Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/ed7023811de8bf522e36d99c17be04dee2e90054.roa
File:                     ed7023811de8bf522e36d99c17be04dee2e90054.roa (raw, json)
Hash identifier:          JhNuHhM/8CRvscF/1JTz9mD3+TFQMGIdLqzo+oWFv5o=
Subject key identifier:   C8:05:EC:0B:E4:FD:84:58:EC:2C:58:51:CA:42:AC:A6:50:6D:F3:71
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       15EF38
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/ed7023811de8bf522e36d99c17be04dee2e90054.roa
Signing time:             Fri 22 Sep 2023 23:11:28 +0000
ROA not before:           Thu 21 Sep 2023 23:11:27 +0000
ROA not after:            Mon 22 Sep 2025 23:11:27 +0000
asID:                     265772
IP address blocks:        2803:37c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437496 (0x15ef38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Sep 21 23:11:27 2023 GMT
            Not After : Sep 22 23:11:27 2025 GMT
        Subject: CN=ed7023811de8bf522e36d99c17be04dee2e90054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:66:aa:ff:87:ef:6d:2d:9c:b0:7b:15:30:
                    0b:fa:f4:e2:9f:25:63:01:1c:ed:06:29:f5:2f:5b:
                    4f:8d:93:b2:0c:e4:1f:fb:ce:ce:b8:3d:c1:82:f9:
                    1d:2e:ca:bf:b2:65:a3:be:9a:be:7a:ce:e6:bc:9e:
                    06:6a:6d:d9:51:42:81:0b:3d:a2:ae:1a:73:66:2a:
                    42:86:dc:90:b7:a2:07:a3:98:3e:17:6b:f2:15:c0:
                    45:7b:2a:5a:b1:ff:80:42:72:33:70:11:42:b7:88:
                    d7:a3:78:91:90:c0:a6:8c:86:99:a6:fd:51:b8:5d:
                    d4:78:ca:d4:d1:83:cb:42:0d:f4:74:aa:1e:1d:9a:
                    d9:03:d2:42:b0:a7:b0:5c:21:43:aa:51:3b:76:34:
                    24:c2:f2:d8:d1:8a:2a:1d:f3:80:8e:e0:87:4c:58:
                    b2:61:4b:ab:22:ea:d7:70:64:ee:b0:66:6f:1c:0a:
                    78:fe:ca:3a:16:69:c2:5c:90:a4:50:7b:c3:b8:f3:
                    e3:43:3c:7f:2c:b2:ea:bb:6e:8f:b6:ca:f9:43:97:
                    2c:0f:03:4c:9a:18:de:65:aa:6d:50:34:c0:57:cd:
                    fa:f2:ee:95:4d:df:00:a2:0f:24:77:96:d1:88:90:
                    96:2b:a2:3b:14:79:a6:b0:10:b6:74:70:ef:9a:85:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:05:EC:0B:E4:FD:84:58:EC:2C:58:51:CA:42:AC:A6:50:6D:F3:71
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/ed7023811de8bf522e36d99c17be04dee2e90054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:12:62:ad:c5:a0:27:4b:45:d6:d0:f4:3c:ba:c0:ab:b8:
         49:43:24:4f:ab:17:e8:70:9b:ef:03:b9:33:72:00:16:79:0a:
         b8:c4:d2:79:42:fa:82:96:e1:62:97:e9:d1:05:0f:32:20:d8:
         c7:9e:b1:c3:04:c9:40:4c:85:a1:1f:43:b1:e8:a3:c7:78:26:
         17:86:49:8d:3b:b5:f5:4b:fc:51:dd:92:ec:74:c1:1d:15:f1:
         6b:23:65:37:64:b3:39:9a:d7:45:2f:65:02:0f:7d:80:71:d5:
         7d:5a:6c:49:46:4a:36:22:02:e8:20:69:3a:76:34:b9:c0:33:
         f7:44:7d:15:0e:ab:49:4e:b2:b3:86:be:7b:b0:86:7e:23:32:
         b7:29:7e:03:a3:7e:4a:da:e6:46:c2:98:ff:38:dd:2a:8f:2b:
         fc:35:cb:c5:2c:78:1a:55:2e:a1:f7:f5:92:ba:b8:ab:52:b2:
         e0:8f:8b:b3:18:c9:68:b8:9d:6f:5e:50:8f:1b:f2:b0:61:2d:
         b0:0e:9a:71:2e:66:82:b4:2e:be:d9:da:bf:42:51:29:9a:95:
         cd:84:32:3d:c9:c4:d7:21:f9:ba:c5:cd:9b:d7:30:27:2b:2a:
         2b:71:bd:2c:d1:fe:ab:38:35:ae:e4:52:03:f8:6e:78:0e:01:
         45:7f:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----