Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/d14913bfe541b8799567a50ea777a6e952437c72.roa
File:                     d14913bfe541b8799567a50ea777a6e952437c72.roa (raw, json)
Hash identifier:          7eEdr75ILa8CXuM9gSYrciEweKBeNTlYbwz1WANft4E=
Subject key identifier:   14:A4:22:BA:AA:DC:3F:61:B4:21:17:6B:A9:82:BC:FF:38:E6:E1:A0
Certificate issuer:       /CN=fc6a343497b7a26c78a86a19daf6c2065a721822
Certificate serial:       3692
Authority key identifier: 97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/d14913bfe541b8799567a50ea777a6e952437c72.roa
Signing time:             Mon 30 Oct 2023 17:20:17 +0000
ROA not before:           Mon 30 Oct 2023 17:20:17 +0000
ROA not after:            Thu 30 Oct 2025 17:20:17 +0000
asID:                     273111
IP address blocks:        2803:2850::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13970 (0x3692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6a343497b7a26c78a86a19daf6c2065a721822
        Validity
            Not Before: Oct 30 17:20:17 2023 GMT
            Not After : Oct 30 17:20:17 2025 GMT
        Subject: CN=d14913bfe541b8799567a50ea777a6e952437c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:eb:b8:1d:7b:8a:a4:eb:98:0c:41:67:0c:
                    47:f0:9c:1c:47:a3:bf:ec:1c:95:55:7b:be:ae:22:
                    51:81:4c:39:d0:cb:47:7f:92:22:a4:fa:fc:ac:ef:
                    b4:38:e4:7d:57:30:39:e3:24:b7:b1:4a:27:32:2f:
                    09:b0:24:78:2d:70:03:f4:07:8a:8a:ac:f2:d3:3f:
                    11:89:01:7c:2b:13:e8:de:e9:4f:3a:44:48:03:24:
                    c2:b8:86:12:f5:ba:63:30:5c:2e:51:0b:9c:3b:ab:
                    12:75:29:c3:19:b3:d9:7d:f3:b1:f4:58:fc:fd:b6:
                    6e:6f:3c:c9:66:4b:9c:78:7c:09:1b:cf:87:88:7b:
                    10:30:8c:00:93:8a:87:35:55:50:e6:70:d7:4f:77:
                    b3:37:f1:68:12:2e:07:fa:38:4d:cb:68:96:4d:0c:
                    01:d2:be:33:de:22:52:dc:db:c1:c8:49:97:1d:0b:
                    ac:2d:49:11:96:e0:b7:e6:62:19:d3:cd:32:97:08:
                    36:56:36:06:37:c8:3d:89:c1:9e:3d:2b:9f:98:79:
                    01:5c:34:52:d7:65:42:a8:ac:2c:22:1f:7d:69:95:
                    a3:3f:9d:de:d9:9b:b2:09:6d:88:c8:a7:d5:f3:e5:
                    62:f9:d9:01:43:c0:76:54:83:c2:87:01:c3:90:ff:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:22:BA:AA:DC:3F:61:B4:21:17:6B:A9:82:BC:FF:38:E6:E1:A0
            X509v3 Authority Key Identifier:
                keyid:97:19:A2:A2:97:8B:F0:98:D6:40:8D:16:FC:95:1F:F0:1D:77:73:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6a343497b7a26c78a86a19daf6c2065a721822.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/d14913bfe541b8799567a50ea777a6e952437c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1862ab-76b6-4d74-97d1-cc7ebccef545/fc6a343497b7a26c78a86a19daf6c2065a721822.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2850::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:78:eb:cf:f5:61:05:82:26:e2:6b:4b:f7:30:6a:44:30:91:
         12:6c:70:59:d4:cb:46:73:95:c3:ce:c9:9b:f9:24:52:e0:d0:
         f8:c1:11:ff:c8:23:7c:ad:e3:f9:e1:64:65:de:5f:c7:a5:56:
         aa:64:6c:8a:2c:e8:28:5c:35:50:99:a0:b5:e5:7f:af:1b:d1:
         6a:17:5e:5e:20:fd:1e:e7:99:74:c4:c2:61:e9:6a:82:ed:19:
         a2:ec:44:ab:eb:52:e7:94:b7:c0:5e:21:6a:e3:6d:5d:e4:39:
         64:71:41:7e:78:71:cc:d0:f4:83:26:9b:ea:38:9c:da:93:50:
         cb:5c:32:b7:cb:1f:67:e6:fb:83:c8:15:a1:14:01:0d:85:c8:
         8b:28:4d:e4:ce:2b:14:3a:27:44:49:f8:87:63:24:5d:46:41:
         90:cc:e0:51:47:3d:47:31:ea:c4:50:ef:4f:25:b3:78:ce:be:
         82:33:70:e5:25:0c:5a:16:d0:f0:ba:26:c4:cf:e5:ad:5c:f4:
         7c:dd:42:2c:1c:02:e6:26:fa:be:e9:d1:dc:43:76:a1:2d:14:
         c1:af:fe:c4:84:b1:82:af:f2:c4:19:74:be:a9:2d:8a:a2:fd:
         56:fb:b6:cb:b2:79:65:1c:85:29:1f:92:2c:44:dc:8f:2c:83:
         4a:e8:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----