Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/8b81f130b3a820f4fa9d387f6d98dddb0b727217.roa
File:                     8b81f130b3a820f4fa9d387f6d98dddb0b727217.roa (raw, json)
Hash identifier:          +M09AeqjeHlt0bZ9v3eikFb0DUlZQi/WKbsksvu3BxE=
Subject key identifier:   ED:A2:4C:4C:AF:FB:D5:1B:85:74:A3:27:9A:38:3A:0E:86:2D:01:ED
Certificate issuer:       /CN=fb91a939f380a4cfa7deb774f44592574b792555
Certificate serial:       082E3F
Authority key identifier: A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/8b81f130b3a820f4fa9d387f6d98dddb0b727217.roa
Signing time:             Tue 03 Oct 2023 02:47:39 +0000
ROA not before:           Mon 02 Oct 2023 02:47:39 +0000
ROA not after:            Fri 03 Oct 2025 03:47:39 +0000
asID:                     272890
IP address blocks:        2803:4690::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536127 (0x82e3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb91a939f380a4cfa7deb774f44592574b792555
        Validity
            Not Before: Oct  2 02:47:39 2023 GMT
            Not After : Oct  3 03:47:39 2025 GMT
        Subject: CN=8b81f130b3a820f4fa9d387f6d98dddb0b727217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:3f:7e:cd:7d:98:52:3e:14:5e:e7:83:f0:
                    05:07:dd:b7:ce:ca:c9:94:a7:62:b0:0f:57:4f:bb:
                    e8:d2:c5:0a:a8:79:af:01:81:17:9e:47:c2:ac:c4:
                    02:fe:4d:c4:10:80:d9:2d:e6:45:b7:5b:15:9e:7a:
                    29:0a:f0:c1:ef:55:13:fb:2d:e9:93:72:45:cb:91:
                    1b:b6:c5:7f:56:6a:4e:80:fc:e9:46:fd:2a:fe:ee:
                    89:bc:06:23:bc:c4:ab:65:8b:e9:57:73:31:91:f1:
                    b5:7a:d4:9d:34:a8:ad:cd:01:b1:13:f6:74:11:9a:
                    fe:ae:2b:ae:b1:fe:bd:52:5e:d8:cb:d5:54:3e:42:
                    f5:2d:ed:7d:0b:9a:3e:12:7e:10:a4:8f:59:9c:cf:
                    30:18:66:00:fc:fc:11:83:84:d4:da:1a:72:81:92:
                    44:0d:e4:f4:56:ac:2b:c4:ed:ad:1b:a9:4b:e8:8b:
                    51:08:13:c6:c1:5c:f7:81:95:1a:7f:c4:f8:25:d3:
                    62:d9:26:e0:f3:01:1c:9c:63:d4:fc:a3:5e:56:eb:
                    f4:6d:86:e7:40:c0:91:91:6f:d7:ee:13:9a:8a:d5:
                    f8:91:5f:33:76:86:30:79:15:af:31:e3:17:92:b7:
                    03:c5:ea:be:8f:da:b0:41:90:ea:fa:d9:79:84:16:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:4C:4C:AF:FB:D5:1B:85:74:A3:27:9A:38:3A:0E:86:2D:01:ED
            X509v3 Authority Key Identifier:
                keyid:A9:BB:59:61:15:0D:04:00:18:E7:36:D1:71:7A:66:A3:02:79:05:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb91a939f380a4cfa7deb774f44592574b792555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/8b81f130b3a820f4fa9d387f6d98dddb0b727217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bb3c6ad-7cb1-44d5-8474-f7867315deb5/fb91a939f380a4cfa7deb774f44592574b792555.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4690::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:0b:be:10:55:c3:68:83:2a:0a:ce:09:be:3d:ea:11:0b:
         de:2d:b0:68:60:61:b0:83:0b:1b:d1:a8:90:74:1e:93:f5:ce:
         41:71:74:9b:64:95:c5:90:be:a6:19:d8:f2:b3:c4:a5:ec:d8:
         ce:f7:28:8a:f9:db:4c:a0:91:35:86:39:e5:74:b6:f1:34:ba:
         75:b8:df:8e:26:5a:ea:e5:d9:f2:66:1b:ea:7b:73:fe:53:d7:
         58:d4:2e:9a:7a:11:a2:3a:b0:2f:89:d6:ac:5c:ee:11:2a:e7:
         99:e9:d9:d2:b8:c6:91:96:71:ff:b5:5b:7e:22:32:04:3e:ff:
         7f:97:9a:67:36:cc:bc:93:89:e7:a3:74:41:f5:68:1e:f6:c5:
         63:95:b3:b2:ae:19:09:be:e5:77:aa:09:e0:79:b8:33:b1:e1:
         94:e9:4c:b5:16:40:43:ae:8f:3f:79:ad:82:50:dc:13:2e:7a:
         24:61:30:80:f0:cd:41:b2:d0:6f:b2:da:17:12:ac:ee:ca:60:
         21:8b:cd:07:b3:f7:cb:0d:8d:9f:72:43:12:19:b0:8c:86:47:
         dd:6b:c0:2d:88:64:e8:eb:ae:8e:ae:2c:b0:50:35:38:e6:78:
         b7:b1:23:7d:bc:84:29:41:9a:78:af:dc:19:c1:11:1b:59:d8:
         67:72:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----