Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/b86b12df613aaae92616f65f624d0b094d76ce01.roa
File:                     b86b12df613aaae92616f65f624d0b094d76ce01.roa (raw, json)
Hash identifier:          Ry6tR39y7smfqChz+wkTZrEUgHU46TStjSTu1z9/sIw=
Subject key identifier:   5A:5A:6B:B1:2B:FD:A8:BE:42:8E:1D:88:64:E2:3A:0E:41:A8:86:05
Certificate issuer:       /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial:       0A3462
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/b86b12df613aaae92616f65f624d0b094d76ce01.roa
Signing time:             Fri 22 Sep 2023 21:26:30 +0000
ROA not before:           Thu 21 Sep 2023 21:26:30 +0000
ROA not after:            Mon 22 Sep 2025 21:26:30 +0000
asID:                     272038
IP address blocks:        2803:4d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668770 (0xa3462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Validity
            Not Before: Sep 21 21:26:30 2023 GMT
            Not After : Sep 22 21:26:30 2025 GMT
        Subject: CN=b86b12df613aaae92616f65f624d0b094d76ce01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:4b:08:2d:3c:7b:93:b0:c9:0e:d4:0d:07:
                    f9:2d:2f:f2:2d:a1:2a:d1:00:0c:e8:1f:26:df:43:
                    cc:45:40:c6:56:e6:ef:1c:76:32:af:6d:f4:60:01:
                    15:d0:20:52:a6:4c:42:4a:d0:4b:bf:2a:7c:3a:25:
                    53:45:27:f5:b7:08:5e:d7:81:58:84:85:88:4e:e0:
                    04:42:85:60:fe:34:e0:41:55:38:b3:67:06:84:f1:
                    0c:61:2a:34:8b:a7:28:af:c4:16:5e:64:12:81:0b:
                    3d:46:32:68:11:f4:1e:d1:d4:a2:2e:b3:a5:b3:3b:
                    c6:b5:f2:59:4b:6f:d4:f3:d0:e2:19:1a:b2:79:9a:
                    57:63:d3:8e:db:44:83:d5:12:7c:1a:22:6f:02:b5:
                    78:6f:2a:c7:ef:31:9d:59:16:b2:d9:33:44:6a:c4:
                    c6:04:06:d1:56:48:7f:1c:23:aa:77:86:40:c7:0e:
                    8c:98:3e:ab:6e:6e:e4:8a:7f:be:fd:d1:4d:0a:b7:
                    4e:08:0c:77:1b:bb:af:10:7a:e0:84:1d:7a:fc:19:
                    16:92:e1:01:d5:cc:d5:48:99:84:df:2e:21:a2:f0:
                    4c:83:fa:6b:ea:d0:c5:b6:9b:8b:27:26:10:89:9a:
                    93:6a:b1:15:3c:cf:99:d3:58:c6:a6:0d:53:c9:97:
                    52:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:6B:B1:2B:FD:A8:BE:42:8E:1D:88:64:E2:3A:0E:41:A8:86:05
            X509v3 Authority Key Identifier:
                keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/b86b12df613aaae92616f65f624d0b094d76ce01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:8d:3b:1b:ab:3d:4b:73:41:96:c4:e2:06:12:62:59:57:
         31:3b:af:5a:41:6a:fe:ed:f2:d2:b1:c4:a0:d5:ce:82:08:61:
         37:19:37:9b:99:10:db:44:47:ed:45:8e:a5:50:3c:91:68:b2:
         e7:8d:b5:a9:d5:27:4a:50:39:fb:d4:4d:f3:07:cb:0f:da:df:
         e6:a4:67:9e:6d:f3:49:c6:2a:59:a3:33:c4:77:ca:dc:98:b2:
         31:a9:05:b7:84:dd:42:7f:d2:dd:cb:c4:3b:35:21:72:bd:db:
         4a:18:da:21:87:09:a9:00:45:84:a1:29:ef:5f:82:4d:21:a5:
         c8:8e:38:86:40:42:c0:d2:03:74:7c:e6:4b:bf:e6:cb:cf:69:
         fc:e4:14:07:f3:71:ec:d5:34:10:e8:26:f4:b8:65:d1:1f:0e:
         eb:0a:d2:e5:5b:22:e2:21:f1:26:b8:b5:ab:af:b3:84:1e:c9:
         5c:f6:70:da:c4:b9:9c:2a:b4:a8:0c:43:52:c2:80:3d:68:13:
         c9:77:3d:a5:e5:bf:eb:82:00:cc:1a:17:12:f0:f9:b1:6a:5c:
         7e:22:db:2e:f0:00:36:68:d0:31:d7:8c:c8:1b:27:11:d5:21:
         2a:d2:75:25:e1:e0:59:43:81:99:35:a0:e4:d2:7c:ab:c0:6b:
         f6:40:78:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----