Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/a477e4fdc7be5e1ab7cf7be341e1d727185c2e24.roa
File:                     a477e4fdc7be5e1ab7cf7be341e1d727185c2e24.roa (raw, json)
Hash identifier:          W/xni2w3F9X4zbYCP6fGQgJjkfuMY0KrDc9simfesok=
Subject key identifier:   26:70:7C:FB:DA:1F:0B:47:0A:0F:75:6F:78:13:84:AB:54:AF:55:0A
Certificate issuer:       /CN=61be3d295d2a0cd57e45fda40db66d5e6304478e
Certificate serial:       16AEFB
Authority key identifier: 8C:53:FB:30:51:D9:59:8A:85:57:51:5C:1A:AA:AD:DE:0B:AD:8D:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61be3d295d2a0cd57e45fda40db66d5e6304478e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/a477e4fdc7be5e1ab7cf7be341e1d727185c2e24.roa
Signing time:             Wed 27 Dec 2023 01:35:18 +0000
ROA not before:           Wed 27 Dec 2023 01:35:17 +0000
ROA not after:            Wed 27 Dec 2028 01:35:17 +0000
asID:                     271817
IP address blocks:        2803:dbe0::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486587 (0x16aefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61be3d295d2a0cd57e45fda40db66d5e6304478e
        Validity
            Not Before: Dec 27 01:35:17 2023 GMT
            Not After : Dec 27 01:35:17 2028 GMT
        Subject: CN=a477e4fdc7be5e1ab7cf7be341e1d727185c2e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:c5:a8:d4:f3:ea:a3:c6:25:a7:31:22:29:
                    ca:b6:2e:02:f1:8e:9a:59:52:87:08:6a:8d:1e:00:
                    03:e0:34:de:e9:57:d4:c6:c9:1e:10:8c:a3:38:f2:
                    9a:db:09:60:fc:ce:7d:39:6c:b1:2a:77:59:6f:9d:
                    72:ab:53:40:6d:84:71:b6:00:8e:6b:65:17:73:61:
                    e4:03:5b:b5:02:59:35:9d:cd:49:f4:2a:cf:16:76:
                    59:57:96:55:de:5f:7d:e8:55:de:bd:f5:7c:81:d4:
                    6d:bb:65:33:05:56:db:20:ed:22:8d:16:aa:8f:78:
                    f9:4d:7b:3e:aa:23:f7:47:29:06:bf:52:2d:9b:16:
                    92:09:2f:64:4d:46:65:0f:96:ba:b1:0b:26:85:9c:
                    a0:16:0e:8c:16:2c:9c:37:49:1c:36:13:8a:9e:67:
                    9e:72:8a:e7:71:a0:f8:ad:c2:4b:d3:da:22:ea:4f:
                    a4:e2:be:95:f9:db:8e:eb:45:eb:0a:a6:fd:3b:67:
                    78:f1:a3:e2:41:62:96:3e:30:98:84:7f:ea:48:db:
                    56:eb:81:cf:1e:de:cc:ed:3f:cc:97:46:71:b9:d2:
                    f6:a1:21:65:ba:77:e5:ed:dc:5e:4d:50:19:7d:42:
                    8a:d3:8e:25:69:9d:a7:cf:a6:44:32:fe:2f:00:aa:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:7C:FB:DA:1F:0B:47:0A:0F:75:6F:78:13:84:AB:54:AF:55:0A
            X509v3 Authority Key Identifier:
                keyid:8C:53:FB:30:51:D9:59:8A:85:57:51:5C:1A:AA:AD:DE:0B:AD:8D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61be3d295d2a0cd57e45fda40db66d5e6304478e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/a477e4fdc7be5e1ab7cf7be341e1d727185c2e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/824c499f-ac08-40de-a783-fccd2ef32861/61be3d295d2a0cd57e45fda40db66d5e6304478e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dbe0::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:44:32:7a:0d:41:c2:c8:a8:31:43:7b:cf:bc:d7:df:39:f7:
         af:0e:d4:e0:3a:a6:2a:bd:14:d2:89:2f:ff:6b:8d:ee:b7:62:
         94:52:9f:79:08:4c:bc:2d:f9:2a:35:f0:05:d0:12:b0:53:52:
         1b:4e:8d:7b:3c:93:ef:dc:b3:61:e0:e6:a3:66:80:df:e8:9e:
         a8:0d:8a:17:7f:22:58:dd:1f:be:bb:72:6b:6a:c7:c5:6c:51:
         60:04:fa:12:d1:ed:ad:cd:66:80:aa:b2:6d:e5:fd:80:f2:17:
         db:8a:5f:fc:81:f5:06:d0:c5:44:cf:3a:28:65:94:75:55:fa:
         df:85:57:6c:57:32:0b:23:5b:32:52:c9:33:9b:da:fa:5d:44:
         b9:30:15:73:e1:7a:b6:94:08:73:1d:78:1e:03:b0:3a:6b:6b:
         24:de:f0:c5:2e:75:87:02:83:aa:f0:61:ed:23:31:bc:c3:96:
         25:ad:3a:03:ba:f9:17:67:ac:e5:a7:50:71:8a:cf:f0:29:23:
         37:ea:dd:a1:5c:c9:84:4f:2a:de:03:9d:47:ea:f7:2d:3f:b9:
         1a:bb:b5:7a:03:00:36:49:8d:29:5a:11:a9:57:52:41:0a:9b:
         bb:91:21:88:1f:97:51:41:57:61:36:7c:63:d8:f8:2d:c5:2e:
         80:2f:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----