Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/d58fc5d313f8fa56d80edba07e0b00bcf110306e.roa
File:                     d58fc5d313f8fa56d80edba07e0b00bcf110306e.roa (raw, json)
Hash identifier:          0nYoAC7X11MaPq3njWyabPDa22IpI73NfxYPaI3yM9U=
Subject key identifier:   F1:7D:9E:68:7F:F8:96:E0:6C:5B:F9:4E:CB:3B:6A:2A:4E:BF:A5:5F
Certificate issuer:       /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial:       244740
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/d58fc5d313f8fa56d80edba07e0b00bcf110306e.roa
Signing time:             Sat 16 Sep 2023 06:39:36 +0000
ROA not before:           Fri 15 Sep 2023 06:39:36 +0000
ROA not after:            Tue 16 Sep 2025 06:39:36 +0000
asID:                     262234
IP address blocks:        2803:db00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2377536 (0x244740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Validity
            Not Before: Sep 15 06:39:36 2023 GMT
            Not After : Sep 16 06:39:36 2025 GMT
        Subject: CN=d58fc5d313f8fa56d80edba07e0b00bcf110306e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:49:5e:67:fc:d4:28:36:c3:b4:0d:56:03:
                    f6:d9:a4:16:9c:fe:01:bc:56:40:6f:b3:5a:c0:2e:
                    65:76:1a:c3:d7:43:2b:21:1a:0b:a9:f1:fb:02:1e:
                    51:df:8a:3c:00:e3:97:b7:5b:1c:a1:2e:da:35:2f:
                    e2:5c:5c:c9:77:b6:89:d8:dd:aa:01:5c:2e:52:ee:
                    1b:e0:a5:eb:5e:13:6c:5c:55:59:e0:17:4e:a1:11:
                    fd:71:35:d0:b7:bd:82:82:87:fd:fe:be:7b:13:1b:
                    a5:30:37:45:d7:c1:21:0e:bb:bb:af:66:1d:89:67:
                    af:97:97:73:49:65:8f:4c:0c:3a:25:2c:11:00:2f:
                    63:b7:dd:57:90:00:15:be:1a:c2:42:1d:cf:7a:03:
                    59:28:5b:f0:af:3d:64:0f:0e:cf:f8:1c:70:b9:4b:
                    e7:30:e2:cc:b9:ae:b6:60:43:c9:32:8f:f2:d8:69:
                    08:f5:ef:ba:a8:17:00:22:ab:cf:f4:42:c0:38:f9:
                    b6:f1:2a:17:ce:b2:e4:3b:70:cb:d0:9a:e1:34:8d:
                    55:9b:bd:76:e9:b5:44:e8:a0:34:c1:15:7b:7b:7a:
                    36:32:8c:b6:d5:1b:a9:fc:30:0e:ab:b0:fc:0f:fd:
                    68:59:53:b1:91:62:c5:8f:ff:5e:fd:37:51:6a:4c:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:9E:68:7F:F8:96:E0:6C:5B:F9:4E:CB:3B:6A:2A:4E:BF:A5:5F
            X509v3 Authority Key Identifier:
                keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/d58fc5d313f8fa56d80edba07e0b00bcf110306e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:db:91:e8:de:9c:73:c0:d6:bd:a4:36:cb:0e:cc:cd:6a:a5:
         b3:69:f8:03:85:a1:15:b9:d8:b0:13:b5:e4:f1:ea:44:e1:a9:
         ac:9b:c3:82:b0:0e:3f:a6:c3:2c:0c:c9:a1:76:cc:ac:04:ba:
         2d:de:a8:c1:f1:17:86:f6:90:7f:db:f2:ae:72:7b:d3:e3:86:
         6d:a7:99:85:a0:1c:8f:12:6d:d9:c2:e4:88:06:ec:81:62:c0:
         4d:13:7f:2e:51:5d:e9:a9:1f:fa:5b:af:8b:a6:ab:14:6d:9d:
         83:0c:fa:48:ae:6b:f9:ee:e4:97:42:90:ac:27:ff:95:f6:6b:
         3c:7a:1e:27:cb:83:35:40:f1:13:af:87:d7:c0:a5:3e:af:81:
         bc:de:cc:ed:b0:3d:24:03:81:65:26:08:9d:00:b2:fa:30:cc:
         ca:1c:75:d6:25:00:44:85:e4:fb:4f:ff:86:e3:35:b0:db:7c:
         a6:0a:ab:53:6f:d0:c8:33:30:97:ae:80:e8:05:a4:19:f5:fb:
         92:cc:22:ed:17:6b:ae:05:a1:b8:eb:72:06:15:ea:2d:5d:42:
         37:5e:ef:a6:f9:d2:be:7e:bc:d1:71:1a:41:95:19:41:84:68:
         00:32:d0:82:ae:13:44:ee:b6:b3:5f:b3:35:a4:75:e3:6f:c6:
         af:54:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----