Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/ca2476eabd455c2de04a380672e9dfdf86e8a208.roa
File:                     ca2476eabd455c2de04a380672e9dfdf86e8a208.roa (raw, json)
Hash identifier:          VeD9dJsjqcYuwnqXpnaJn1kNoQJyIlsPQSFmSYgFR4Q=
Subject key identifier:   D7:1C:40:F9:47:DE:29:E0:8C:2E:7B:52:D8:31:87:3E:E5:CA:A0:1D
Certificate issuer:       /CN=33b2211f7639ca97f55599bde05cf8b49ec41579
Certificate serial:       156194
Authority key identifier: 90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/ca2476eabd455c2de04a380672e9dfdf86e8a208.roa
Signing time:             Tue 19 Mar 2024 13:44:00 +0000
ROA not before:           Tue 19 Mar 2024 13:44:00 +0000
ROA not after:            Thu 19 Mar 2026 13:44:00 +0000
asID:                     269739
IP address blocks:        2803:1960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401236 (0x156194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b2211f7639ca97f55599bde05cf8b49ec41579
        Validity
            Not Before: Mar 19 13:44:00 2024 GMT
            Not After : Mar 19 13:44:00 2026 GMT
        Subject: CN=ca2476eabd455c2de04a380672e9dfdf86e8a208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:39:7e:47:df:11:14:92:8a:f7:d5:8a:23:
                    98:1f:26:02:f1:56:bb:9a:02:e2:81:26:a3:44:ec:
                    4b:fb:cd:52:35:03:41:64:0a:7b:12:17:ec:97:0a:
                    36:e8:3a:03:54:11:8d:cf:06:40:72:e7:86:c5:6a:
                    c9:48:c8:b2:51:44:98:b6:28:ed:59:73:08:c1:8f:
                    87:45:8e:2f:79:24:d2:75:2f:2e:e2:8b:2e:4f:75:
                    b3:2e:13:06:0f:f1:e4:6f:33:4c:74:cc:bc:52:24:
                    fb:dc:51:f1:0f:33:25:f4:cb:48:2b:c1:26:e9:97:
                    f5:a2:f1:4e:95:08:0b:d6:bb:14:66:aa:1e:de:b3:
                    8e:78:55:de:ce:a1:b3:8c:83:84:75:a0:a9:c5:be:
                    d6:1e:38:92:05:0a:8f:7d:39:8b:eb:25:99:0b:09:
                    e8:ec:03:6c:d4:2e:eb:28:64:65:a7:32:1f:ec:28:
                    c0:93:30:c6:bc:5d:3c:fd:97:dd:d7:7a:4e:c5:ba:
                    cc:76:cd:e2:bd:7b:4e:f9:e7:67:f3:ea:4a:86:aa:
                    15:96:75:37:4b:67:3e:2b:fe:bd:0b:75:26:9f:d6:
                    47:51:13:fd:6d:80:0d:87:45:26:fd:54:12:3b:2a:
                    9a:95:81:42:94:4e:8a:91:1b:0e:6e:fb:52:eb:e6:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:40:F9:47:DE:29:E0:8C:2E:7B:52:D8:31:87:3E:E5:CA:A0:1D
            X509v3 Authority Key Identifier:
                keyid:90:BB:03:6B:AC:88:22:7A:1F:CE:5F:14:D9:54:CB:1A:9C:1B:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b2211f7639ca97f55599bde05cf8b49ec41579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/ca2476eabd455c2de04a380672e9dfdf86e8a208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d3eccca-db0c-46a4-9549-50d3d44ebbd2/33b2211f7639ca97f55599bde05cf8b49ec41579.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1960::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:c0:81:b5:fe:e8:8a:56:dd:74:5d:85:fc:34:48:f3:4b:
         35:f8:50:78:bc:5f:fc:a1:4d:06:a6:67:6d:31:01:d4:e3:e6:
         ad:95:61:2d:e6:74:a9:76:37:d0:b3:59:9b:be:2b:ba:10:62:
         2b:08:17:5f:51:a9:b7:ff:cd:e8:5c:f2:a0:05:ee:4b:cf:63:
         04:4b:2e:05:f0:23:74:d0:ef:fd:6b:76:a0:69:c8:74:d2:63:
         a9:49:27:cf:37:d2:a8:ea:c8:ed:5a:ff:11:b4:e9:a6:c7:48:
         9b:d9:fb:6a:ef:5a:73:ee:8a:1d:4c:09:2d:2c:58:18:54:5f:
         68:16:03:df:c7:5c:0d:29:4a:1e:6f:2b:49:92:f1:c5:5f:ed:
         76:b0:c6:d9:5e:4b:08:47:6c:78:e3:b6:d5:54:fb:7d:fe:db:
         eb:c3:8a:d9:eb:91:a3:13:90:52:59:a9:6a:34:90:61:68:f4:
         fa:e3:61:20:43:04:bb:37:80:b4:45:bb:ac:50:4f:67:89:cb:
         54:80:1a:80:39:36:6b:f6:bc:63:71:df:00:2e:c2:23:7e:3d:
         23:78:89:59:7c:bf:c3:a0:2f:7d:0d:8b:31:14:ad:a4:18:d2:
         d1:8a:4b:c6:8a:29:ce:70:af:ca:ff:66:4b:60:ac:a5:8e:1c:
         31:e6:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----