Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8cc1a8593b8cc837ff416ce08057f7ea38b0b926.roa
File:                     8cc1a8593b8cc837ff416ce08057f7ea38b0b926.roa (raw, json)
Hash identifier:          Km897WL+sHjUVzE0gXvbBam2540fOAooPOsafskiiIk=
Subject key identifier:   94:84:EA:C1:A3:74:39:89:E9:59:76:BB:8D:A8:C2:15:D2:02:0A:F4
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       1AAC
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8cc1a8593b8cc837ff416ce08057f7ea38b0b926.roa
Signing time:             Mon 30 Oct 2023 17:16:55 +0000
ROA not before:           Mon 30 Oct 2023 17:16:55 +0000
ROA not after:            Thu 30 Oct 2025 17:16:55 +0000
asID:                     273111
IP address blocks:        2803:2850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6828 (0x1aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:16:55 2023 GMT
            Not After : Oct 30 17:16:55 2025 GMT
        Subject: CN=8cc1a8593b8cc837ff416ce08057f7ea38b0b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:15:48:6b:b9:a7:ed:43:d7:72:8b:d7:a9:
                    bf:d1:dd:d1:06:ec:7b:12:9e:c2:b4:51:c7:f8:f9:
                    86:0f:b8:87:46:3b:a7:83:41:20:89:54:5e:7d:84:
                    4c:6e:08:5a:09:da:f0:32:34:b6:a4:91:96:c4:d9:
                    af:e0:4a:97:d3:79:57:f1:d1:7c:59:61:c4:c5:c6:
                    03:a8:f7:d4:4e:6e:2e:de:93:52:50:69:57:03:64:
                    ec:03:13:3c:30:b9:15:c9:4c:93:08:b4:e7:a5:08:
                    79:0e:26:17:c3:b0:a9:e3:6c:45:26:82:b9:e9:d0:
                    63:29:e5:0e:a3:85:3c:96:ad:06:97:c8:bd:1f:1d:
                    91:8a:8c:10:3d:f4:56:1e:f8:96:e7:83:bb:eb:1b:
                    74:5f:09:0d:5c:0c:f0:d4:15:0c:e2:9e:dc:09:83:
                    b3:e8:a8:7f:26:6a:77:06:01:0e:c0:e8:9e:6e:be:
                    87:dd:fe:b6:0c:72:f9:90:e6:cf:1e:49:3c:88:8f:
                    84:18:d9:65:b7:14:bc:cc:5c:fa:77:da:81:b4:8d:
                    7e:52:a7:1d:4a:67:02:c4:96:b0:95:57:b7:1a:b3:
                    b9:09:bd:c1:4d:42:74:2d:85:e4:90:8e:ac:1a:36:
                    71:32:da:09:dd:2f:ca:14:a7:2e:f1:d3:f5:d0:53:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:84:EA:C1:A3:74:39:89:E9:59:76:BB:8D:A8:C2:15:D2:02:0A:F4
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/8cc1a8593b8cc837ff416ce08057f7ea38b0b926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2850::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:4f:72:65:27:26:e5:28:f6:97:1d:c4:60:11:d8:37:87:
         98:da:ac:db:82:0f:ce:71:30:e8:de:6d:16:fa:29:d2:c7:55:
         c3:f1:3f:b8:99:5b:62:64:91:48:91:39:5e:d5:ca:90:cb:c9:
         02:d7:b1:90:81:81:94:86:ed:51:9e:c5:2a:1f:a9:87:a0:55:
         07:21:85:c3:ad:c8:00:64:1b:c7:dc:1c:3c:77:f7:2e:5b:f5:
         0d:dc:a0:25:94:77:39:39:72:b3:28:f1:af:ed:f4:a2:94:22:
         33:9a:4f:ca:7f:13:2e:a9:d9:e2:4c:35:12:5a:d9:d9:3f:13:
         80:8d:c5:f8:b3:25:d6:bb:6e:f2:dd:a2:87:dd:a6:f7:59:f8:
         cb:a0:dd:79:6b:17:68:9c:a0:a3:9d:a6:38:05:7c:19:64:b0:
         38:b6:40:33:e3:1e:50:ab:85:7a:d7:82:a3:86:1e:98:c4:9d:
         1b:c1:ae:8a:58:81:e0:19:ad:99:43:df:95:4e:c6:41:13:5e:
         4a:56:2c:d4:7c:74:30:9f:75:66:48:ee:d5:a6:d8:6a:28:00:
         9e:98:9b:5d:e6:a4:0c:96:af:ac:e1:d5:d7:b9:ce:28:64:09:
         ee:25:d0:be:65:cf:43:67:2e:7f:6c:7b:31:ae:41:16:e9:64:
         e7:b4:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----