Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/e8c27189af6bccae7d36c171a8cce8b415dd8428.roa
File:                     e8c27189af6bccae7d36c171a8cce8b415dd8428.roa (raw, json)
Hash identifier:          1bGh7ReQWbdJrzF07582aHqakP3LZb+jtBW3O0BJjho=
Subject key identifier:   5C:56:27:A6:64:61:BA:DA:1B:2B:D4:81:3C:F8:4F:15:E8:D9:38:76
Certificate issuer:       /CN=97ce4216e80388cd1e2afa361ecb941b3865d3ca
Certificate serial:       08A76D
Authority key identifier: 06:67:10:1B:D8:BC:12:15:95:0B:AD:09:D8:2B:76:E8:A1:D2:29:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97ce4216e80388cd1e2afa361ecb941b3865d3ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/e8c27189af6bccae7d36c171a8cce8b415dd8428.roa
Signing time:             Mon 08 May 2023 17:06:37 +0000
ROA not before:           Sun 07 May 2023 17:06:37 +0000
ROA not after:            Thu 08 May 2025 17:06:37 +0000
asID:                     272120
IP address blocks:        2803:2f10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567149 (0x8a76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ce4216e80388cd1e2afa361ecb941b3865d3ca
        Validity
            Not Before: May  7 17:06:37 2023 GMT
            Not After : May  8 17:06:37 2025 GMT
        Subject: CN=e8c27189af6bccae7d36c171a8cce8b415dd8428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d2:06:f2:a9:f8:5a:5e:76:18:4a:85:05:50:
                    47:33:59:4e:eb:59:4a:ca:22:e8:27:c6:c5:74:78:
                    2e:92:11:00:07:83:c1:08:a5:02:09:1c:61:44:95:
                    e7:eb:3c:5e:ae:28:69:8d:05:ff:0d:d8:81:0a:43:
                    b2:43:80:e5:30:44:ba:31:79:0f:36:49:1a:de:04:
                    c5:dc:b3:49:00:56:c7:98:30:a1:7d:1e:5b:4b:0e:
                    67:6c:8b:3d:91:9f:c5:54:e2:f8:9b:f7:cd:ea:1d:
                    f2:07:c8:fd:7e:55:a3:ec:08:6c:9d:44:06:73:5d:
                    10:be:3c:29:ad:3f:ce:6b:d5:7e:64:41:2a:c0:20:
                    9a:70:ec:8e:bd:db:c6:b6:1a:2e:14:54:99:69:ee:
                    e6:b9:da:5e:94:31:28:6a:ad:11:20:8f:91:65:f8:
                    28:80:99:04:63:b3:77:77:f3:05:1f:cd:fd:03:bc:
                    1f:53:e4:23:3e:4e:3f:b3:31:d7:0e:0a:96:a5:10:
                    67:d4:c4:ec:50:7c:57:73:de:93:31:89:38:20:ab:
                    5a:36:f6:ad:3d:69:fc:74:8f:4d:6a:28:fc:9e:dd:
                    e5:43:55:63:3c:d4:fd:c6:38:70:64:5d:d5:40:e0:
                    a7:08:34:6b:26:0f:f9:99:b0:ed:af:d6:e9:59:3f:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:27:A6:64:61:BA:DA:1B:2B:D4:81:3C:F8:4F:15:E8:D9:38:76
            X509v3 Authority Key Identifier:
                keyid:06:67:10:1B:D8:BC:12:15:95:0B:AD:09:D8:2B:76:E8:A1:D2:29:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97ce4216e80388cd1e2afa361ecb941b3865d3ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/e8c27189af6bccae7d36c171a8cce8b415dd8428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89e15c01-fa98-4b9f-ac44-66d1e3152c91/97ce4216e80388cd1e2afa361ecb941b3865d3ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:f0:0a:e2:05:d3:7a:23:6e:de:ee:85:05:76:ad:4a:a1:
         81:da:42:68:a6:7c:9b:25:18:3d:84:08:aa:17:08:4d:23:ca:
         23:04:cd:78:da:0a:77:d8:6e:49:be:4a:5f:a5:93:0b:42:6e:
         2e:a9:e1:d0:ec:5d:fb:4e:f0:e6:be:b9:b2:95:61:fe:71:d1:
         57:2f:5f:f8:5b:2c:df:31:39:3f:23:3f:ec:f6:ca:55:4b:cd:
         83:80:ba:1f:5d:b3:18:d7:98:7c:a5:ae:b8:41:69:c2:f7:83:
         37:66:81:e4:e5:a2:ed:95:d6:87:b7:82:2b:34:10:56:8e:5f:
         c9:48:76:80:ad:dd:66:5f:fe:7e:72:eb:18:8c:a5:18:f5:04:
         58:4e:11:59:19:47:91:08:9e:90:e8:91:8a:b0:4d:96:85:cd:
         ee:a4:98:07:6a:b2:e8:77:92:64:99:0a:a1:1b:8c:3c:86:0f:
         60:aa:b2:95:d4:de:9e:d0:ed:81:ff:f0:05:99:da:0b:70:f2:
         c3:6b:e4:38:ce:23:14:c5:ba:c7:8f:8d:7a:11:b5:e7:b8:10:
         d0:46:c3:2d:5c:69:4f:4b:3f:08:66:22:f3:36:52:b1:65:b6:
         ec:2f:4d:a5:3f:cc:c7:9c:50:95:eb:bf:59:91:24:28:3d:19:
         48:e9:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----