Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/2153f4747ea2e073a7f5c69b99db2e2ced8f3bb3.roa
File:                     2153f4747ea2e073a7f5c69b99db2e2ced8f3bb3.roa (raw, json)
Hash identifier:          ZUEjpbK4F1zDOYuBtPduEc+QhOX0ozbqvQlyAmEOC5c=
Subject key identifier:   61:7F:85:CF:D9:00:9B:65:92:9F:B2:78:EF:99:01:54:AA:B4:6F:B9
Certificate issuer:       /CN=b9d806633e0f009f79ba1dffc9b54ab06ab0eb17
Certificate serial:       017D92
Authority key identifier: 3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/2153f4747ea2e073a7f5c69b99db2e2ced8f3bb3.roa
Signing time:             Sat 07 Oct 2023 17:54:02 +0000
ROA not before:           Fri 06 Oct 2023 17:54:02 +0000
ROA not after:            Tue 07 Oct 2025 17:54:02 +0000
asID:                     273049
IP address blocks:        2803:3b90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97682 (0x17d92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9d806633e0f009f79ba1dffc9b54ab06ab0eb17
        Validity
            Not Before: Oct  6 17:54:02 2023 GMT
            Not After : Oct  7 17:54:02 2025 GMT
        Subject: CN=2153f4747ea2e073a7f5c69b99db2e2ced8f3bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:07:6f:2c:a3:67:b9:9f:14:16:ae:50:20:
                    69:dc:e2:7f:a8:85:c5:f7:d9:13:63:d2:70:30:a5:
                    c5:8a:f5:0c:65:5f:0a:e7:37:91:bf:ab:f0:4c:80:
                    a3:b4:dd:8a:b1:1c:95:06:70:18:2e:0b:da:85:a7:
                    6b:6f:f0:06:85:fc:ae:bb:82:cb:be:b1:32:be:b3:
                    50:a6:77:d4:ee:bc:2c:d7:a8:73:73:3a:93:b3:bf:
                    26:a6:75:48:a5:08:70:f8:a6:06:2d:42:49:ff:66:
                    2e:cf:73:76:7c:54:af:88:a2:3b:d1:81:fd:c1:a5:
                    5c:f9:6b:b0:3c:e1:01:82:a9:1f:94:54:46:d5:9d:
                    f2:49:fd:16:8c:af:05:71:91:4c:8a:c0:06:df:89:
                    b2:94:e7:2d:a1:ff:c8:cb:7a:f8:44:39:47:44:a0:
                    de:38:4f:64:5c:70:25:9e:72:c9:39:1e:23:56:38:
                    b2:61:40:69:2f:e6:7f:08:46:af:22:ae:27:23:b4:
                    6f:3e:c7:a2:d8:69:50:09:f5:cf:be:07:7d:8f:c2:
                    80:2d:89:2b:86:8f:ac:bc:70:a1:aa:31:0b:2b:4a:
                    f0:64:00:fd:27:d4:97:fd:75:f5:b9:6f:84:2a:a8:
                    36:70:d7:a3:bc:a3:b4:b7:63:e9:2d:23:f2:bd:46:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7F:85:CF:D9:00:9B:65:92:9F:B2:78:EF:99:01:54:AA:B4:6F:B9
            X509v3 Authority Key Identifier:
                keyid:3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/2153f4747ea2e073a7f5c69b99db2e2ced8f3bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:2b:bb:2c:db:ec:29:2a:9f:78:0a:43:d2:a6:63:92:3c:4b:
         f5:02:25:9c:af:5c:d3:18:58:cf:32:10:fb:7f:6a:f0:c2:3f:
         a5:bb:7b:79:2a:1d:cc:5a:6f:7e:2d:f2:6b:5c:78:71:46:8f:
         61:3c:be:b3:c8:6f:81:b8:37:61:bc:ea:86:a7:1b:5e:3c:ea:
         1d:79:0b:00:91:8e:f6:49:71:92:be:38:25:d3:52:69:11:a3:
         4f:b9:1e:33:d0:b6:1a:08:1e:25:70:ee:c3:36:f9:31:c9:87:
         c5:2f:3b:e8:ec:3a:e2:46:55:e0:00:06:d7:0b:f9:80:70:cc:
         09:fc:e7:34:ce:78:cd:55:6e:75:d1:46:47:a2:84:8d:b2:f4:
         79:d4:87:4d:94:48:7c:90:eb:93:75:ea:4b:be:ca:3c:85:93:
         d0:92:14:ab:a6:80:e3:ea:6b:f4:d3:7e:0a:33:e4:65:c7:b9:
         5c:0e:ed:ab:c6:44:70:bc:0a:eb:e6:c8:f4:bb:1f:7a:d9:3f:
         0c:cb:42:02:35:06:fe:fd:c4:49:8c:bf:5a:e8:bc:3c:d4:aa:
         63:60:94:15:a6:21:9a:c8:85:4d:61:2b:88:82:b6:82:54:45:
         bd:c3:d5:51:ce:8c:b0:79:02:60:e3:31:e9:39:bf:31:75:a9:
         85:e2:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----