Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/aafe25c0d21f0a4b3b3988b3ed975fcf8b5d47c4.roa
File:                     aafe25c0d21f0a4b3b3988b3ed975fcf8b5d47c4.roa (raw, json)
Hash identifier:          P3kxaVDA0psll7rMbDh8yTfDrBx9MK7MTlgGDT6jvhw=
Subject key identifier:   41:47:4A:CE:D3:34:28:01:D1:D3:19:DF:F4:68:99:57:A7:D4:B6:15
Certificate issuer:       /CN=21946617726999f473e397ce5a1cff1c13cd4402
Certificate serial:       0B6DC2
Authority key identifier: FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/aafe25c0d21f0a4b3b3988b3ed975fcf8b5d47c4.roa
Signing time:             Thu 25 May 2023 17:48:57 +0000
ROA not before:           Wed 24 May 2023 17:48:57 +0000
ROA not after:            Sun 25 May 2025 17:48:57 +0000
asID:                     271929
IP address blocks:        2803:9a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748994 (0xb6dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21946617726999f473e397ce5a1cff1c13cd4402
        Validity
            Not Before: May 24 17:48:57 2023 GMT
            Not After : May 25 17:48:57 2025 GMT
        Subject: CN=aafe25c0d21f0a4b3b3988b3ed975fcf8b5d47c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:ad:69:a3:68:4d:40:74:93:1b:e6:a7:88:
                    dc:2a:a6:b9:3b:7e:e9:ce:50:28:98:15:47:15:0e:
                    0b:d6:ed:60:d1:15:ca:03:57:65:d3:16:c9:b1:03:
                    e0:4f:ca:c1:2b:d8:0c:23:6a:83:a8:f2:10:64:99:
                    de:9b:77:b1:10:1b:70:a9:33:1a:33:b9:2c:5d:76:
                    6e:34:cf:35:13:8b:39:da:f9:e7:c1:04:79:92:2e:
                    45:12:cf:41:66:33:74:95:dd:77:ab:15:91:26:fb:
                    f0:61:3f:15:30:5c:ba:7b:0c:d7:9e:c4:29:95:96:
                    21:00:26:f6:d1:9f:cc:cb:d3:26:71:8f:d2:0d:63:
                    b4:43:fd:67:ff:f2:07:9f:12:b3:b1:66:0b:18:18:
                    72:4e:55:b6:81:bb:cf:e2:79:36:ff:99:ad:1a:95:
                    bf:7a:15:b5:8d:02:de:ab:77:03:16:be:27:d9:ac:
                    6b:8b:ed:c7:d0:fc:26:e1:65:ba:38:c2:d1:7c:20:
                    bf:dc:bd:67:c1:8b:af:13:88:d1:62:ee:56:08:8d:
                    6d:89:8e:16:4d:f8:e2:92:e2:89:b2:55:7e:ce:07:
                    97:9e:41:17:6d:76:6e:35:93:d5:75:dc:e5:85:77:
                    e8:4d:b7:ed:73:1b:fe:44:e2:7b:75:cd:b7:3f:a4:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:4A:CE:D3:34:28:01:D1:D3:19:DF:F4:68:99:57:A7:D4:B6:15
            X509v3 Authority Key Identifier:
                keyid:FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/aafe25c0d21f0a4b3b3988b3ed975fcf8b5d47c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/21946617726999f473e397ce5a1cff1c13cd4402.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:69:97:b2:54:f7:32:94:02:8c:2f:b1:8f:3a:4a:03:75:
         3b:97:97:9c:6a:10:70:f0:19:eb:86:f8:76:08:fe:61:8a:c8:
         e4:47:67:98:42:8b:72:0b:bf:16:04:84:26:c4:a1:d5:bb:3c:
         18:4e:5d:7d:20:dd:eb:9e:57:6e:7b:93:65:93:37:6c:cf:9d:
         83:94:e1:66:a3:7f:d9:6d:d2:4b:3e:41:39:54:d2:a3:cd:c7:
         69:c4:ce:fd:ca:48:39:02:5d:6a:9f:d0:1b:b9:6a:f7:ee:4a:
         ad:d2:43:4e:80:44:bf:8b:c0:54:f7:e1:b9:12:17:ba:93:30:
         b7:d3:e6:53:04:6f:7c:59:62:81:08:a4:c8:b4:0c:f0:f7:7a:
         36:bf:16:b5:64:42:64:54:df:af:1f:78:8a:0e:bf:8e:e9:2c:
         53:5c:ff:e0:92:52:5e:cb:c9:bd:a3:d9:70:39:07:16:f2:db:
         a8:f2:87:36:00:68:2b:3c:aa:62:97:f6:3e:f1:06:5e:6e:f5:
         0e:54:c8:0f:bd:5a:5d:55:60:f1:da:dd:99:1c:fb:ee:05:b6:
         72:7f:b4:b7:08:74:cb:6a:be:2d:c9:8e:7e:6f:f2:d7:2e:f8:
         8c:6d:f3:71:33:e2:47:3f:68:3d:12:04:ee:43:18:58:62:4a:
         01:bf:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----