Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/c31bc86190e97f0b9a38c9490cf9ffed1e637fd9.roa
File:                     c31bc86190e97f0b9a38c9490cf9ffed1e637fd9.roa (raw, json)
Hash identifier:          673+hg8ciiwNG4tHexTCu5Cqj0K7hRlEbP1+087bb9M=
Subject key identifier:   C2:17:3F:07:BD:34:BA:E4:77:F3:7F:31:85:D0:8E:5B:2F:1F:F2:5E
Certificate issuer:       /CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Certificate serial:       0526C6
Authority key identifier: D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/c31bc86190e97f0b9a38c9490cf9ffed1e637fd9.roa
Signing time:             Sat 04 Nov 2023 02:11:21 +0000
ROA not before:           Sat 04 Nov 2023 02:11:21 +0000
ROA not after:            Tue 04 Nov 2025 02:11:21 +0000
asID:                     270096
IP address blocks:        2803:47e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337606 (0x526c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
        Validity
            Not Before: Nov  4 02:11:21 2023 GMT
            Not After : Nov  4 02:11:21 2025 GMT
        Subject: CN=c31bc86190e97f0b9a38c9490cf9ffed1e637fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:97:29:97:a7:ad:6e:71:55:f4:73:3f:b9:
                    5c:6c:2e:8b:71:dc:ea:50:1d:51:d9:55:b9:f3:6f:
                    56:3b:06:f8:f3:45:b1:09:42:6b:67:fa:bc:69:ae:
                    17:06:87:26:c4:92:e3:e9:51:b9:24:73:fd:f7:c3:
                    b0:34:f9:9e:c3:cc:f7:dc:81:ac:34:84:5e:a1:05:
                    53:3b:67:ee:19:93:b7:0c:35:87:9a:b9:59:90:1d:
                    66:1c:ab:13:9a:da:48:18:33:58:45:d4:da:c4:a3:
                    f1:db:cc:56:7a:87:84:ce:af:6e:ad:47:21:34:24:
                    48:84:53:a3:21:bb:78:ed:05:31:92:e5:57:89:cb:
                    29:67:de:06:1b:ad:27:e7:dd:a1:f0:68:98:93:b7:
                    00:34:0f:d3:70:d2:9f:7a:d1:0d:0d:db:39:1b:99:
                    df:6f:b7:01:cb:c2:15:28:1d:4b:c7:3a:ea:c5:41:
                    4c:82:35:8a:fc:c3:66:4a:18:ee:6d:ec:b1:36:ee:
                    30:ef:6c:ec:12:01:ce:70:1c:91:b9:a9:70:7f:0d:
                    19:f1:a3:9f:30:3c:7d:a5:e0:fa:e4:bf:96:d1:68:
                    66:24:61:d1:29:da:f1:75:9a:ea:1a:c8:dd:c8:5d:
                    39:7d:7c:3e:98:a0:ac:64:e4:13:f3:c1:62:52:ea:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:17:3F:07:BD:34:BA:E4:77:F3:7F:31:85:D0:8E:5B:2F:1F:F2:5E
            X509v3 Authority Key Identifier:
                keyid:D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/c31bc86190e97f0b9a38c9490cf9ffed1e637fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:47e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:27:15:7f:f5:34:be:7f:95:ee:6f:4f:a8:55:d5:b9:69:2a:
         82:c6:30:f6:e4:da:e8:26:78:e4:6f:6f:f4:2c:6f:50:d9:b1:
         e6:67:fc:bb:b9:06:ae:06:d4:f1:c0:e9:27:49:e5:02:6a:d1:
         22:21:3b:32:ee:cd:33:11:6a:2f:5a:74:ab:9c:73:4c:c1:b6:
         ec:a6:a2:35:66:db:ff:78:93:5c:2f:c2:ff:2f:20:5b:56:38:
         38:c1:b1:ba:d0:43:b7:d8:0b:9d:04:ea:32:8e:a8:26:96:09:
         c4:25:da:a7:0d:2d:ad:6c:f4:36:b7:a2:28:8b:e5:56:0a:8b:
         c2:9c:d1:b2:35:59:a4:c7:2a:08:d5:be:58:ab:70:e7:60:15:
         26:d5:26:da:70:17:c0:45:04:a5:e5:24:19:cc:d7:a6:59:d0:
         c9:93:81:80:9b:f6:3e:bc:f3:0e:2b:f0:91:8a:9c:23:fc:4a:
         83:4b:8c:52:9f:74:51:e5:72:e9:77:9c:fd:96:92:bd:ed:ea:
         1a:9d:08:f7:06:c1:6e:ec:00:f0:a9:a5:4d:10:95:80:c3:1f:
         89:dc:54:f3:2e:b7:5d:0f:c4:54:e3:f3:e2:61:57:df:df:51:
         f6:91:98:74:05:f0:ab:81:ff:b2:0c:c5:72:83:94:83:fc:b5:
         e0:cf:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----