Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/f161e6a55cc0214eef861761a7e89c0863e78485.roa
File:                     f161e6a55cc0214eef861761a7e89c0863e78485.roa (raw, json)
Hash identifier:          2aJfy79pwPaOcAkvE2gxQzCylM/0dnSyc6+28Kw9FEo=
Subject key identifier:   9A:89:BE:56:81:AD:74:02:46:55:CC:CD:E9:60:9C:89:34:88:2B:C7
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       1EA621
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/f161e6a55cc0214eef861761a7e89c0863e78485.roa
Signing time:             Sat 13 May 2023 08:30:03 +0000
ROA not before:           Fri 12 May 2023 08:30:03 +0000
ROA not after:            Sun 11 May 2025 08:30:03 +0000
asID:                     267823
IP address blocks:        2803:1860:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008609 (0x1ea621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: May 12 08:30:03 2023 GMT
            Not After : May 11 08:30:03 2025 GMT
        Subject: CN=f161e6a55cc0214eef861761a7e89c0863e78485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:37:11:02:f8:4a:a0:d5:3b:98:cd:d2:17:
                    12:e8:98:a0:c2:5e:6d:c8:dd:92:20:47:2f:dc:54:
                    f2:15:76:18:83:64:ac:84:e3:b4:93:a4:2b:eb:30:
                    22:6e:18:13:61:8c:4a:1a:e5:fd:50:e7:90:e4:e3:
                    c5:5f:6b:6d:b8:5c:1a:f3:ca:11:4f:9c:e9:8a:58:
                    dc:85:80:27:7f:93:ce:d5:a1:6b:34:1b:90:16:35:
                    3b:a5:45:f3:d1:4d:96:4e:5f:fb:8f:8a:9c:d8:f8:
                    3a:a3:6e:45:16:84:49:99:ad:f7:dc:99:8c:87:10:
                    2b:1a:d0:b9:88:23:ca:5c:af:d7:3d:3a:64:13:7b:
                    08:ed:34:23:56:06:71:d0:aa:cf:e3:34:f8:8e:82:
                    02:b2:76:a2:28:12:ee:3c:b6:5a:02:b6:a4:87:b5:
                    b9:d5:d8:01:f6:37:bb:84:96:6e:37:08:aa:c0:25:
                    e7:c3:5d:b0:b1:5c:aa:f5:3c:62:8f:2d:1c:ba:b8:
                    30:df:83:4c:a8:8e:ee:34:19:57:83:2c:1a:a4:7d:
                    21:96:40:c1:f1:81:ca:7e:28:ea:d1:99:fc:72:b9:
                    ee:6b:80:43:7d:12:4d:64:ff:5f:79:3c:d4:da:7f:
                    56:71:eb:b6:cd:78:9c:26:bb:69:61:cf:af:96:11:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:89:BE:56:81:AD:74:02:46:55:CC:CD:E9:60:9C:89:34:88:2B:C7
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/f161e6a55cc0214eef861761a7e89c0863e78485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:e8:dc:f6:09:47:0d:71:04:4b:76:e8:cb:f6:03:e1:e4:
         2d:a1:b6:4b:91:4a:3e:fc:95:a5:1a:26:da:56:05:68:1f:46:
         e9:50:eb:27:d1:0a:63:ac:93:42:f4:78:a2:d8:c8:07:fc:48:
         ce:e1:7e:33:b0:c0:7d:55:ad:db:75:12:9a:fc:16:f0:b7:a5:
         60:f7:68:ae:42:cd:38:c8:5a:70:21:6c:66:1d:61:53:00:11:
         a3:70:d9:3f:77:fe:45:68:91:0c:a9:d7:6e:52:c7:94:9b:65:
         d8:78:e1:13:77:2e:5e:41:74:dd:4d:66:00:b1:b3:3f:7d:10:
         21:a4:01:c8:f1:b3:1b:03:de:88:41:4f:c0:7f:18:9d:80:42:
         48:bf:01:d4:c6:4e:c2:78:1e:82:5b:eb:b3:1a:47:4d:0a:de:
         88:42:6a:db:b6:30:d5:a0:e6:60:e6:09:51:cf:e3:73:c3:91:
         13:a8:07:3b:25:f9:1a:13:4f:06:b6:9d:4d:0f:32:89:e4:e7:
         41:8d:5e:da:21:75:03:fa:58:3d:6e:bc:0e:c9:9f:cf:74:8e:
         58:f0:ba:b2:e8:41:dd:7a:19:1e:b4:31:4e:cb:08:6d:25:20:
         48:cd:53:a3:45:4f:9e:bb:aa:fd:d0:79:d7:21:f5:c1:08:25:
         2c:1c:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----