Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/440de0ba9f71ff8c6f3902ad6a278c6edd031790.roa
File:                     440de0ba9f71ff8c6f3902ad6a278c6edd031790.roa (raw, json)
Hash identifier:          DHS/h6AD3V5qdaQfHrTp0zwIRAGXfzteLMNuIo4qoHY=
Subject key identifier:   23:F8:16:BD:E3:E3:47:8D:B9:D2:5D:BF:DA:E2:0A:54:21:79:D0:F1
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       1EDED8
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/440de0ba9f71ff8c6f3902ad6a278c6edd031790.roa
Signing time:             Sun 21 May 2023 08:30:00 +0000
ROA not before:           Sat 20 May 2023 08:30:00 +0000
ROA not after:            Mon 19 May 2025 08:30:00 +0000
asID:                     267823
IP address blocks:        2803:1860:c8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023128 (0x1eded8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: May 20 08:30:00 2023 GMT
            Not After : May 19 08:30:00 2025 GMT
        Subject: CN=440de0ba9f71ff8c6f3902ad6a278c6edd031790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:c8:83:58:c6:65:58:e3:bd:56:d7:c6:44:
                    86:91:8c:02:9c:e5:26:67:ff:f0:d7:93:36:a8:4f:
                    58:ba:95:ae:d6:e5:07:fa:26:26:4a:54:c2:07:da:
                    79:58:e0:1d:e5:d8:32:d5:b0:5f:53:6c:a3:f9:04:
                    91:e9:8a:7e:65:a0:e2:75:a2:24:f0:29:69:09:e3:
                    bb:6e:d7:ec:ba:4f:89:bc:45:f6:d4:5c:b2:db:5e:
                    ad:46:47:99:db:ac:6e:e3:9d:33:ac:91:52:16:91:
                    18:cc:bf:18:8c:ab:78:ea:c5:bc:ff:7a:28:6c:e9:
                    f1:40:7c:26:2d:93:1e:c1:e4:ac:25:84:2b:0e:22:
                    6c:48:6d:c2:39:1a:5e:c7:62:0c:26:11:69:76:1c:
                    4e:29:47:8a:eb:48:a5:e2:bf:0f:6d:15:b9:a1:f4:
                    25:93:65:75:89:d7:0c:b3:13:ba:fb:07:21:da:9c:
                    87:e9:3a:39:ce:c3:d3:03:8a:6b:39:a0:cf:ce:6a:
                    4c:b3:dc:8c:f0:cc:a9:35:19:98:66:09:74:69:6d:
                    fc:5b:8d:e1:03:6b:76:4f:19:87:c3:c9:94:7f:be:
                    5b:cb:c3:f7:88:0e:9e:9b:bb:ca:4e:f4:65:7e:85:
                    f6:7e:64:03:4c:79:44:71:ff:0d:6f:38:cf:e2:4a:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:16:BD:E3:E3:47:8D:B9:D2:5D:BF:DA:E2:0A:54:21:79:D0:F1
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/440de0ba9f71ff8c6f3902ad6a278c6edd031790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:20:de:d6:1a:b9:8b:8a:79:fe:ec:d0:7c:01:d4:a0:72:
         a8:15:15:43:27:e4:61:0d:e8:e8:91:6e:89:07:ac:7f:58:aa:
         8e:bc:28:c1:0a:61:84:3b:f7:19:f5:c6:0f:6e:58:3d:89:1c:
         26:de:ad:59:3d:b6:48:7a:f0:17:99:5f:b9:49:c8:1b:83:2b:
         70:57:b2:f7:8d:65:1c:45:c7:80:c8:7e:b2:c2:5f:57:8c:61:
         8e:5f:13:0c:0e:b1:6a:fa:20:a6:ca:e3:55:48:9b:77:7b:8e:
         46:0a:9e:70:bd:8d:42:4a:33:bb:d4:10:57:05:99:9e:bd:04:
         3e:95:65:d4:17:be:a5:7b:58:d8:a0:4f:4e:0a:a6:35:80:9a:
         bb:cb:ad:12:9b:14:cf:ae:70:2c:19:3e:14:00:22:ed:ea:46:
         2a:b5:20:97:8e:d3:d7:25:c8:51:4d:bd:cd:f7:1a:be:9d:aa:
         4c:83:bf:94:42:9c:61:c6:8c:04:92:9b:71:cf:71:5a:f0:89:
         7f:17:44:63:07:36:0d:67:0b:a8:c7:99:ef:d4:88:7f:bb:f3:
         6a:f3:cf:7e:12:ff:a5:fd:68:94:37:bc:9d:df:5d:15:fc:b1:
         a8:e8:d1:56:b8:f5:0c:b0:08:68:b1:6b:ff:a4:3b:f0:4b:45:
         86:4f:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----