Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/ed1d381262f679ac7061b0403df35cc2fa813686.roa
File:                     ed1d381262f679ac7061b0403df35cc2fa813686.roa (raw, json)
Hash identifier:          Xq+arfJviUrOZ6FKD30td9ehPqTsrYDkaWVJgFBephk=
Subject key identifier:   0D:56:66:78:C8:A4:FE:E1:36:F8:F3:DF:A7:0C:D1:5F:9F:0F:76:CF
Certificate issuer:       /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial:       23BD18
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/ed1d381262f679ac7061b0403df35cc2fa813686.roa
Signing time:             Wed 25 Oct 2023 20:32:30 +0000
ROA not before:           Wed 25 Oct 2023 20:32:30 +0000
ROA not after:            Sat 25 Oct 2025 20:32:30 +0000
asID:                     271795
IP address blocks:        2803:dda0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342168 (0x23bd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Validity
            Not Before: Oct 25 20:32:30 2023 GMT
            Not After : Oct 25 20:32:30 2025 GMT
        Subject: CN=ed1d381262f679ac7061b0403df35cc2fa813686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:cd:dd:7b:d1:c5:73:b2:56:b6:86:c0:06:
                    58:3b:3f:36:64:20:b1:c9:32:99:41:4b:ff:80:e6:
                    e7:90:24:8b:06:f3:39:23:76:a8:f2:e0:c5:9b:be:
                    45:6d:2c:e4:93:b0:72:7b:27:34:4b:44:6c:2d:26:
                    1a:51:fb:84:38:5f:56:17:2f:03:a4:ed:e2:e3:fa:
                    65:ef:63:13:92:d7:82:fb:2a:5f:9c:b0:3b:4c:c2:
                    9e:de:47:98:a1:b4:23:bf:ad:86:4a:b6:34:90:25:
                    5f:a5:06:87:55:93:95:68:3d:0a:03:ec:d2:6f:42:
                    04:8a:ea:45:0e:05:ed:dd:2d:98:7a:f7:56:7c:eb:
                    e5:1f:52:1e:69:44:8f:cb:e7:bc:cc:45:3e:95:2d:
                    a4:10:f6:75:6c:3c:4a:33:f2:28:16:a0:62:71:47:
                    09:1f:27:0a:38:62:fa:cb:53:dd:cb:a5:a4:d8:e2:
                    65:6a:e8:60:71:79:e5:2f:4e:7e:07:42:15:25:71:
                    c8:d5:4a:65:08:f3:b4:fc:e0:08:52:ff:b9:ea:b4:
                    74:ee:dc:63:e3:bc:44:ee:e0:d1:e7:12:69:30:64:
                    30:7d:e1:58:21:96:4b:ef:30:94:35:b0:9a:40:2e:
                    63:16:3b:2a:be:15:95:f5:9e:7a:d9:31:11:42:ad:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:56:66:78:C8:A4:FE:E1:36:F8:F3:DF:A7:0C:D1:5F:9F:0F:76:CF
            X509v3 Authority Key Identifier:
                keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/ed1d381262f679ac7061b0403df35cc2fa813686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:a9:2a:56:48:37:12:61:7a:32:cc:de:e7:03:95:02:4f:
         08:51:f6:91:b6:43:4b:fe:2d:d1:2c:29:9b:94:1a:71:1e:ca:
         5c:7b:b2:18:42:2d:4d:f8:9d:37:ae:60:dc:c7:66:d2:c0:a8:
         b4:e3:6f:27:e9:a0:23:19:fb:ed:dc:93:2b:95:1d:7c:96:5d:
         3f:4f:4a:58:3e:57:e3:2e:59:75:05:ae:15:10:8a:34:8a:98:
         c1:99:c6:1c:17:49:c5:f1:f6:17:62:dc:bc:54:fb:ca:fd:45:
         6d:f7:63:10:b0:c3:23:4d:19:98:85:36:43:a5:61:e8:a4:fe:
         53:ab:4b:22:dd:07:26:28:8c:56:90:c9:85:c5:05:ce:d1:93:
         ed:4f:d7:05:81:f6:04:e6:9b:f7:57:a0:a9:9a:bc:38:b9:9b:
         44:30:fb:6f:39:35:f3:40:3e:03:1d:92:0d:e0:a3:cd:0d:54:
         b5:ae:6c:69:5f:2b:07:82:a4:d2:16:b1:e4:22:d2:ea:1d:15:
         c2:78:71:ab:1a:01:37:73:06:93:d0:da:2c:b2:57:09:fd:19:
         9d:8e:6f:9b:5f:f0:cc:a2:35:cd:0f:2a:b7:3c:fa:b3:b3:f5:
         d4:c8:26:9b:4d:c9:b5:23:d5:9e:34:d6:c2:47:2e:78:06:a6:
         2a:78:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----