Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/e5159380577f978ce56577b9d4be5c1adb518172.roa
File:                     e5159380577f978ce56577b9d4be5c1adb518172.roa (raw, json)
Hash identifier:          Qm9UE2ZjOlCHzEOA2GyBGhIFpqluDJafMQPPHto5jgw=
Subject key identifier:   3B:9B:DE:C9:B6:55:0C:98:05:8B:75:95:6A:EA:0E:D9:49:3E:77:B2
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       25C78E
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/e5159380577f978ce56577b9d4be5c1adb518172.roa
Signing time:             Wed 22 Nov 2023 17:56:00 +0000
ROA not before:           Wed 22 Nov 2023 17:56:00 +0000
ROA not after:            Sat 22 Nov 2025 17:56:00 +0000
asID:                     52419
IP address blocks:        2803:3480:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475918 (0x25c78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: Nov 22 17:56:00 2023 GMT
            Not After : Nov 22 17:56:00 2025 GMT
        Subject: CN=e5159380577f978ce56577b9d4be5c1adb518172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:fd:14:fe:73:2a:0d:1a:04:af:2e:8c:43:
                    c3:ae:93:0d:ca:f9:b0:67:02:3b:33:c3:5e:38:62:
                    50:f3:36:8e:ed:51:85:e9:31:4a:9b:d6:48:af:8b:
                    12:a1:96:68:9c:c8:4e:65:a8:cb:64:13:dd:93:2c:
                    ff:84:85:c2:44:7f:88:eb:11:ad:a9:ff:75:84:b7:
                    ba:9d:5f:ae:a1:24:f2:c7:1c:cb:59:10:56:d9:d7:
                    06:35:b8:5d:1c:f3:df:27:d1:86:0a:63:cd:0a:c9:
                    98:a5:57:58:60:59:fa:f7:f5:98:79:91:33:74:74:
                    c1:63:8d:d0:a9:a2:34:61:88:f8:72:4e:7c:5a:6c:
                    5d:2e:0f:ee:57:40:3c:11:65:db:22:bf:66:6c:6a:
                    6c:1a:58:07:5a:75:c6:a1:ef:b9:c7:34:43:a3:ff:
                    ec:1d:3d:eb:b0:b4:7d:12:ea:41:6f:3f:92:b6:9f:
                    97:d6:95:12:70:25:56:28:41:c4:36:ad:fa:c5:78:
                    f0:07:66:25:bd:55:8e:54:8a:34:7e:36:f3:1d:67:
                    3f:5f:86:cb:3a:b3:6a:e9:5d:8a:95:45:93:c6:aa:
                    0a:05:5b:ad:d2:a4:c3:45:84:4c:76:ec:9f:63:ce:
                    c7:3a:50:c7:62:32:05:df:49:3f:10:1f:40:7f:96:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9B:DE:C9:B6:55:0C:98:05:8B:75:95:6A:EA:0E:D9:49:3E:77:B2
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/e5159380577f978ce56577b9d4be5c1adb518172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:54:85:8a:a4:59:03:82:ef:42:47:ed:c1:92:ec:35:34:e3:
         cf:d7:27:80:ae:65:df:06:40:31:d2:82:83:f9:f1:52:8d:67:
         ec:81:0c:0b:9f:cd:bb:d9:3c:00:79:d9:1d:c1:98:3a:da:c2:
         c2:dc:20:17:ad:a3:bb:e6:cf:87:0a:4c:7a:c7:a7:96:aa:a5:
         6f:a6:4f:f4:03:8e:98:a8:a8:cf:4a:79:90:c2:2d:85:0d:b8:
         50:46:f2:b4:20:45:19:6e:7a:ed:1e:93:4b:e7:73:47:b2:df:
         88:28:54:5e:27:59:2e:74:79:32:03:8b:63:6a:08:c2:25:62:
         cf:26:8f:1e:29:0c:9b:91:a2:a7:54:1e:e3:33:0f:83:24:24:
         59:76:e3:22:2b:7c:07:9f:e7:2b:a0:82:aa:d5:c3:b0:ce:60:
         5a:1c:7b:40:1d:86:fe:33:b1:25:ba:ae:9a:5f:89:04:81:30:
         c2:5b:73:85:3b:e0:3c:a0:2f:e1:ad:8c:02:f1:5d:8d:ac:3f:
         66:da:54:ff:a1:a3:f2:31:bf:85:5d:a1:20:54:6a:fa:78:13:
         ab:a4:cb:45:5b:23:ed:8f:67:ae:4a:08:c0:c9:16:55:6c:a4:
         6f:fd:8b:39:7f:65:96:bf:9f:9d:c2:02:4c:0a:72:60:ef:b1:
         7a:33:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----