Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/739461e7-7ba3-48da-bf18-0c63ddf67331/838681770a67cfdd8a72f2d61cc71608ca6d6995.roa
File:                     838681770a67cfdd8a72f2d61cc71608ca6d6995.roa (raw, json)
Hash identifier:          oLMQy1jpxpl6BrTWdVXBUznvUf6Lt2Zy65zmVxsBNFY=
Subject key identifier:   00:26:98:28:F5:87:82:D8:B6:1C:AC:F9:F1:27:7A:8E:BE:4F:1C:12
Certificate issuer:       /CN=b97fb68b027d461193f43b8d0ca1bee0bbb2f4f5
Certificate serial:       0CB4C0
Authority key identifier: C0:FA:2E:15:3C:01:7E:3F:B5:02:39:94:9A:8B:33:12:23:32:20:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b97fb68b027d461193f43b8d0ca1bee0bbb2f4f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/739461e7-7ba3-48da-bf18-0c63ddf67331/838681770a67cfdd8a72f2d61cc71608ca6d6995.roa
Signing time:             Fri 16 Feb 2024 17:47:32 +0000
ROA not before:           Fri 16 Feb 2024 17:47:32 +0000
ROA not after:            Mon 16 Feb 2026 17:47:32 +0000
asID:                     272809
IP address blocks:        2803:3890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832704 (0xcb4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97fb68b027d461193f43b8d0ca1bee0bbb2f4f5
        Validity
            Not Before: Feb 16 17:47:32 2024 GMT
            Not After : Feb 16 17:47:32 2026 GMT
        Subject: CN=838681770a67cfdd8a72f2d61cc71608ca6d6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:b6:28:b9:00:32:68:5d:ef:18:db:77:c0:
                    24:26:e7:41:f0:89:26:00:ad:29:ee:3e:18:88:45:
                    d5:d4:38:72:fd:5e:0d:f6:aa:5e:f6:ac:33:50:15:
                    db:89:a3:9b:e3:62:8b:4d:62:9c:ce:f7:bb:02:45:
                    0e:07:bf:fc:57:b3:7e:95:ef:37:7f:21:3d:27:ab:
                    75:23:16:c9:09:0e:bf:29:ae:86:6e:27:da:5b:26:
                    23:d4:ad:65:ec:ab:b9:cc:01:d7:b3:90:e8:9c:55:
                    ae:42:92:30:ee:b1:c5:a6:e5:b4:cc:99:73:c1:cc:
                    b6:70:48:66:8f:d8:98:19:d0:51:c4:d5:ef:8e:d7:
                    b4:cf:89:c3:5a:d1:aa:08:e4:46:f7:23:71:9f:54:
                    55:7d:6d:a8:90:1c:6b:70:b0:fa:99:e8:18:06:1d:
                    58:9e:f6:36:29:9b:41:cf:63:80:a0:81:40:66:d4:
                    15:c1:30:2c:35:10:71:a4:1b:77:1e:62:28:3a:65:
                    d1:a5:00:7d:b6:c4:5c:6a:1c:b7:4d:cf:fa:6e:b7:
                    f3:89:f4:6f:79:3e:d9:10:9f:62:88:d9:2a:c7:70:
                    e7:a3:6e:f2:62:57:0e:80:e1:ba:9f:6c:b6:8e:99:
                    69:34:7f:5d:7e:6d:a8:3f:f8:2e:48:84:0c:c2:34:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:98:28:F5:87:82:D8:B6:1C:AC:F9:F1:27:7A:8E:BE:4F:1C:12
            X509v3 Authority Key Identifier:
                keyid:C0:FA:2E:15:3C:01:7E:3F:B5:02:39:94:9A:8B:33:12:23:32:20:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b97fb68b027d461193f43b8d0ca1bee0bbb2f4f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/739461e7-7ba3-48da-bf18-0c63ddf67331/838681770a67cfdd8a72f2d61cc71608ca6d6995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/739461e7-7ba3-48da-bf18-0c63ddf67331/b97fb68b027d461193f43b8d0ca1bee0bbb2f4f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3890::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:51:ed:4e:66:ea:78:de:7e:51:16:0d:f1:dd:74:3d:f1:
         f4:77:c3:3d:b6:07:e7:31:68:22:6a:b3:c5:b3:a6:4d:98:9e:
         e7:f1:c4:91:5d:79:c8:7b:33:45:ce:5d:3f:15:ba:b1:da:c3:
         eb:ac:0d:79:1b:65:33:a5:69:53:04:c6:41:c9:47:b4:57:0c:
         55:83:79:8e:aa:7f:c9:b6:3d:28:9e:ff:f6:e0:0b:88:2b:ca:
         ef:af:89:0a:91:c2:54:ba:5d:17:f1:5c:07:c7:96:bb:03:d7:
         f7:7f:7d:2a:52:63:8a:f4:f6:0a:73:37:dd:e1:6d:4d:46:7d:
         ea:27:79:91:8b:4b:82:72:1e:cf:d5:eb:02:9c:c1:35:1d:6f:
         ec:6c:10:86:b1:78:38:2d:68:c6:df:c7:54:ce:64:dc:bf:1c:
         2a:14:55:c8:e1:70:76:08:8e:98:c2:f7:bf:af:6b:a8:8e:28:
         c1:09:3d:8f:d1:54:3e:65:e2:fe:37:89:3d:2f:e2:32:e5:5a:
         d3:3d:42:cf:ae:a9:5f:ee:ca:79:81:f4:17:8c:f7:8a:6c:22:
         ff:e0:fe:b7:16:94:00:cd:18:75:39:43:75:9e:4d:f1:c5:19:
         0d:6a:42:8f:29:76:c7:80:cc:9d:b0:ae:1a:7c:00:52:33:21:
         81:86:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----