Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/21bac2053682cc9add652ea93beb5adda359525d.roa
File:                     21bac2053682cc9add652ea93beb5adda359525d.roa (raw, json)
Hash identifier:          Xpm8Zj4FENih7c4A9JLcaNcMdO1BA4PRt7+yNl2zDmA=
Subject key identifier:   72:7D:04:F3:47:A2:A7:7E:58:67:98:F7:38:7F:E8:95:71:EE:2E:9A
Certificate issuer:       /CN=ed1a81b0f0510274433e6b7ae3bb2cf968e3061f
Certificate serial:       11EF19
Authority key identifier: 1F:97:69:97:2B:15:69:94:1B:AB:CA:F1:B5:FA:1F:5A:B2:01:81:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/21bac2053682cc9add652ea93beb5adda359525d.roa
Signing time:             Tue 04 Jul 2023 08:30:01 +0000
ROA not before:           Mon 03 Jul 2023 08:30:01 +0000
ROA not after:            Wed 02 Jul 2025 08:30:01 +0000
asID:                     265822
IP address blocks:        2803:a10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175321 (0x11ef19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a81b0f0510274433e6b7ae3bb2cf968e3061f
        Validity
            Not Before: Jul  3 08:30:01 2023 GMT
            Not After : Jul  2 08:30:01 2025 GMT
        Subject: CN=21bac2053682cc9add652ea93beb5adda359525d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:30:26:3e:2b:a6:d0:09:5a:7d:c3:37:d0:
                    2c:40:3d:5f:06:54:06:d9:75:6f:35:7e:97:48:9e:
                    2f:e8:db:21:e1:4c:ea:9f:6b:85:9e:94:e3:2f:f0:
                    2b:52:cb:7a:3f:1e:68:1f:7a:1b:4e:e7:0a:db:65:
                    27:e9:93:a4:51:65:2e:3c:cb:08:9a:94:79:7b:4a:
                    71:a4:03:1f:cf:5f:07:b0:24:2e:56:e3:a2:70:e4:
                    ca:61:db:cc:65:07:07:bf:54:db:6f:1b:14:49:0e:
                    d0:97:3c:8b:cb:85:85:98:d2:d2:d9:b2:69:59:4c:
                    ba:ad:98:ba:7a:72:2a:c2:28:a0:b7:16:52:e2:86:
                    ac:c2:66:fe:b8:2d:11:80:d0:a6:76:a8:12:e8:35:
                    e3:b9:b2:93:fe:53:14:a3:59:5a:ec:02:93:ca:21:
                    4a:96:1a:73:f8:fc:40:83:8d:a4:7a:6f:08:84:05:
                    87:90:4c:de:48:72:46:fc:63:cc:9c:52:ae:61:25:
                    c5:f5:49:04:f8:57:ac:b3:d1:3d:e2:b2:22:ad:02:
                    14:50:ce:29:6d:17:0b:61:f0:bd:b0:4a:d9:cf:92:
                    0b:f5:7a:45:8f:2f:cb:70:ba:25:2d:f1:48:c6:89:
                    5b:8d:e9:10:85:25:80:06:82:73:e4:ab:47:4d:8e:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7D:04:F3:47:A2:A7:7E:58:67:98:F7:38:7F:E8:95:71:EE:2E:9A
            X509v3 Authority Key Identifier:
                keyid:1F:97:69:97:2B:15:69:94:1B:AB:CA:F1:B5:FA:1F:5A:B2:01:81:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/21bac2053682cc9add652ea93beb5adda359525d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:49:4b:4d:b2:2c:f1:d2:aa:ad:13:34:cb:7e:05:31:f6:b0:
         a4:af:ef:f0:4f:df:d1:68:08:12:b4:ff:94:57:05:d0:0c:b8:
         de:2d:14:0f:48:aa:1f:a3:9a:88:26:ce:0a:2b:15:ba:67:8f:
         94:95:6a:e3:63:39:5c:23:54:c1:d0:9f:58:8b:a4:11:7b:05:
         95:67:04:8a:54:1a:44:c3:ed:7b:d8:61:fc:c6:4a:be:e6:08:
         b1:24:38:cb:91:24:48:0d:56:1f:13:e2:43:ef:b2:61:e9:c9:
         68:dd:1b:5d:b2:35:ad:05:18:91:fd:dc:91:72:b3:11:21:1c:
         66:f5:d7:e4:68:5e:02:33:1d:f3:3e:91:68:2c:3e:ca:2c:17:
         09:fe:f2:7d:e2:45:99:54:b5:ef:1d:90:10:f1:37:20:b0:66:
         16:b0:63:9c:c2:2f:5a:08:38:c9:e1:1d:ac:a1:15:f5:1e:0c:
         2e:7b:74:47:1f:67:e1:5b:70:99:64:13:7f:e8:b5:bb:3f:32:
         b4:79:af:e6:75:b8:0b:db:0d:d4:66:da:b1:33:29:c0:26:79:
         92:e2:04:44:06:e0:58:7b:b6:9e:54:49:c6:29:af:be:93:cd:
         43:4d:24:3e:f2:b3:e6:05:11:eb:c6:2d:2c:8c:8b:9d:0b:55:
         b2:9f:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----