Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/5ef13e0f1338bba0835c65be635ccaf36953f047.roa
File:                     5ef13e0f1338bba0835c65be635ccaf36953f047.roa (raw, json)
Hash identifier:          8f93yLYZqj7Ur+TBN83N+++HKCzW+fqzyzin+GhpU/M=
Subject key identifier:   F6:41:29:4D:41:A0:51:DA:33:83:11:87:A7:FA:13:07:AF:7B:81:DA
Certificate issuer:       /CN=157a25db9af735469f53d350813c53dce014c652
Certificate serial:       6CCB
Authority key identifier: 20:91:54:6B:D5:D8:CC:6F:EE:A1:06:F7:1B:29:99:AC:62:A6:8B:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/157a25db9af735469f53d350813c53dce014c652.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/5ef13e0f1338bba0835c65be635ccaf36953f047.roa
Signing time:             Fri 16 Feb 2024 14:47:33 +0000
ROA not before:           Fri 16 Feb 2024 14:47:32 +0000
ROA not after:            Mon 16 Feb 2026 14:47:32 +0000
asID:                     266653
IP address blocks:        2803:8120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27851 (0x6ccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157a25db9af735469f53d350813c53dce014c652
        Validity
            Not Before: Feb 16 14:47:32 2024 GMT
            Not After : Feb 16 14:47:32 2026 GMT
        Subject: CN=5ef13e0f1338bba0835c65be635ccaf36953f047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:46:10:42:3a:9b:af:0f:d7:ef:b2:83:1e:
                    86:20:da:d4:7d:ff:83:c7:12:19:1b:33:d5:28:0c:
                    41:7c:53:2a:16:2f:09:e7:76:94:fa:20:65:f5:f1:
                    02:5c:d4:90:36:18:56:5e:65:62:07:2c:dd:7d:17:
                    08:de:f3:65:9b:ca:d0:4e:ff:df:1d:f2:f0:04:ab:
                    7b:26:0b:89:15:ec:8e:7c:ec:7c:d8:fb:f2:86:fa:
                    db:a9:26:89:10:da:1b:3d:1b:84:90:85:0c:6d:b8:
                    27:9c:7b:4d:61:49:e5:22:33:1a:60:d3:11:87:a1:
                    58:df:bc:88:79:06:a0:bb:15:f6:aa:82:de:9f:7d:
                    8a:63:6b:c4:96:66:c2:23:e4:46:af:3d:a7:62:60:
                    44:a1:74:fe:8e:6f:7f:8c:c8:4c:7d:55:47:15:d6:
                    1f:9c:3b:6f:cd:61:e7:6a:69:8e:65:d7:da:a3:bb:
                    41:88:28:e7:38:1f:17:a0:c6:66:ad:dc:2d:28:a2:
                    59:21:14:14:81:b7:45:4a:7e:ae:d3:a5:f4:17:ce:
                    ba:0d:1b:d7:67:f4:83:9f:00:6c:62:e1:76:20:22:
                    e7:07:3a:08:e8:31:ee:4b:f9:c2:af:3b:27:aa:17:
                    e4:89:ca:67:58:07:24:95:d7:be:47:f3:3a:42:87:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:41:29:4D:41:A0:51:DA:33:83:11:87:A7:FA:13:07:AF:7B:81:DA
            X509v3 Authority Key Identifier:
                keyid:20:91:54:6B:D5:D8:CC:6F:EE:A1:06:F7:1B:29:99:AC:62:A6:8B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/157a25db9af735469f53d350813c53dce014c652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/5ef13e0f1338bba0835c65be635ccaf36953f047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a819781-3e84-473a-8890-a072ab121695/157a25db9af735469f53d350813c53dce014c652.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8120::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:f7:d8:34:64:0a:a7:05:88:bd:d7:95:31:a4:92:d5:62:
         a6:73:1a:7a:45:f8:c6:84:af:fc:37:e5:f7:5b:82:93:3e:a7:
         9c:ac:33:20:04:69:1d:5e:7d:59:e6:6b:7f:fc:26:4c:6c:00:
         ed:c8:a2:1a:be:d6:26:26:72:c1:b7:1d:91:fd:60:69:cc:93:
         c7:aa:ea:39:fa:44:11:0b:7b:86:cf:3e:9a:f8:44:a1:e3:6f:
         b2:54:d9:66:20:55:fb:c4:47:38:be:77:a4:cc:9d:2a:a2:2e:
         7d:33:76:b7:b9:52:51:ea:66:2e:ec:de:f4:86:94:a5:94:52:
         f2:3c:61:2c:44:32:88:b4:b1:c5:44:36:86:62:03:d6:d9:19:
         a0:75:80:ec:23:8b:7f:0d:e5:1d:57:24:23:79:f9:08:2d:39:
         14:88:ee:38:d6:4b:6e:32:ac:2f:15:0f:6c:4c:fe:93:1d:b3:
         68:7f:78:15:35:34:75:e4:70:fc:81:14:ff:83:fc:51:e4:eb:
         24:57:ff:4a:29:d2:57:3e:83:1f:2e:f6:fd:88:0f:93:d0:14:
         b8:c1:37:00:d1:96:0b:f7:7e:e5:74:51:d9:66:44:0c:09:ee:
         59:0a:21:a4:57:95:4b:d2:90:af:22:08:f0:41:7f:e8:c5:de:
         1d:82:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----