Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/1b3b485876d490c0796be521d477424ba9d20347.roa
File:                     1b3b485876d490c0796be521d477424ba9d20347.roa (raw, json)
Hash identifier:          TiJN2HXTK6U5JL/tsgsyDZDWMfEhsJFNCVFQ+0lobzw=
Subject key identifier:   B1:EF:5E:32:18:89:70:5C:30:83:9D:D7:E2:24:E9:39:B9:F5:76:C5
Certificate issuer:       /CN=09ea57b6c3d069e4ac033a5234fa650369f30845
Certificate serial:       120E2D
Authority key identifier: 75:DD:B1:DF:36:71:BA:70:BB:A6:EF:6B:E9:2F:44:5F:AB:73:54:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09ea57b6c3d069e4ac033a5234fa650369f30845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/1b3b485876d490c0796be521d477424ba9d20347.roa
Signing time:             Tue 12 Sep 2023 07:45:40 +0000
ROA not before:           Mon 11 Sep 2023 07:45:40 +0000
ROA not after:            Fri 12 Sep 2025 07:45:40 +0000
asID:                     271965
IP address blocks:        2803:4e10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183277 (0x120e2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ea57b6c3d069e4ac033a5234fa650369f30845
        Validity
            Not Before: Sep 11 07:45:40 2023 GMT
            Not After : Sep 12 07:45:40 2025 GMT
        Subject: CN=1b3b485876d490c0796be521d477424ba9d20347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:f6:1a:ac:35:47:53:d0:73:58:fd:da:90:
                    94:62:63:7f:d7:08:82:ba:21:5d:e1:dd:25:06:99:
                    a1:5a:d7:4e:c6:30:4c:1b:fe:ab:13:e1:4a:ed:43:
                    fe:9b:41:81:14:f0:75:0c:27:6f:95:96:65:67:f7:
                    1f:0a:84:ff:bb:3c:1e:11:5e:bb:26:d1:ed:dd:e9:
                    6f:7d:5b:d1:83:1d:f6:63:76:e5:1c:c6:90:4e:5d:
                    26:52:97:e4:24:90:29:2a:d8:4c:41:5a:5d:47:08:
                    58:08:05:32:2c:80:db:5d:19:1f:87:80:b8:92:92:
                    af:0c:2f:28:a9:a9:0e:60:30:dc:fc:84:29:7b:95:
                    37:52:f1:00:82:45:31:64:19:a8:6d:4d:f3:cb:35:
                    80:f4:37:84:3a:cd:36:58:9e:76:ca:9b:dc:ba:2c:
                    80:ca:aa:64:8e:bd:ea:55:ca:76:d1:e7:0e:e7:b8:
                    7f:b5:40:48:f5:1e:af:10:11:55:a2:5a:cc:c7:01:
                    29:36:df:2a:43:ba:3e:cb:c6:f6:55:6e:29:98:71:
                    84:84:45:62:e7:19:06:e3:e8:ba:04:e7:ff:ac:da:
                    50:f0:a5:8f:15:26:8b:d8:45:67:d3:df:6e:e9:b3:
                    43:88:8f:72:74:03:73:53:ac:b4:0a:80:d8:10:85:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:5E:32:18:89:70:5C:30:83:9D:D7:E2:24:E9:39:B9:F5:76:C5
            X509v3 Authority Key Identifier:
                keyid:75:DD:B1:DF:36:71:BA:70:BB:A6:EF:6B:E9:2F:44:5F:AB:73:54:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09ea57b6c3d069e4ac033a5234fa650369f30845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/1b3b485876d490c0796be521d477424ba9d20347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/09ea57b6c3d069e4ac033a5234fa650369f30845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:1a:e4:5b:ad:9c:65:83:3b:8b:de:78:4d:42:85:ed:27:
         a3:49:b0:27:ec:a7:b1:53:83:7d:f3:9b:d9:af:69:0b:21:a0:
         c5:d7:b4:fd:d3:be:11:51:ad:69:8e:3d:b4:71:bd:0c:eb:8b:
         94:b8:b8:20:2e:dd:84:fb:a7:19:84:c9:ec:aa:06:f1:5e:d9:
         30:d4:21:f0:97:d0:67:0f:c0:47:f1:ac:da:a2:a0:86:75:e0:
         1d:6b:28:be:a8:4b:9b:ed:62:ad:78:c1:14:2f:d1:e0:87:a1:
         32:78:65:76:8f:27:30:1d:56:aa:54:3e:8a:7f:69:59:76:ea:
         c3:96:ab:4e:f8:b0:0c:fb:50:61:82:b3:0e:56:ee:40:48:c9:
         71:99:ee:56:05:b8:b7:08:3d:b0:f1:05:d1:83:9c:16:86:e3:
         17:ff:de:db:88:f9:fa:48:11:db:f3:a2:dc:ef:1c:63:a6:44:
         e3:5e:41:4a:1d:a8:71:d0:83:b1:8f:45:b5:32:2e:f6:02:ba:
         01:84:95:65:fd:4d:a2:67:3a:9e:12:28:6e:0e:d1:02:60:a8:
         cd:3f:59:fa:bf:2a:4c:20:08:ff:3b:d1:71:d1:14:e4:c7:09:
         03:e4:5b:09:bf:1d:b0:c6:e0:e7:26:5c:76:00:eb:3c:02:b4:
         9b:56:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----