Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4decb896b91b5d0fd840f258c9f619ea8d873c2e.roa
File:                     4decb896b91b5d0fd840f258c9f619ea8d873c2e.roa (raw, json)
Hash identifier:          WXcO26mc3j0sUeSDXFqEDM+3FgOqJHX9Qg6hN/6gBik=
Subject key identifier:   93:4E:93:59:CF:94:37:F2:46:04:34:8B:9D:62:22:70:4F:17:02:8E
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       1D838A
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4decb896b91b5d0fd840f258c9f619ea8d873c2e.roa
Signing time:             Fri 24 Mar 2023 08:31:28 +0000
ROA not before:           Thu 23 Mar 2023 08:31:28 +0000
ROA not after:            Sat 22 Mar 2025 08:31:28 +0000
asID:                     269805
IP address blocks:        2803:ab60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934218 (0x1d838a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Mar 23 08:31:28 2023 GMT
            Not After : Mar 22 08:31:28 2025 GMT
        Subject: CN=4decb896b91b5d0fd840f258c9f619ea8d873c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:37:4c:bf:66:16:0b:1f:f8:9f:d5:4f:1a:
                    bb:be:84:61:19:9a:db:57:45:f2:59:9c:50:dc:b6:
                    f7:82:76:cc:10:28:e9:7d:30:9a:2f:ae:8e:06:f6:
                    c4:df:98:dc:e1:ad:19:f2:be:23:d1:e7:0a:9f:9d:
                    0b:93:a3:79:3d:03:a3:eb:61:4e:35:d3:01:c1:09:
                    e3:84:c7:c3:44:0e:c1:f2:0f:08:66:84:af:1d:09:
                    0d:18:48:d5:fc:4a:07:89:a9:e0:4e:77:77:33:58:
                    cc:ca:4c:45:e5:90:a3:a5:dc:50:4d:bd:fc:3f:81:
                    59:8e:52:bf:67:cf:fe:40:36:ad:8f:6f:d2:2a:69:
                    22:e2:72:ae:cf:47:6a:0d:ba:94:99:4c:b2:97:7a:
                    a5:28:7a:0a:14:c0:65:cd:7c:72:43:cf:fe:55:66:
                    26:06:43:d8:d8:e5:ba:0c:23:a9:62:62:8d:7b:8a:
                    c8:4e:2c:a4:cf:57:d4:d4:fa:fa:4b:91:bd:a1:54:
                    51:82:28:79:44:1a:06:c1:44:4b:12:82:c2:46:4b:
                    23:19:3b:79:43:82:b4:4d:8e:00:24:c6:56:23:b6:
                    f8:26:9c:e8:a2:72:7a:f0:b5:8b:9e:f3:5a:f2:4f:
                    50:0b:b6:6d:ac:8f:1a:b8:36:95:f0:77:65:7f:a7:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:93:59:CF:94:37:F2:46:04:34:8B:9D:62:22:70:4F:17:02:8E
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4decb896b91b5d0fd840f258c9f619ea8d873c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab60::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:06:65:f2:e8:26:9e:60:96:e4:c5:3f:a3:e4:13:d0:17:f1:
         f7:0a:28:24:8c:fd:75:6c:50:63:95:87:82:4e:01:5d:41:8b:
         b6:53:a2:eb:4b:c4:f4:01:f7:33:de:4f:49:fc:f4:64:cb:05:
         3e:88:d3:65:12:49:ac:2d:58:f3:8a:a5:cc:4b:b5:51:0f:76:
         d0:2b:9d:18:ff:4e:a2:02:cf:c7:e3:8e:44:8b:63:d6:7b:cb:
         0b:78:f0:04:22:f0:be:8a:b2:6e:07:a2:2d:bc:ee:5a:12:e5:
         9f:0e:f7:39:87:6f:da:70:7b:cb:65:21:cb:c3:16:75:9b:47:
         7e:48:f9:ed:72:2a:8d:e1:0d:ac:5f:e5:c1:12:bb:dd:32:e7:
         96:5a:78:41:42:b5:87:87:83:50:7e:a7:81:59:9b:b0:36:90:
         cc:b2:1f:3b:4a:b1:97:e2:0d:98:9b:85:87:9d:ec:22:8d:d2:
         62:ce:76:71:75:45:d9:51:a0:f4:fc:f2:da:49:d3:7d:22:7f:
         d5:97:68:5c:fa:59:45:23:57:ba:a1:74:b7:c7:ee:34:a6:3a:
         6d:f5:b5:ba:27:fd:9e:ed:d4:01:96:a5:3f:d0:6a:c5:e1:9b:
         a7:70:39:35:11:3f:f2:a6:e3:5a:5e:08:a8:c2:f2:07:a1:82:
         bf:09:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----