Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8adbe4e4-6eac-4cec-9d63-91c87d3b8fba/54595690db30bc0f42d5e38f1984a58d245b1a69.roa
File:                     54595690db30bc0f42d5e38f1984a58d245b1a69.roa (raw, json)
Hash identifier:          M52yi71pvvicljIrnfOuPf59PHrFmZu6EG1rsPR4/mc=
Subject key identifier:   B6:8E:D3:8F:5B:02:06:D6:BA:42:13:11:49:00:16:3B:1D:57:27:DD
Certificate issuer:       /CN=a91ca12a221eb471991fee1dd98b011143c1c74e
Certificate serial:       079275
Authority key identifier: 31:04:94:81:7E:CD:E9:D6:26:E0:4F:55:16:2A:87:AF:80:6A:C7:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a91ca12a221eb471991fee1dd98b011143c1c74e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8adbe4e4-6eac-4cec-9d63-91c87d3b8fba/54595690db30bc0f42d5e38f1984a58d245b1a69.roa
Signing time:             Mon 22 May 2023 22:10:17 +0000
ROA not before:           Sun 21 May 2023 22:10:17 +0000
ROA not after:            Thu 22 May 2025 22:10:17 +0000
asID:                     272100
IP address blocks:        2803:a710::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496245 (0x79275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91ca12a221eb471991fee1dd98b011143c1c74e
        Validity
            Not Before: May 21 22:10:17 2023 GMT
            Not After : May 22 22:10:17 2025 GMT
        Subject: CN=54595690db30bc0f42d5e38f1984a58d245b1a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:86:b8:98:99:7c:8f:aa:64:5a:45:e0:b9:
                    32:78:b5:f5:6c:c9:b0:38:7b:58:93:6f:11:df:20:
                    fe:ef:1e:24:22:a8:03:4c:fc:34:21:41:dd:24:8f:
                    6e:b7:c4:0a:35:20:0f:6f:3e:dd:b2:72:9a:e1:8a:
                    b1:87:fc:19:53:74:f4:96:70:ca:db:d0:be:a9:92:
                    ae:22:2e:1f:2b:58:a5:4f:99:b4:79:41:f9:30:9a:
                    4d:f9:f6:ee:c2:70:1a:06:54:f4:dc:29:e0:9c:e3:
                    90:fd:01:88:69:24:e7:fa:d9:31:f5:89:43:c0:33:
                    42:67:19:1c:a1:8a:98:ed:36:fd:da:da:b8:e1:a4:
                    14:fb:c3:5a:ee:cd:ca:dd:8f:c4:0d:ea:80:71:f7:
                    f3:3b:b8:0b:55:7a:8f:61:5f:c2:f3:85:a8:f8:d5:
                    52:51:55:7d:15:38:f1:30:c2:ad:18:52:0f:7d:17:
                    c1:d4:90:8e:c2:a6:28:0a:87:4b:b8:d7:93:da:d8:
                    a8:f9:bc:48:a5:20:8d:f9:3b:ed:93:e9:78:0f:19:
                    67:6a:15:c4:1b:02:15:f6:54:68:af:bf:b2:5e:b5:
                    17:79:d3:09:c7:fb:91:db:4a:9d:cb:a6:86:48:93:
                    02:32:60:f2:fb:4d:03:db:68:7c:93:3e:8e:0a:9e:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:D3:8F:5B:02:06:D6:BA:42:13:11:49:00:16:3B:1D:57:27:DD
            X509v3 Authority Key Identifier:
                keyid:31:04:94:81:7E:CD:E9:D6:26:E0:4F:55:16:2A:87:AF:80:6A:C7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a91ca12a221eb471991fee1dd98b011143c1c74e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8adbe4e4-6eac-4cec-9d63-91c87d3b8fba/54595690db30bc0f42d5e38f1984a58d245b1a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8adbe4e4-6eac-4cec-9d63-91c87d3b8fba/a91ca12a221eb471991fee1dd98b011143c1c74e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a710::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:e2:69:e3:0b:95:64:8e:35:7e:da:57:a3:c3:ef:7c:79:
         4f:c4:a0:bf:e8:c6:14:89:41:26:d8:7e:f1:51:d5:67:c7:ae:
         2f:38:21:c7:4f:24:26:87:da:8d:0e:77:19:aa:ec:20:93:1c:
         50:88:a9:c8:24:51:bf:63:96:e8:6e:4d:25:75:e8:e0:c2:a7:
         fb:da:e1:11:fc:a0:02:57:78:ef:d6:83:43:f5:df:95:b6:69:
         af:f9:fb:e2:ab:8c:f5:17:48:be:b0:c7:e6:e0:5d:5f:99:0b:
         90:e7:c6:1b:ed:f7:11:08:e6:e0:6a:ce:c5:cd:81:a5:59:5c:
         8a:19:63:5b:05:fb:62:68:14:7e:bb:a7:07:09:9f:80:89:c7:
         91:4a:29:e3:74:99:fc:30:b6:32:ca:c0:fa:5a:c3:57:31:bb:
         30:51:c5:c0:77:14:bf:91:19:47:3e:38:15:ae:be:4d:e9:f4:
         a5:a4:c3:13:35:e4:6d:08:b0:75:5d:55:5c:6b:2e:fe:2a:85:
         39:26:c0:16:18:68:74:23:a2:d1:40:c3:82:8c:5d:83:be:dd:
         e7:46:f7:10:f4:74:ee:46:e9:70:27:56:7c:37:f4:ab:91:11:
         a7:27:aa:6b:3a:c3:46:e1:56:9e:f1:2b:7b:71:d6:bc:f8:7c:
         87:68:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----