Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/5c09ab59df6fdb700729019541b49d9a374655a6.roa
File:                     5c09ab59df6fdb700729019541b49d9a374655a6.roa (raw, json)
Hash identifier:          qd4SD8T/gccSlZFGxo/+OcYEaVvq08skhHokzQXP4Fo=
Subject key identifier:   AB:87:09:3E:9B:31:82:FD:80:F1:DF:CA:79:BE:6C:40:76:6A:D5:D7
Certificate issuer:       /CN=6bb82b6c2e596f94faec529073ab86707bc06fb6
Certificate serial:       112787
Authority key identifier: 57:E9:CC:0A:4D:35:6B:0F:39:35:7E:5D:AB:75:29:C0:1B:4A:E4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6bb82b6c2e596f94faec529073ab86707bc06fb6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/5c09ab59df6fdb700729019541b49d9a374655a6.roa
Signing time:             Tue 26 Mar 2024 20:02:45 +0000
ROA not before:           Tue 26 Mar 2024 20:02:45 +0000
ROA not after:            Thu 26 Mar 2026 20:02:45 +0000
asID:                     272102
IP address blocks:        2803:e710::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124231 (0x112787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb82b6c2e596f94faec529073ab86707bc06fb6
        Validity
            Not Before: Mar 26 20:02:45 2024 GMT
            Not After : Mar 26 20:02:45 2026 GMT
        Subject: CN=5c09ab59df6fdb700729019541b49d9a374655a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:07:35:62:87:ba:31:3b:db:92:3f:97:e4:
                    60:ac:a4:c5:58:0f:67:76:76:02:04:25:17:dd:55:
                    56:4c:03:56:8e:f6:a9:f5:40:0f:9f:2e:e7:25:74:
                    52:d5:7c:d6:22:1b:48:b1:f1:6c:3e:eb:99:43:b9:
                    8f:f3:48:77:5a:76:57:ac:1b:75:ec:78:60:b7:8f:
                    db:5b:db:b6:d7:e4:80:46:5a:24:9e:61:eb:a1:5b:
                    b7:56:63:01:c9:25:f9:57:eb:70:44:b3:eb:57:59:
                    cb:f7:56:aa:88:cb:ed:f0:18:59:48:f3:8d:68:1c:
                    58:f7:08:00:c4:5c:d5:c3:34:9f:20:72:9e:57:62:
                    24:66:7d:55:dd:61:e4:3a:91:3a:3a:15:a9:75:45:
                    54:10:a6:d6:de:ab:f2:3d:cc:5f:a3:ff:9c:d7:7e:
                    79:8a:b9:e6:38:99:aa:87:12:e6:45:f1:62:a0:34:
                    9d:b9:ee:da:1e:c7:8b:18:6e:86:ec:fe:85:dd:ab:
                    80:a7:90:9b:68:02:68:72:9b:fa:08:df:81:f2:44:
                    09:fc:1a:b8:f4:df:0d:ad:83:e0:2d:e2:9c:d8:e9:
                    10:2d:8b:a8:3e:38:1a:4a:0e:76:b8:c9:71:52:c1:
                    2c:72:16:45:1b:91:37:e8:e1:59:6a:66:22:f7:72:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:09:3E:9B:31:82:FD:80:F1:DF:CA:79:BE:6C:40:76:6A:D5:D7
            X509v3 Authority Key Identifier:
                keyid:57:E9:CC:0A:4D:35:6B:0F:39:35:7E:5D:AB:75:29:C0:1B:4A:E4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6bb82b6c2e596f94faec529073ab86707bc06fb6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/5c09ab59df6fdb700729019541b49d9a374655a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e64ec4a-cca6-4e2e-adc6-17fa33c60a78/6bb82b6c2e596f94faec529073ab86707bc06fb6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e710::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:7f:70:02:2a:f5:e8:35:2d:f6:69:18:84:47:35:78:41:
         f4:8d:7d:88:2f:d0:dd:1c:75:8a:a3:40:4a:51:95:00:b9:16:
         8c:91:9a:bf:b0:eb:db:45:e2:38:ec:b9:66:53:6e:6e:32:f9:
         71:3a:21:1e:51:81:6c:34:94:0a:fe:a4:6f:79:4f:a8:ee:9d:
         c6:cd:a9:f2:8b:e8:f1:dd:10:63:aa:67:49:e7:9b:a9:ca:7a:
         2c:79:14:55:3c:4b:be:cf:46:6b:3f:01:3a:5f:3f:d9:af:64:
         30:cf:06:d8:1e:9e:f8:e7:2b:e0:12:a6:3d:ca:fe:84:87:79:
         c9:a6:f8:82:d9:69:a3:8e:ca:c6:3c:c4:6b:26:60:69:b6:25:
         8c:a1:58:6d:1e:cc:51:d1:b4:11:a5:8c:69:05:33:61:5a:28:
         55:19:e6:f0:2e:48:c1:6b:1f:42:e0:10:3c:7a:d6:dc:cc:6f:
         41:da:75:50:fd:23:4a:6f:d9:7f:c6:25:4a:04:3e:7e:17:df:
         b7:85:5f:25:6b:cc:db:d2:84:f8:0c:ee:9d:05:f9:5a:0e:6b:
         ff:97:af:33:bb:7b:8e:d2:47:42:59:ee:c1:98:bd:ff:f2:ce:
         b1:c9:9c:03:d0:aa:cb:64:eb:67:ac:f5:37:ed:51:b1:4f:63:
         c8:27:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----