Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/6115b800e4c3102f8b13c489267add7151798781.roa
File:                     6115b800e4c3102f8b13c489267add7151798781.roa (raw, json)
Hash identifier:          zflCbWWmoVXBtIyNoWfo+anVMXezAIPhas55OSTtgtU=
Subject key identifier:   F9:11:A6:B5:CF:E7:93:F0:71:47:A6:56:46:FC:54:CC:D8:93:2F:AB
Certificate issuer:       /CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
Certificate serial:       20152F
Authority key identifier: 23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/6115b800e4c3102f8b13c489267add7151798781.roa
Signing time:             Tue 12 Sep 2023 21:32:31 +0000
ROA not before:           Mon 11 Sep 2023 21:32:31 +0000
ROA not after:            Fri 12 Sep 2025 21:32:31 +0000
asID:                     269872
IP address blocks:        2803:28e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102575 (0x20152f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
        Validity
            Not Before: Sep 11 21:32:31 2023 GMT
            Not After : Sep 12 21:32:31 2025 GMT
        Subject: CN=6115b800e4c3102f8b13c489267add7151798781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:40:1f:99:90:fb:6c:81:ff:98:bd:a6:10:
                    2a:43:23:fb:6d:73:3f:9f:de:8e:52:ce:8b:3e:a6:
                    d3:9e:1e:46:e5:bc:b1:01:83:37:cc:7e:b1:0d:6e:
                    9d:05:23:31:7a:66:1c:46:2d:1a:9b:66:54:89:f8:
                    e0:d2:3d:1f:54:ce:d6:3d:7d:22:18:ac:bc:fa:19:
                    90:45:5d:a9:bb:bd:4a:2f:1a:ed:ba:5c:71:fd:7c:
                    db:cc:83:91:bc:db:12:1c:f6:23:e2:77:2d:63:b6:
                    5a:d9:a2:a4:17:1c:16:06:0f:22:55:07:08:51:b3:
                    fd:84:65:48:2b:11:56:6b:4c:f6:64:aa:c3:47:e2:
                    dd:e7:e6:2b:4d:5a:82:62:c0:ce:ae:eb:4e:d6:28:
                    45:d8:06:28:8e:e4:6c:98:00:5d:b5:91:c4:4c:27:
                    63:dd:f2:bd:14:84:3c:af:2a:ce:9d:c7:01:7a:fc:
                    8d:8d:3e:ff:c9:c7:be:6e:68:43:3e:18:0b:9b:f7:
                    ac:dd:7f:c3:00:5d:65:32:85:a4:bb:a5:c5:93:f9:
                    95:56:0d:1d:1f:3b:52:ba:d0:9f:fa:07:bf:4b:b0:
                    fe:c3:7b:77:44:6b:82:93:47:5d:f9:6e:98:ac:6a:
                    19:43:2d:9d:83:ca:86:60:6a:68:9a:07:68:f0:11:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:A6:B5:CF:E7:93:F0:71:47:A6:56:46:FC:54:CC:D8:93:2F:AB
            X509v3 Authority Key Identifier:
                keyid:23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/6115b800e4c3102f8b13c489267add7151798781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:da:0d:4a:5e:57:3c:7d:0f:94:1c:f6:48:2b:ee:fb:e6:
         3b:f7:45:0f:9d:12:d3:10:6e:2e:cd:d1:d7:1f:59:aa:ef:64:
         be:0d:f7:a2:4e:48:ad:09:71:06:23:bd:7a:87:75:ef:28:54:
         9e:4b:0f:2c:3d:09:a2:30:fc:9d:e2:34:62:cd:0d:cb:b2:34:
         ec:47:38:d2:b6:a7:29:07:3f:e7:39:28:6f:8c:c4:98:e6:37:
         b0:15:2e:c1:ea:ba:fb:e4:95:81:83:07:23:bc:53:e3:81:e6:
         ab:db:3d:db:4a:80:8d:2d:54:67:82:c3:7a:97:ed:49:8a:f3:
         dc:16:4b:bb:59:d3:9a:f6:5b:d5:e3:b0:ab:f2:06:e3:ad:bc:
         51:8d:86:84:ec:5f:f7:42:0c:64:73:e2:69:03:9c:8f:a9:d0:
         84:77:6b:00:95:a6:92:c7:8f:1a:90:dd:5d:90:3f:e0:c6:46:
         d7:87:87:6a:32:23:85:e9:74:b3:ee:66:65:02:7e:89:ba:26:
         7c:77:00:0c:b8:8b:c2:23:6f:24:39:4b:d5:d6:2c:b6:08:c7:
         a3:62:5c:13:ca:67:d1:4d:9e:37:0c:42:4c:e5:b2:d9:7f:e0:
         10:78:4f:92:70:56:f2:19:6d:5e:61:7b:0c:49:c4:78:bb:08:
         73:71:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----