Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/44a9c3c163026398ce5573c272faf1f87a876408.roa
File:                     44a9c3c163026398ce5573c272faf1f87a876408.roa (raw, json)
Hash identifier:          5zBYIqTg4VuHHsrMdOkG3c9Dnq1YcT6EFp0C1brz39U=
Subject key identifier:   48:94:06:3B:84:79:D6:59:8E:F3:3B:6D:4F:33:22:7C:9D:6B:B2:6F
Certificate issuer:       /CN=f8d93c5107f48e2fc590fd12241c7c6d150bba57
Certificate serial:       07C2C3
Authority key identifier: D4:98:04:F6:EA:16:9D:CA:96:36:31:01:62:EC:C0:42:D5:1F:A3:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8d93c5107f48e2fc590fd12241c7c6d150bba57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/44a9c3c163026398ce5573c272faf1f87a876408.roa
Signing time:             Thu 22 Feb 2024 17:17:23 +0000
ROA not before:           Thu 22 Feb 2024 17:17:23 +0000
ROA not after:            Sun 22 Feb 2026 17:17:23 +0000
asID:                     272869
IP address blocks:        2803:7290:201::/48 maxlen: 48
                          2803:7290:202::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508611 (0x7c2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d93c5107f48e2fc590fd12241c7c6d150bba57
        Validity
            Not Before: Feb 22 17:17:23 2024 GMT
            Not After : Feb 22 17:17:23 2026 GMT
        Subject: CN=44a9c3c163026398ce5573c272faf1f87a876408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:7a:58:a0:5f:b4:d0:72:69:c4:ea:34:ed:
                    23:63:44:d5:13:3f:d9:b6:01:3f:8d:77:c4:fc:ca:
                    65:c8:19:ad:36:1e:68:06:54:c9:7f:fc:ba:ed:80:
                    2d:33:cb:d1:4c:f8:70:a2:53:44:2b:f7:f0:b8:26:
                    a9:33:36:2b:83:6d:b7:ea:1b:b8:5e:f7:e1:ed:1e:
                    4f:d2:0c:20:72:43:95:4c:48:33:75:cb:7f:f7:dd:
                    6e:33:f1:18:ec:7d:4e:df:df:79:d8:ae:ae:cb:17:
                    40:20:0d:79:67:55:a8:b6:f8:e2:b9:47:5c:c9:10:
                    d1:46:ab:82:92:27:7b:6c:f2:2d:79:21:30:07:d5:
                    9b:be:9f:ac:19:27:11:7f:e6:45:66:8d:6d:1e:e7:
                    90:1e:3a:79:a7:19:bb:9a:8a:47:46:fc:03:dd:f0:
                    f2:3e:36:d7:e0:80:c5:b0:00:35:fd:55:46:4e:32:
                    b9:54:dd:97:28:b0:3c:4c:3c:f3:30:ed:77:29:67:
                    24:27:46:de:fb:41:24:e0:25:ad:44:cb:cc:c4:b9:
                    88:86:98:0f:32:86:ab:f7:87:77:71:8f:2c:f4:66:
                    ef:d8:37:26:5e:4b:08:43:76:4f:29:95:1a:d5:3d:
                    7a:8d:a4:5e:14:f9:ae:a8:53:91:04:e2:1d:59:00:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:06:3B:84:79:D6:59:8E:F3:3B:6D:4F:33:22:7C:9D:6B:B2:6F
            X509v3 Authority Key Identifier:
                keyid:D4:98:04:F6:EA:16:9D:CA:96:36:31:01:62:EC:C0:42:D5:1F:A3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8d93c5107f48e2fc590fd12241c7c6d150bba57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/44a9c3c163026398ce5573c272faf1f87a876408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bd462d-efd2-45b7-b5c7-d759885f5428/f8d93c5107f48e2fc590fd12241c7c6d150bba57.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:201::-2803:7290:202:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:47:03:2d:d5:37:23:d0:61:43:25:b6:cd:35:41:83:84:
         1c:cb:24:d7:1f:72:a8:a9:da:25:54:df:94:74:f0:d0:9e:dd:
         a0:29:27:d6:a4:c4:77:eb:cd:0c:f4:3d:c8:fc:43:51:67:5d:
         e9:28:43:51:0a:6b:07:77:6f:57:c7:85:6a:5b:70:b1:e8:15:
         f7:ef:10:b1:ab:5b:96:87:6f:e9:05:51:ff:4c:e6:a9:83:67:
         8f:ff:e8:a0:29:3f:14:80:82:b1:25:15:52:4f:62:8c:53:8f:
         18:ba:4e:d0:8f:d2:6e:7a:7e:4e:b3:f7:97:39:35:93:d2:e7:
         a9:e9:ab:1d:0b:2e:83:35:1b:e7:7b:46:73:ba:6d:8e:b6:44:
         f1:08:05:60:aa:d0:dd:11:64:5b:bd:2d:9f:6c:2c:ac:88:b2:
         dc:42:34:20:fd:4c:3d:db:b9:2b:8b:5b:57:b5:05:e7:b5:6e:
         60:32:99:b8:82:ba:6c:01:cd:27:8c:49:44:1a:3a:56:83:6b:
         3f:f3:66:c4:c3:3e:27:f8:4f:7f:08:af:db:f1:7a:61:ff:ef:
         f0:30:d2:08:bc:1e:92:2f:a9:22:c2:25:d0:41:a3:3f:5c:9e:
         52:b9:e7:89:cd:d1:5f:e0:d4:05:5f:37:1b:66:38:e4:f0:f4:
         2c:0d:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----