Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/bf56b18f846af60ca9e90cadb0788db0f780a1e0.roa
File:                     bf56b18f846af60ca9e90cadb0788db0f780a1e0.roa (raw, json)
Hash identifier:          10xV6AOWApLhIMAzPMRJ+a446wGf+VvHGlpwUJdi9Pg=
Subject key identifier:   ED:70:AB:0A:BD:F6:B9:AC:BE:17:CC:58:14:CB:32:4E:A2:F5:9C:0A
Certificate issuer:       /CN=97ce4216e80388cd1e2afa361ecb941b3865d3ca
Certificate serial:       09FFB0
Authority key identifier: 06:67:10:1B:D8:BC:12:15:95:0B:AD:09:D8:2B:76:E8:A1:D2:29:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97ce4216e80388cd1e2afa361ecb941b3865d3ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/bf56b18f846af60ca9e90cadb0788db0f780a1e0.roa
Signing time:             Mon 26 Jun 2023 19:39:21 +0000
ROA not before:           Sun 25 Jun 2023 19:39:21 +0000
ROA not after:            Thu 26 Jun 2025 19:39:21 +0000
asID:                     272120
IP address blocks:        2803:2f10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655280 (0x9ffb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ce4216e80388cd1e2afa361ecb941b3865d3ca
        Validity
            Not Before: Jun 25 19:39:21 2023 GMT
            Not After : Jun 26 19:39:21 2025 GMT
        Subject: CN=bf56b18f846af60ca9e90cadb0788db0f780a1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:64:8d:be:20:d7:d4:0c:d4:8a:34:c3:3f:
                    39:66:9c:f5:ae:a4:61:4f:3e:38:c0:aa:4a:31:f4:
                    da:54:6c:3a:61:e2:8b:ca:14:dc:7f:fa:88:df:c9:
                    d5:57:b2:f4:f6:d6:e4:99:42:6e:49:f8:d6:61:f6:
                    41:cf:a1:d5:74:a6:16:6f:97:1b:31:54:36:c1:9c:
                    c4:54:9c:e4:70:79:65:bd:55:28:c8:10:94:09:5d:
                    31:95:e7:8d:51:58:b4:e8:e4:b1:c9:c7:e9:24:ec:
                    ad:4f:1b:ca:0b:a4:69:88:ea:43:35:bd:78:6e:cc:
                    f6:7d:a9:65:e5:7a:f9:20:36:62:31:e3:22:a1:5b:
                    3e:ef:0f:ea:d5:fb:82:0a:7a:34:25:0c:5b:68:36:
                    ea:f2:35:89:17:59:41:e8:0b:4d:27:fd:be:e8:06:
                    a3:41:94:62:ac:47:d7:a4:f0:2e:e9:b6:4e:29:94:
                    3f:49:e2:cc:12:ba:ab:bf:e0:b2:1e:b4:81:be:77:
                    1e:d9:43:0d:10:b8:43:5b:45:e1:00:e5:3f:e4:8d:
                    1f:82:2f:f1:61:24:73:90:dd:33:f3:66:40:a5:81:
                    8d:81:f9:25:af:54:6a:5b:5a:7c:8c:ac:7f:81:3a:
                    2f:7f:5b:fe:67:1c:66:c1:9c:f7:88:64:6a:45:9f:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:AB:0A:BD:F6:B9:AC:BE:17:CC:58:14:CB:32:4E:A2:F5:9C:0A
            X509v3 Authority Key Identifier:
                keyid:06:67:10:1B:D8:BC:12:15:95:0B:AD:09:D8:2B:76:E8:A1:D2:29:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97ce4216e80388cd1e2afa361ecb941b3865d3ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/bf56b18f846af60ca9e90cadb0788db0f780a1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/97ce4216e80388cd1e2afa361ecb941b3865d3ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:db:08:4e:82:55:aa:c7:d1:a5:d1:db:9b:9e:c6:d4:73:
         f3:3f:93:50:9a:7e:c2:4a:40:0a:13:25:cb:a2:01:7a:ed:8b:
         14:ff:a8:f7:7d:be:17:5d:44:74:7e:90:2c:ec:37:9f:a5:c1:
         4b:a0:76:6d:a1:88:02:88:67:19:3c:bf:cd:04:03:b5:4b:fe:
         a6:19:3a:5b:96:2d:e5:dd:01:30:52:1f:74:17:62:60:f0:37:
         e3:b0:70:25:b1:1d:43:72:93:54:51:74:5a:ed:9c:d3:77:44:
         6f:37:f4:08:49:15:5b:2f:d6:a6:06:8a:5d:e9:db:c1:aa:ce:
         f8:91:48:1e:f7:d1:4b:46:85:e8:9a:f0:d1:84:d7:e5:a3:48:
         93:76:a6:6b:81:35:f6:c7:d8:73:b6:71:c8:4b:6b:db:11:2b:
         70:96:cc:20:11:45:bc:b6:06:62:66:26:3b:ea:ea:95:63:6d:
         cd:ba:02:f4:c7:a2:dc:2e:ca:87:a3:22:76:34:d1:17:a9:03:
         1a:f0:6f:de:69:ef:2f:ac:af:3d:c8:a0:80:59:fd:d8:40:04:
         ba:de:e9:ee:5d:cb:67:e7:73:1a:19:f8:b7:af:13:6b:01:0e:
         46:85:b7:08:5b:27:d7:6d:ab:ef:ef:a7:dc:ee:97:92:a5:f0:
         15:92:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----