Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa
File:                     606081ef92f2e249d245a6d75b5c56a238362ec1.roa (raw, json)
Hash identifier:          bLvA5lJ4vUSInQCun4VLjCZaHXInWYG+/ZTvksFSJBE=
Subject key identifier:   73:66:9C:92:1A:8F:41:BE:8C:DF:18:28:1D:16:47:75:03:08:CE:27
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       269AA3
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa
Signing time:             Fri 29 Dec 2023 18:11:18 +0000
ROA not before:           Fri 29 Dec 2023 18:11:18 +0000
ROA not after:            Mon 29 Dec 2025 18:11:18 +0000
asID:                     265775
IP address blocks:        2803:cb20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529955 (0x269aa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Dec 29 18:11:18 2023 GMT
            Not After : Dec 29 18:11:18 2025 GMT
        Subject: CN=606081ef92f2e249d245a6d75b5c56a238362ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:61:f7:f1:ad:1a:91:53:2c:a1:d2:84:9a:8c:
                    01:d2:b3:b5:45:07:1d:e7:de:d6:9c:28:f7:3b:c4:
                    89:24:81:10:04:fa:3d:da:b2:b0:38:a8:96:9a:8d:
                    48:cc:85:b9:1e:9e:49:13:9d:23:4b:c8:c7:9c:9a:
                    bc:54:0d:8d:ab:f1:af:e5:93:28:31:36:20:cc:85:
                    98:4f:48:67:17:29:40:cd:4e:f4:24:6b:66:b8:cf:
                    1c:a1:a7:41:91:e1:8c:89:a8:47:7d:58:f6:de:b0:
                    3e:e6:0a:85:07:93:ea:22:f7:c2:0c:54:14:c1:24:
                    25:39:65:21:ce:ab:2a:a2:33:4e:48:b3:83:41:52:
                    e1:de:ac:1f:d3:20:f3:73:00:19:32:34:4b:d0:9c:
                    1a:d2:1b:40:08:2f:fb:d1:2a:ef:68:fa:6c:6b:d1:
                    c3:b3:e7:26:cf:13:29:a2:d2:67:42:d9:54:16:a5:
                    e5:22:10:15:88:b5:d2:e8:9b:c8:bb:3b:65:f1:76:
                    36:46:12:65:a6:28:d6:aa:f0:a1:c4:24:22:ad:71:
                    42:c6:57:bd:1b:aa:8c:b7:7a:d6:d6:37:f0:12:5d:
                    34:07:1b:ac:e2:4c:0c:62:03:09:8a:0b:08:b2:46:
                    18:5e:13:be:aa:1a:07:0f:d3:5f:98:20:86:d4:95:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:9C:92:1A:8F:41:BE:8C:DF:18:28:1D:16:47:75:03:08:CE:27
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/606081ef92f2e249d245a6d75b5c56a238362ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:49:a3:63:bf:98:60:ad:f7:ed:81:da:e5:f8:f6:1c:b2:18:
         74:62:06:24:64:43:97:52:12:56:bf:79:c4:59:f1:2e:1a:eb:
         57:80:8c:c8:cb:d3:5e:87:2e:e3:51:de:10:be:f6:53:6d:ac:
         2c:b2:fa:3c:73:cb:28:df:9f:46:6c:34:04:de:4f:09:67:54:
         a6:73:1c:9a:dd:19:8e:62:42:79:63:f6:e5:f5:5f:ff:2c:38:
         de:75:bc:0e:b9:df:14:d0:be:28:0e:0e:cd:18:e6:28:b4:06:
         1e:08:1f:2f:8d:b3:18:d1:9c:29:d1:7c:37:56:2e:47:68:50:
         23:78:f9:98:b7:a7:d0:db:0d:69:bd:ec:8b:8c:a5:2c:e7:62:
         57:84:bb:7b:5e:35:42:7c:6b:f8:24:24:57:75:e3:76:22:04:
         6f:ec:79:f6:d8:7e:be:8f:aa:2d:01:c0:62:08:a6:8d:d7:ec:
         d5:60:a6:83:5f:20:81:d4:56:0c:36:57:ca:51:b2:a6:c3:8f:
         49:eb:f2:b3:2b:38:6a:2f:0b:2b:23:bd:39:5f:06:ca:2b:69:
         74:5e:c1:7d:e0:7a:fb:13:37:c0:00:42:d3:01:a1:f0:75:f8:
         79:f2:ce:e9:67:f0:b3:e5:1c:b9:fe:82:01:f4:10:46:7c:49:
         36:ec:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----