Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/c9a492f59ba1284e41c6c1ef809925e7ca0c4f5d.roa
File:                     c9a492f59ba1284e41c6c1ef809925e7ca0c4f5d.roa (raw, json)
Hash identifier:          vZ91AIhRwgXrsmuo0cjkrzbSltO0g8qQUj80zJceScs=
Subject key identifier:   D2:80:0D:1F:67:2C:06:04:D2:CA:CC:3C:0A:0F:F7:E4:47:88:76:E6
Certificate issuer:       /CN=3e274a94d4ee6153833a6db3e5ec7df79886884d
Certificate serial:       6E98
Authority key identifier: B7:3E:9A:B6:2A:3E:4F:33:DC:51:81:E7:DA:47:37:A4:74:14:DF:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e274a94d4ee6153833a6db3e5ec7df79886884d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/c9a492f59ba1284e41c6c1ef809925e7ca0c4f5d.roa
Signing time:             Fri 22 Mar 2024 15:56:23 +0000
ROA not before:           Fri 22 Mar 2024 15:56:23 +0000
ROA not after:            Sun 22 Mar 2026 15:56:23 +0000
asID:                     273195
IP address blocks:        2803:c650::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28312 (0x6e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e274a94d4ee6153833a6db3e5ec7df79886884d
        Validity
            Not Before: Mar 22 15:56:23 2024 GMT
            Not After : Mar 22 15:56:23 2026 GMT
        Subject: CN=c9a492f59ba1284e41c6c1ef809925e7ca0c4f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:66:dc:62:0e:d1:83:14:a8:fd:ca:b3:41:
                    70:e3:79:47:dc:63:54:11:fb:a0:94:54:2c:bc:6a:
                    b7:44:d8:ab:e0:a5:28:da:e2:02:94:c6:c9:2c:3d:
                    38:88:f2:8b:0d:3c:74:54:da:20:0d:ed:6f:68:44:
                    59:0b:44:5a:2b:05:3f:3b:c1:28:9a:4f:ef:33:02:
                    67:e4:a6:f5:da:02:bb:6f:d2:5a:80:ed:b1:31:40:
                    02:90:3a:89:2d:70:4a:42:31:7c:5a:0c:1f:5e:1b:
                    5c:86:58:77:93:63:4a:cb:43:a9:6f:14:9c:d5:e7:
                    88:73:07:af:ad:63:99:d9:cd:ca:f8:78:76:71:be:
                    80:f3:7e:37:01:b1:39:55:b8:5e:d4:91:68:8a:00:
                    3b:2a:b8:57:33:e2:8f:c3:56:d2:04:fd:d5:9a:1f:
                    56:4f:66:8e:b0:68:95:4a:7c:42:eb:0a:a3:62:31:
                    f0:be:65:69:d9:7f:d3:97:40:cd:d5:ca:b1:94:d2:
                    3f:0f:1b:42:8f:94:b2:9d:16:87:8a:6d:39:06:6c:
                    fe:58:2f:b4:1e:0c:07:c0:7e:c6:6b:e7:5b:55:0c:
                    65:c7:d5:66:df:04:b1:f3:9f:6e:50:1d:61:d1:f0:
                    e4:27:0f:05:3f:c0:f6:48:b1:fb:05:54:bc:9f:f5:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:0D:1F:67:2C:06:04:D2:CA:CC:3C:0A:0F:F7:E4:47:88:76:E6
            X509v3 Authority Key Identifier:
                keyid:B7:3E:9A:B6:2A:3E:4F:33:DC:51:81:E7:DA:47:37:A4:74:14:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e274a94d4ee6153833a6db3e5ec7df79886884d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/c9a492f59ba1284e41c6c1ef809925e7ca0c4f5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/3e274a94d4ee6153833a6db3e5ec7df79886884d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c650::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:07:1a:25:e9:c5:a1:69:d5:31:af:17:3b:bb:30:56:a8:fe:
         6c:6f:93:1a:50:cf:1f:07:f9:e5:36:c3:c2:37:34:10:3c:0c:
         a8:17:1e:8d:c5:2b:a9:76:42:38:7a:1e:1f:90:e6:5e:87:c2:
         6d:57:c1:04:de:d0:3b:eb:21:66:fa:33:6f:d6:9a:75:9a:d4:
         f8:87:fe:a4:87:ee:4f:bc:58:ae:63:a4:63:02:5b:0c:1d:e0:
         b1:20:df:14:90:43:af:32:d6:30:d7:06:86:06:a7:0f:58:38:
         99:e9:8f:1c:b4:d3:9b:29:5d:29:97:c3:6d:41:9e:4c:43:1d:
         1d:f3:41:0f:36:2f:0f:d0:ac:b9:17:07:07:96:e0:e7:03:21:
         a7:d8:ea:5c:c1:39:1f:fb:e2:39:59:05:72:d9:f4:69:79:94:
         e0:a9:17:4d:0e:18:a7:90:65:5a:6c:fa:59:c7:99:a8:66:f5:
         32:42:5b:71:17:cc:4c:35:3e:4f:52:04:a6:18:8d:09:e8:43:
         0d:1c:95:f3:4f:d3:67:df:50:cf:b0:03:b5:1e:d5:41:e0:28:
         09:24:a4:66:d2:13:e2:fa:e9:e3:d2:7a:62:ca:70:74:7f:a7:
         14:7d:77:1b:95:50:c7:73:77:f2:99:68:52:c8:06:72:21:d6:
         20:32:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----