Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2232fe347eeb40afbd68d150d6a5935923399805.roa
File:                     2232fe347eeb40afbd68d150d6a5935923399805.roa (raw, json)
Hash identifier:          PNp/g+CNLrnaafwy+s5OyoKyqX6q5YVm0e6KvFI82Y8=
Subject key identifier:   4A:52:DC:53:F4:A9:D4:6D:89:19:C2:B5:30:61:80:2E:E9:44:15:2C
Certificate issuer:       /CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
Certificate serial:       17E171
Authority key identifier: 70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2232fe347eeb40afbd68d150d6a5935923399805.roa
Signing time:             Mon 15 Jan 2024 19:30:28 +0000
ROA not before:           Mon 15 Jan 2024 19:30:28 +0000
ROA not after:            Thu 15 Jan 2026 19:30:28 +0000
asID:                     52493
IP address blocks:        2803:5880::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565041 (0x17e171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603e7d46b70d7d73178e8bdda798f182daa1be7f
        Validity
            Not Before: Jan 15 19:30:28 2024 GMT
            Not After : Jan 15 19:30:28 2026 GMT
        Subject: CN=2232fe347eeb40afbd68d150d6a5935923399805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:87:41:95:85:00:3b:bd:52:61:72:b7:ed:
                    d9:0a:67:e1:e0:09:40:68:71:88:85:f3:a2:16:0e:
                    16:0c:32:80:16:6c:a3:96:cc:1f:f3:8f:80:d2:f7:
                    1b:5e:59:b1:36:ec:dc:63:38:96:1a:34:b6:99:90:
                    44:e9:3a:21:c0:87:6b:d0:59:f2:1f:ea:e8:ad:4b:
                    c1:be:55:eb:ce:1b:cc:79:64:a1:87:0f:ab:2a:a1:
                    3c:32:40:17:d1:68:78:81:3f:f4:3b:ca:a2:57:ef:
                    f3:b9:31:1a:fc:72:6e:47:49:8c:d3:91:0c:ff:66:
                    33:a0:37:c4:85:d9:a4:bf:9d:59:31:aa:5e:bf:63:
                    1f:5f:2a:a5:8e:08:4a:dd:5b:2a:2e:3d:bc:fa:fc:
                    d8:c0:42:f3:10:2a:2c:9a:28:f0:70:5a:c8:cc:b2:
                    cf:7d:61:3f:63:35:97:2e:6b:6b:ce:78:ea:a0:98:
                    9b:1e:a1:9d:b2:a5:11:e9:9e:8b:61:84:f1:cd:f1:
                    9e:fa:8b:fa:ab:14:68:29:64:76:f4:8d:10:8a:54:
                    cf:a7:36:cd:f3:e5:80:e4:ee:08:6e:96:fe:0f:f8:
                    4c:eb:27:cb:a6:3b:0f:cb:ff:e8:d2:69:67:a3:b1:
                    56:bf:ab:94:a5:0c:ce:a7:de:fb:56:00:47:22:ec:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:52:DC:53:F4:A9:D4:6D:89:19:C2:B5:30:61:80:2E:E9:44:15:2C
            X509v3 Authority Key Identifier:
                keyid:70:DF:AD:A4:EB:A7:E2:32:F9:61:87:2E:45:4C:D0:E6:0D:81:79:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/603e7d46b70d7d73178e8bdda798f182daa1be7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/2232fe347eeb40afbd68d150d6a5935923399805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90934775-c878-4439-a184-f55526519fdc/603e7d46b70d7d73178e8bdda798f182daa1be7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:17:bf:16:7d:42:29:de:f4:c6:bc:e2:ae:90:bd:6f:a2:a6:
         72:7c:44:cf:99:c0:91:6d:ef:20:fd:0a:90:87:08:bc:8d:c1:
         01:3c:44:30:16:5b:5f:11:27:af:67:70:6c:00:84:b0:30:da:
         ef:97:b4:2b:f7:7e:59:8e:c1:8b:48:fb:19:c9:73:a4:50:79:
         e4:9b:7f:a4:48:06:92:25:72:dd:45:7f:f3:3e:a9:ca:33:ad:
         59:e4:c5:85:03:95:2d:ab:a7:73:e8:61:5e:78:59:81:e7:7f:
         0f:53:60:e9:8f:c8:2b:f8:2a:19:07:bd:cd:4a:c2:cc:31:fc:
         53:1b:0c:a5:4f:20:fe:b0:dc:6a:e2:d4:7c:6b:d4:72:d5:49:
         b8:80:f7:76:21:8b:ea:c4:9b:72:5b:42:a1:cf:38:47:73:e8:
         25:12:9e:cb:f5:bc:6c:6c:d0:ac:a7:dd:9d:97:53:50:f1:c2:
         ce:25:d6:40:ad:43:df:16:88:53:22:e9:07:41:3e:0a:93:3a:
         ac:59:2d:da:dd:47:07:ae:83:a4:c1:be:99:2f:73:89:20:56:
         9d:28:07:db:93:e0:16:ab:51:43:66:47:af:1b:e6:59:98:e7:
         da:00:21:f6:ec:4e:79:24:16:89:df:be:9b:17:88:f5:58:32:
         83:90:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----