Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9829373b10ea47ac672d19152ad348f165ebe86c.roa
File:                     9829373b10ea47ac672d19152ad348f165ebe86c.roa (raw, json)
Hash identifier:          EVo8SBmxqJnrE6An/rKi4443m8jC/2o0d/P6SBif3ZI=
Subject key identifier:   EE:A8:51:EA:76:05:E5:9F:1A:02:73:57:65:BE:A3:34:74:C7:83:80
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       2540FA
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9829373b10ea47ac672d19152ad348f165ebe86c.roa
Signing time:             Tue 17 Oct 2023 19:54:25 +0000
ROA not before:           Mon 16 Oct 2023 19:54:25 +0000
ROA not after:            Fri 17 Oct 2025 19:54:25 +0000
asID:                     52468
IP address blocks:        2803:2540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441466 (0x2540fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Oct 16 19:54:25 2023 GMT
            Not After : Oct 17 19:54:25 2025 GMT
        Subject: CN=9829373b10ea47ac672d19152ad348f165ebe86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:ed:d1:30:75:5d:9f:07:42:ea:b9:f1:8c:
                    9b:b8:73:9d:af:2f:99:c9:35:ed:d2:d7:9d:6d:ed:
                    68:9b:8f:d9:f1:f6:3d:fa:14:53:e3:a2:e7:cd:8b:
                    fd:74:37:9d:3f:f3:1c:8e:ea:b3:49:83:ba:70:67:
                    20:ab:eb:92:f2:3f:fd:80:d1:3e:1c:8a:3c:b2:78:
                    8f:2c:6a:08:35:78:0d:b9:30:0c:7b:1f:23:ce:62:
                    01:09:6d:85:0b:99:82:40:90:3b:4e:3a:95:f6:80:
                    ca:fe:c4:5a:b7:9c:03:be:36:bf:a0:fa:41:b4:9a:
                    e5:6c:97:44:4a:b8:75:50:5f:a9:3d:c0:f4:9a:a2:
                    9f:84:0b:77:ad:99:06:c7:b1:b1:01:59:be:3a:fc:
                    5f:08:a7:b1:de:a5:9a:be:6f:cc:a5:b2:93:53:dd:
                    c4:8e:fd:13:f2:41:30:60:ee:13:21:bb:be:36:ad:
                    b0:e7:e8:b8:81:3f:3c:4c:9c:cc:49:70:c0:af:e7:
                    7f:ac:66:fa:af:b3:91:86:e0:ce:d0:d1:f9:ac:9c:
                    10:8b:ef:1d:af:ab:a6:08:d6:05:63:03:e3:5a:36:
                    6e:63:41:01:6e:24:aa:91:0e:ac:ec:d6:8c:6d:f5:
                    7d:79:f6:8e:5d:b6:23:67:ff:d0:ed:80:45:47:f2:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A8:51:EA:76:05:E5:9F:1A:02:73:57:65:BE:A3:34:74:C7:83:80
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9829373b10ea47ac672d19152ad348f165ebe86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:21:8c:85:4c:16:db:62:43:6e:ba:92:ca:3d:4b:57:62:06:
         90:1c:99:9e:c1:06:30:14:90:a7:75:60:c9:7d:87:7d:0e:69:
         13:37:e8:07:7f:f3:01:1c:8b:0c:e5:d7:b8:7f:32:19:bc:3a:
         57:3f:0f:ac:b4:f2:10:5b:b7:26:36:03:b1:bf:ec:67:1d:55:
         5a:63:1a:6d:83:77:3a:d8:dd:a4:0f:b6:82:6a:a5:53:8e:ef:
         9f:c5:46:5d:b2:29:2d:40:a5:32:dd:ac:17:b6:67:58:64:3c:
         75:21:1f:0d:e5:73:9e:fd:f6:d5:22:d3:bc:2f:40:c2:08:3f:
         73:ee:7e:9e:d9:6b:02:64:2e:38:e4:00:fb:7e:47:ac:f3:60:
         7b:3c:66:25:bf:e2:eb:74:91:85:6a:07:3c:ed:7f:b5:b7:7c:
         d6:36:7b:0b:6d:ee:ca:9e:eb:25:e0:70:61:e2:59:e6:68:e6:
         2d:3e:4f:64:67:a7:cf:46:ec:9f:93:7b:7a:cd:39:14:87:0b:
         18:4a:68:1c:2a:23:32:45:36:e5:0d:83:66:1f:30:de:bd:a9:
         78:44:ad:5b:3d:77:18:c2:ea:33:ff:48:13:51:d8:14:77:66:
         f5:4b:1c:7c:56:3b:aa:86:71:42:af:3f:7d:6b:c3:43:8e:a8:
         80:fe:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----