Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/a180e352cfc4172b24ecd8045bdbf68d7e90a342.roa
File:                     a180e352cfc4172b24ecd8045bdbf68d7e90a342.roa (raw, json)
Hash identifier:          hV6qMMX8vcmuHIASH896rjDmRZG4rGnJFB3he2SOMoA=
Subject key identifier:   0C:48:D7:80:4C:6F:66:12:48:ED:59:45:0C:68:77:23:D7:99:83:D9
Certificate issuer:       /CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
Certificate serial:       244F67
Authority key identifier: 44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/a180e352cfc4172b24ecd8045bdbf68d7e90a342.roa
Signing time:             Tue 17 Oct 2023 20:23:39 +0000
ROA not before:           Mon 16 Oct 2023 20:23:38 +0000
ROA not after:            Tue 17 Oct 2028 20:23:38 +0000
asID:                     265815
IP address blocks:        2803:b820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379623 (0x244f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
        Validity
            Not Before: Oct 16 20:23:38 2023 GMT
            Not After : Oct 17 20:23:38 2028 GMT
        Subject: CN=a180e352cfc4172b24ecd8045bdbf68d7e90a342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:03:8c:7b:27:41:49:ce:c4:3e:14:c1:63:
                    24:e2:63:63:36:34:73:f8:2f:30:00:2e:7a:f6:74:
                    16:33:75:bd:0b:98:48:25:4d:3f:53:47:65:3f:c6:
                    ad:1c:38:cf:cf:81:70:a9:ad:8f:57:da:55:3a:c7:
                    c3:f5:bb:af:5e:1f:e3:8c:39:de:1f:95:27:63:c4:
                    de:17:ba:f3:de:d3:23:73:ff:97:0a:7d:e2:80:b3:
                    55:cf:e6:ae:ad:6c:1a:11:36:5e:da:18:e6:b8:3a:
                    75:e3:84:a6:92:e8:48:cc:65:fc:db:01:d6:29:a4:
                    35:7f:51:19:a5:d9:36:2e:ba:50:f4:2f:c4:5f:76:
                    7a:98:f8:ff:c0:9f:7a:43:90:ce:fa:19:a3:d8:ad:
                    8b:a4:30:24:7f:21:0b:77:b6:9c:2a:03:ba:cc:c0:
                    04:52:e3:ea:e5:73:31:48:5c:f9:5a:6e:82:fa:a3:
                    dd:25:af:ab:0a:75:94:19:7d:a8:dd:7a:7e:0b:82:
                    5c:2c:76:17:0e:ce:f2:12:e2:6b:ef:24:f1:eb:bf:
                    5d:7b:91:1c:a3:83:75:5b:64:21:39:96:08:52:03:
                    43:eb:e1:83:40:98:c5:8e:35:25:0b:87:50:ec:ee:
                    43:f6:ee:9c:42:83:b0:f8:63:27:f7:ca:3f:a2:1c:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:48:D7:80:4C:6F:66:12:48:ED:59:45:0C:68:77:23:D7:99:83:D9
            X509v3 Authority Key Identifier:
                keyid:44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/a180e352cfc4172b24ecd8045bdbf68d7e90a342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b820::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:76:a8:d1:59:c3:de:f9:34:eb:39:a2:96:94:a5:d5:d2:
         00:db:ae:44:72:3c:21:05:5c:f7:16:4f:63:11:1b:8d:de:43:
         a0:ad:09:0c:40:52:d1:9d:27:84:53:bc:ba:95:fa:47:21:df:
         be:f9:73:69:0b:de:78:f9:16:d6:dd:d9:df:c8:fe:12:46:a3:
         29:63:9d:1b:72:a3:6b:d0:ba:56:5a:60:5d:90:63:84:0f:69:
         dc:92:df:1d:f2:73:36:d3:29:d3:fb:59:6e:0b:9f:b9:f2:01:
         1a:fe:2c:9f:e2:6b:49:92:bb:12:bf:a4:2a:28:ba:4c:4e:49:
         45:ad:de:bd:14:c6:4c:3c:a3:ac:88:c3:2c:43:40:2c:9f:24:
         b9:db:00:d3:b6:ff:be:2c:8d:cb:89:76:8e:af:3a:0e:6f:c9:
         9e:0a:08:7c:fa:da:9e:66:1b:7c:e1:97:73:b1:e5:fa:68:36:
         f2:3a:74:26:bc:02:26:bf:c8:ab:cc:1a:ab:d5:60:9f:69:fb:
         da:ac:5c:36:06:c5:ad:70:b3:bb:29:c9:10:ab:21:4e:17:8f:
         6e:a7:2c:bc:5f:3f:38:74:92:0e:13:76:d5:9d:28:05:99:53:
         39:ff:16:c7:e1:d6:7f:c6:3e:b8:bf:3a:83:5f:3c:92:93:f6:
         45:ca:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----