Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/3d152aa0f96bf0707979b755f92107ff60c0ebb3.roa
File:                     3d152aa0f96bf0707979b755f92107ff60c0ebb3.roa (raw, json)
Hash identifier:          gzjwJemfRangA5Md7F1FMHxxu6G82d7LRXogTu0t2m0=
Subject key identifier:   E2:6C:B6:4C:90:72:F4:85:C6:CF:8F:2D:D2:5B:7C:17:9C:C9:92:AE
Certificate issuer:       /CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
Certificate serial:       25041D
Authority key identifier: E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/3d152aa0f96bf0707979b755f92107ff60c0ebb3.roa
Signing time:             Tue 23 Jan 2024 15:31:42 +0000
ROA not before:           Tue 23 Jan 2024 15:31:42 +0000
ROA not after:            Tue 23 Jan 2029 15:31:42 +0000
asID:                     269726
IP address blocks:        2803:4160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425885 (0x25041d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ef0bf45eb95f428a97e23652586ee37cd91ffc
        Validity
            Not Before: Jan 23 15:31:42 2024 GMT
            Not After : Jan 23 15:31:42 2029 GMT
        Subject: CN=3d152aa0f96bf0707979b755f92107ff60c0ebb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:b7:09:95:13:36:02:a7:38:21:b8:63:26:
                    fe:26:c8:d8:48:cc:77:ff:6e:5c:83:db:59:44:a9:
                    bc:38:cd:59:24:71:5e:f6:f9:58:71:a7:ed:d9:eb:
                    b3:62:3a:31:45:b5:4e:70:df:fc:9e:9b:e4:4b:d5:
                    a2:9c:81:bc:13:c3:0c:1b:d6:46:16:37:2b:cf:48:
                    5d:e1:ea:b9:87:fd:0e:e7:34:19:33:6f:7b:e3:e8:
                    c8:51:6a:7c:df:cb:59:37:01:d8:28:2d:68:6e:26:
                    34:3d:3b:77:3b:28:44:47:3a:4a:fa:25:ba:25:88:
                    8e:6f:bd:d0:03:11:e5:39:4a:dc:14:74:a2:c0:ee:
                    48:8d:e6:62:72:ce:88:a0:bd:52:ce:40:ed:c5:51:
                    bb:b9:1b:a8:2c:c6:fa:62:3b:7a:1e:a2:1a:86:70:
                    c6:d7:7f:a1:96:03:a0:d3:2f:33:23:ac:06:ce:c8:
                    52:1f:15:57:5e:10:85:34:42:51:04:58:50:01:39:
                    31:08:15:f2:45:c3:29:f0:87:92:d5:80:c2:a5:7d:
                    c7:d9:87:fd:d7:e9:6f:fe:39:9d:0f:36:a6:e8:23:
                    34:e6:cd:38:0a:7c:55:51:06:78:c4:fb:df:68:09:
                    4c:70:7e:3c:f7:68:5f:3d:00:2f:44:2e:1f:a4:3c:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6C:B6:4C:90:72:F4:85:C6:CF:8F:2D:D2:5B:7C:17:9C:C9:92:AE
            X509v3 Authority Key Identifier:
                keyid:E9:BF:A2:98:FE:95:53:BA:A0:B8:D5:53:0A:B5:55:82:B7:45:F4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ef0bf45eb95f428a97e23652586ee37cd91ffc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/3d152aa0f96bf0707979b755f92107ff60c0ebb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/90ef0bf45eb95f428a97e23652586ee37cd91ffc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4160::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:73:41:33:d4:ad:32:eb:2b:73:4b:75:45:be:e2:64:a2:
         f6:e0:70:74:c6:76:b5:55:8b:93:6d:ba:70:66:27:cf:cc:70:
         ab:19:31:7a:01:97:25:31:f8:00:0a:1b:65:4c:41:2c:2c:1c:
         1c:39:57:cf:3f:20:aa:15:26:47:43:1b:0b:12:45:51:ea:02:
         1d:41:c9:f6:2d:f9:12:36:4e:a0:dc:11:b4:56:68:4b:ab:d6:
         6d:b7:4e:6a:e3:75:84:1d:3d:c3:2b:62:c3:75:e8:21:2e:5f:
         aa:31:ee:7b:5b:59:15:f5:1b:76:be:36:c0:b5:b3:e3:6d:a9:
         81:93:4a:af:6f:1c:95:dc:4f:a8:cb:e3:76:75:80:56:b2:8c:
         9a:f7:09:51:de:da:3e:69:81:dc:d8:a4:07:a0:1a:aa:fa:f0:
         4a:ab:17:08:95:08:82:72:2b:22:f5:02:f8:8d:53:e1:8d:93:
         43:d8:6d:d6:5d:57:54:6d:c6:28:b1:ae:fc:cb:e2:ae:bb:a6:
         b6:41:08:1d:38:ae:64:cb:7e:d0:54:65:d4:77:c2:82:7b:ee:
         4b:7b:f9:e8:ee:04:58:e6:dd:1a:46:bc:fc:2e:e2:54:d8:32:
         8f:13:2f:f1:62:2d:f7:9e:4e:b2:37:27:54:0d:3c:9e:48:60:
         cd:1f:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----