Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/4db6fe30bbe90f11e3cf5ec71654db19f280ab60.roa
File:                     4db6fe30bbe90f11e3cf5ec71654db19f280ab60.roa (raw, json)
Hash identifier:          GyP5c+LJN677M/+KH4nQX1AQl24ndGQrPm9gUk8uMr4=
Subject key identifier:   A5:2D:D7:B4:B0:55:7C:D9:50:10:31:91:F9:21:F2:92:81:42:ED:C3
Certificate issuer:       /CN=0cbb85e42b2f4026a791ab4ac115547607eff761
Certificate serial:       0C8949
Authority key identifier: 5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/4db6fe30bbe90f11e3cf5ec71654db19f280ab60.roa
Signing time:             Sun 09 Apr 2023 17:44:16 +0000
ROA not before:           Sat 08 Apr 2023 17:44:16 +0000
ROA not after:            Wed 09 Apr 2025 17:44:16 +0000
asID:                     272013
IP address blocks:        2803:b910::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821577 (0xc8949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb85e42b2f4026a791ab4ac115547607eff761
        Validity
            Not Before: Apr  8 17:44:16 2023 GMT
            Not After : Apr  9 17:44:16 2025 GMT
        Subject: CN=4db6fe30bbe90f11e3cf5ec71654db19f280ab60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:ee:cf:de:4f:0b:c8:0c:10:3e:b2:46:59:
                    a8:20:76:09:3c:e3:17:92:8d:d7:a8:27:9c:bc:b2:
                    c2:39:10:28:db:cd:c0:3d:65:39:b6:64:66:db:f1:
                    e0:53:5b:ea:a2:f0:80:13:7a:ff:80:2f:96:ff:33:
                    89:9f:47:b5:fc:8a:0e:da:35:37:5a:3d:07:c5:6f:
                    dc:4a:60:5c:c0:82:ac:e1:df:0d:98:16:68:d5:09:
                    b4:0e:e7:0f:02:3b:3e:e2:85:2f:d4:6c:e1:e1:2d:
                    ba:33:03:96:10:bc:30:cf:e6:b1:7f:2f:37:6f:86:
                    28:60:d1:e3:d6:d7:49:1a:6d:cd:3c:8f:a0:0c:d1:
                    0d:d5:55:e7:3b:82:ee:b5:c8:ee:32:ec:00:2c:69:
                    fd:24:f7:8e:b7:eb:74:23:5a:25:ec:9e:5b:80:52:
                    88:e6:fe:6d:02:e9:b2:09:98:6b:24:43:93:59:cf:
                    a0:93:87:6d:ae:1a:8a:29:ad:ec:fa:61:bc:8f:ce:
                    39:bf:be:95:df:cf:26:2d:81:01:ab:d1:ec:81:7a:
                    11:f5:47:1f:32:1e:24:cc:f0:42:b1:7e:84:43:62:
                    d3:1f:37:9a:5a:66:d4:9e:38:49:b6:07:38:0e:9a:
                    0d:de:bd:51:29:81:02:54:d0:e1:9e:2d:aa:3e:79:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2D:D7:B4:B0:55:7C:D9:50:10:31:91:F9:21:F2:92:81:42:ED:C3
            X509v3 Authority Key Identifier:
                keyid:5B:2D:1F:5E:C9:03:F4:28:A4:62:05:39:64:15:F3:AB:42:CC:05:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cbb85e42b2f4026a791ab4ac115547607eff761.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/4db6fe30bbe90f11e3cf5ec71654db19f280ab60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8af8fc2c-3d2a-49ff-b358-4985e24e2d26/0cbb85e42b2f4026a791ab4ac115547607eff761.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b910::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:88:08:1a:60:b9:a5:e8:62:b1:01:bc:de:0a:66:70:92:
         5f:cb:a5:46:9f:ca:be:63:32:d1:df:04:7c:48:d7:18:ad:b3:
         15:2b:98:e6:f1:36:d6:74:65:3f:b5:a1:05:43:e5:01:2f:5a:
         08:67:5e:02:50:5b:74:b5:0d:3a:14:ae:ae:3c:a7:8d:53:04:
         c3:cf:8c:37:b1:18:33:8d:0d:17:63:18:e9:47:58:3e:3b:0a:
         86:3a:26:74:b7:c6:92:90:00:90:3b:6a:bc:88:0a:bc:4a:55:
         bb:9f:cf:4d:d8:44:80:3b:64:9f:ea:ea:53:91:57:07:e5:e5:
         24:1e:0a:84:de:d2:39:2a:a8:e2:01:29:c8:fe:1a:ac:87:dd:
         f7:26:fb:92:d3:0f:74:01:fe:a5:fe:bd:8a:07:f8:af:2f:bf:
         68:40:3d:6c:13:17:93:a9:23:b5:93:fb:aa:c5:a0:fb:9e:52:
         f3:da:01:8b:05:ac:e2:3e:44:4c:fe:6a:31:f7:0f:dc:9c:0d:
         06:ab:38:a1:8d:10:e7:92:de:bf:aa:75:32:a0:97:d9:de:dc:
         f1:dc:a7:ab:cb:7f:cf:d9:ea:8b:16:b0:a1:cf:c5:53:45:f5:
         c0:6b:81:d9:19:14:72:3b:bc:2a:be:54:ed:87:36:1b:6b:8c:
         d5:12:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----