:fd:4d:d2:c8:6e:
                    fa:54:11:a4:63:10:44:23:d2:35:be:c8:2b:4d:7c:
                    56:09:ee:21:91:3c:e9:57:3f:b6:8f:30:17:13:5b:
                    b0:86:2d:93:04:6b:97:94:21:d4:80:3f:0f:50:40:
                    c6:97:6d:b9:22:65:47:1a:4b:11:3c:1f:35:5a:a6:
                    4c:eb:99:30:e8:ca:33:24:81:62:c6:83:66:ba:8e:
                    c9:ae:93:40:c2:fc:23:45:9d:d9:15:40:90:77:70:
                    e7:e5:a7:b5:9c:ef:b6:06:68:a7:ab:88:3e:df:9f:
                    6c:51:59:f2:dd:e3:c0:64:0c:a0:7c:b9:0f:d2:cc:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F2:34:CC:59:0A:BA:B9:82:2D:30:A5:19:6B:22:24:D9:E2:B8:D0
            X509v3 Authority Key Identifier:
                keyid:B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c52d96df726ea79c974679f2004b57e6211c902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/e55111f0d6b95fbe0498a4229b8acf1bce644448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/0c52d96df726ea79c974679f2004b57e6211c902.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:18:44:da:32:e0:fb:a6:ca:ff:40:13:c8:c2:ef:e4:2b:
         7f:11:ae:e7:97:d1:4d:86:64:50:87:71:d7:c7:23:89:3d:e2:
         58:7d:1c:84:55:03:79:32:9a:47:40:9d:2d:c6:dc:02:2a:ee:
         10:b5:89:76:e2:84:6b:33:f2:c4:a9:1b:bc:a1:b9:ed:de:c7:
         9f:53:a1:bc:5b:21:ed:bc:34:73:13:f1:84:c5:64:97:a2:05:
         b2:bb:be:00:49:db:71:cb:1c:47:33:63:ac:e3:1f:fa:bc:4d:
         24:64:1a:6e:b4:06:b4:7d:81:ee:c5:cf:e1:25:c1:17:98:9e:
         0d:68:79:aa:bd:6c:c7:52:7c:43:6a:b2:0a:f2:be:e4:d8:33:
         4c:dd:44:f3:53:bf:54:bd:2f:12:c6:a6:73:35:73:a0:14:d9:
         55:5d:97:1d:9c:57:e0:41:10:b3:0c:67:02:a7:2e:f2:00:f3:
         b6:15:de:28:f3:41:8c:82:83:b8:53:fe:4d:03:6b:b1:e7:dd:
         ba:9f:40:2c:41:cb:0c:fc:70:56:d5:99:f5:b8:da:29:61:b9:
         bc:2e:21:02:cb:16:a5:3e:38:9e:2b:78:74:44:5b:95:4e:90:
         b1:cb:2c:d6:a2:f4:a1:52:e2:47:76:05:ab:cd:7e:78:f8:94:
         2c:28:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----