Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/81f71a5d275511240dba0cd856cc7f793c6b308a.roa
File:                     81f71a5d275511240dba0cd856cc7f793c6b308a.roa (raw, json)
Hash identifier:          TJeY+qBD2LzTuKseQRrSVUCVloBhJ/2ert5iThsq+9Q=
Subject key identifier:   3B:DF:7F:C2:F2:1D:29:83:07:80:1A:11:A8:9D:E8:D2:EA:33:05:71
Certificate issuer:       /CN=cb8c7847a29802abe39fa572e7b5b375574964f8
Certificate serial:       BE2C
Authority key identifier: BA:F3:0F:5B:A4:1F:23:58:4F:95:31:76:48:EE:A7:30:CB:20:0A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb8c7847a29802abe39fa572e7b5b375574964f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/81f71a5d275511240dba0cd856cc7f793c6b308a.roa
Signing time:             Thu 14 Sep 2023 19:23:45 +0000
ROA not before:           Wed 13 Sep 2023 19:23:45 +0000
ROA not after:            Sun 14 Sep 2025 19:23:45 +0000
asID:                     273058
IP address blocks:        2803:c790::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48684 (0xbe2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb8c7847a29802abe39fa572e7b5b375574964f8
        Validity
            Not Before: Sep 13 19:23:45 2023 GMT
            Not After : Sep 14 19:23:45 2025 GMT
        Subject: CN=81f71a5d275511240dba0cd856cc7f793c6b308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:13:49:89:fe:2a:44:05:f4:d5:48:af:de:
                    a7:28:98:50:b8:7a:2d:c0:2c:8b:5b:f6:ae:da:24:
                    2e:03:a0:74:90:c6:29:d7:77:0c:f7:5f:20:1b:c4:
                    ff:8a:5b:51:e9:68:1c:18:5b:ce:3a:b9:3a:d8:3c:
                    ce:78:0e:4a:f3:e8:73:23:a5:8d:d0:f8:df:b7:31:
                    78:dd:69:97:cb:69:c6:62:74:21:f6:90:ad:61:17:
                    40:ad:0e:6e:7e:51:72:29:2f:3d:25:56:3c:de:71:
                    00:e7:8b:4c:95:00:d7:d0:c2:be:db:6c:99:38:2f:
                    c5:a3:85:cb:ef:40:16:34:31:9b:14:4f:ba:b4:aa:
                    f6:c2:74:d4:83:1c:74:b1:90:97:64:70:62:f7:64:
                    5d:01:c0:c0:3b:26:cb:d1:7e:ae:06:9a:ac:c5:8f:
                    8b:56:5f:40:05:40:84:fb:33:71:34:e1:6d:a6:da:
                    2e:45:db:44:a4:0c:e1:d7:fc:d9:36:33:e8:01:d1:
                    a7:ce:e0:18:61:25:c5:f5:6a:a7:f6:67:f0:41:1a:
                    53:36:c7:94:0b:88:af:9d:91:e8:87:6e:bd:aa:7e:
                    51:5b:c4:1d:08:c8:5e:ff:42:7e:43:66:90:ab:31:
                    2e:4c:56:53:8f:ab:07:b5:29:48:6c:47:7e:bd:cc:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:7F:C2:F2:1D:29:83:07:80:1A:11:A8:9D:E8:D2:EA:33:05:71
            X509v3 Authority Key Identifier:
                keyid:BA:F3:0F:5B:A4:1F:23:58:4F:95:31:76:48:EE:A7:30:CB:20:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb8c7847a29802abe39fa572e7b5b375574964f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/81f71a5d275511240dba0cd856cc7f793c6b308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/cb8c7847a29802abe39fa572e7b5b375574964f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c790::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:f5:ef:35:83:7d:87:1a:63:1e:ae:d0:37:47:78:81:58:
         69:60:34:78:4c:f2:bd:c0:34:e4:c4:b7:28:e5:3e:d5:5d:a5:
         83:34:ca:1e:50:e7:da:ea:7f:df:78:e2:a5:1e:12:e4:b8:25:
         01:74:72:b3:06:7c:b0:3d:5d:7a:5c:62:9b:d5:20:24:98:18:
         50:a9:2d:2f:1b:e7:2d:5b:f4:a3:ad:e3:e7:5a:e9:81:15:fb:
         bc:4b:75:7e:32:11:94:84:f1:e2:fe:7a:a6:26:24:00:6c:71:
         a7:3c:86:f9:2d:ff:dd:b5:e1:5f:e2:81:ba:3e:00:5f:be:26:
         f6:6f:00:e2:9b:33:c1:37:e0:e9:b4:81:82:09:91:48:e5:47:
         5c:85:5d:64:5f:06:1d:2c:81:26:ae:43:d9:ae:75:28:93:08:
         0e:21:1d:6d:4b:c9:6c:15:76:2f:3d:4e:86:ed:5d:f5:da:49:
         28:3f:12:08:ba:13:e3:f0:ab:02:bc:2f:05:63:60:8b:bd:0a:
         14:10:3f:f2:51:10:28:25:18:6b:08:dd:43:ee:4e:b7:5c:17:
         6b:91:4c:ea:42:53:cf:72:9e:27:d0:e0:e8:8a:89:88:02:28:
         f1:96:99:e4:37:63:3c:ab:02:c6:ef:04:82:dd:29:12:e0:a0:
         fb:39:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----