Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/c9a15798033359845a1eee444feb8121ca0810c7.roa
File:                     c9a15798033359845a1eee444feb8121ca0810c7.roa (raw, json)
Hash identifier:          W+W2sjE3go4EL8ewYvr6UPAaRzp1unKfch/ScPrxg64=
Subject key identifier:   CB:1F:0F:25:5B:DD:80:F8:77:89:F4:A8:F1:5D:79:EE:5B:66:67:3A
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B645C
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/c9a15798033359845a1eee444feb8121ca0810c7.roa
Signing time:             Mon 05 Feb 2024 20:50:58 +0000
ROA not before:           Mon 05 Feb 2024 20:50:58 +0000
ROA not after:            Thu 05 Feb 2026 20:50:58 +0000
asID:                     52468
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746588 (0xb645c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Feb  5 20:50:58 2024 GMT
            Not After : Feb  5 20:50:58 2026 GMT
        Subject: CN=c9a15798033359845a1eee444feb8121ca0810c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:24:fc:57:c3:41:eb:c1:78:10:f4:0f:9d:
                    c1:32:0f:b5:cb:61:fd:29:8e:2f:62:4e:05:8c:87:
                    7b:db:1d:ce:88:57:14:a2:12:8a:2e:7c:70:fe:11:
                    4c:80:d5:b5:23:04:ae:ae:a2:bd:f8:7f:42:87:09:
                    cf:1f:55:f3:43:d1:44:0a:31:e6:67:4f:3c:cd:67:
                    b4:0c:ca:be:58:e7:77:b9:78:be:9c:df:38:68:d2:
                    c7:af:29:69:63:a3:9c:75:03:4f:76:0c:85:84:42:
                    3f:5c:de:95:08:90:30:fb:4f:91:3c:e2:ce:2a:b8:
                    68:29:7f:c4:bf:a2:17:79:db:d2:15:90:a1:44:47:
                    fe:88:af:d2:3f:40:1d:be:31:14:b9:f1:d1:61:9d:
                    fd:39:b0:71:01:55:48:62:d4:4f:0c:a9:2b:ff:b7:
                    41:7d:91:94:e7:70:0c:e4:11:0e:4e:87:d9:e2:94:
                    2b:a2:61:11:02:5c:ce:62:f9:da:1d:b4:99:f3:f3:
                    8d:dc:d7:03:66:83:11:97:bc:e7:74:4b:0c:b5:55:
                    27:02:64:ba:22:d4:27:ea:6a:be:5e:96:5e:50:35:
                    ad:77:1f:8d:79:b2:b3:a7:86:46:67:2b:a4:99:a6:
                    e8:86:0f:26:56:af:6f:e2:0d:45:35:94:dd:69:48:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:0F:25:5B:DD:80:F8:77:89:F4:A8:F1:5D:79:EE:5B:66:67:3A
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/c9a15798033359845a1eee444feb8121ca0810c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:69:f0:3e:16:fd:cb:f5:73:1d:54:69:36:e4:aa:68:58:
         23:c8:87:b8:e3:fc:66:39:78:cd:0e:3d:d6:75:f8:bb:a5:9a:
         37:94:6f:1a:a8:58:29:d1:60:5c:ce:54:ae:60:16:d7:2b:a8:
         43:70:09:8d:af:1e:58:e1:91:a4:45:ae:63:32:c8:fb:a9:6a:
         fc:b1:32:f8:b3:18:8a:65:26:07:a1:9e:76:fa:82:4a:34:5e:
         8a:0c:24:8d:ea:a3:14:58:4e:10:ec:7a:24:3d:dc:05:c5:80:
         6c:ec:1f:18:af:20:ef:15:b5:22:00:d5:51:5c:a5:89:51:48:
         0d:e2:bd:e2:dc:2a:65:0c:1a:fe:a0:96:8e:e9:b9:24:a2:c9:
         10:f3:14:92:91:2b:b7:df:3d:96:14:99:65:b0:df:8d:89:5d:
         e9:78:c4:e8:d6:fa:c4:c2:3a:a1:fc:10:1c:0f:a9:fe:8a:5d:
         26:a9:0c:26:b2:d1:e2:48:94:05:07:ee:bb:bb:4d:ad:65:54:
         3a:18:b3:e4:c5:13:38:49:78:28:9b:23:09:c3:13:c2:06:fe:
         47:5b:2b:18:cb:96:47:7f:32:d5:f7:d8:27:60:4b:75:bd:8d:
         a9:92:63:a0:52:e4:f9:be:bc:88:76:b7:88:71:a9:2a:07:1e:
         b1:be:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----