Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/ff46fc86ece9bf09571064ca11910edf7c0cb6da.roa
File:                     ff46fc86ece9bf09571064ca11910edf7c0cb6da.roa (raw, json)
Hash identifier:          y2Z6ah1FbKqvz2wsmcu78dxffn56rV0NFYoBVwNIPME=
Subject key identifier:   97:F5:E8:4E:EE:5C:BF:07:93:37:AB:27:8D:C2:0B:6E:C8:B8:51:1F
Certificate issuer:       /CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
Certificate serial:       1EA0FA
Authority key identifier: 67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/ff46fc86ece9bf09571064ca11910edf7c0cb6da.roa
Signing time:             Sat 13 May 2023 08:30:02 +0000
ROA not before:           Fri 12 May 2023 08:30:02 +0000
ROA not after:            Sun 11 May 2025 08:30:02 +0000
asID:                     267823
IP address blocks:        2803:1860:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007290 (0x1ea0fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba642079eab1077bf601b1f363bfe1e8764e8d3
        Validity
            Not Before: May 12 08:30:02 2023 GMT
            Not After : May 11 08:30:02 2025 GMT
        Subject: CN=ff46fc86ece9bf09571064ca11910edf7c0cb6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:2a:a1:21:bc:19:44:3b:81:b6:3c:c1:51:
                    58:68:ee:29:f8:91:b6:74:4e:6e:ce:e5:63:00:8c:
                    1f:c9:f0:0e:e7:f3:60:eb:d3:1c:0c:00:2b:89:cc:
                    e3:e4:e6:c7:c8:a7:18:ac:3b:55:14:e3:89:64:5d:
                    3d:bf:b5:e1:fb:59:5a:c8:a8:a7:02:6e:04:3b:da:
                    d8:e8:f4:6f:14:17:ac:fc:b3:10:4d:e5:45:01:f5:
                    7c:06:5f:64:79:8b:76:f8:37:04:aa:5a:1e:e7:29:
                    e5:6e:6e:63:fe:34:c3:77:ef:41:d6:a5:b9:f9:d7:
                    86:e8:5b:0e:98:dd:1b:ca:56:43:7f:ce:1f:a5:7e:
                    85:96:e5:d0:0d:b7:c7:f3:c0:21:e0:bd:49:39:45:
                    89:cb:3e:24:b6:6a:e0:12:3f:d1:6a:77:73:b4:40:
                    6c:72:71:5d:84:4b:c7:69:fd:87:90:8f:7e:5a:4e:
                    3a:f9:4e:7c:39:53:40:04:00:8d:a0:9c:0c:10:f6:
                    8d:81:83:d2:dc:4d:c3:22:5d:81:69:a5:93:da:ff:
                    3f:50:3c:07:71:00:d4:d3:ee:b3:01:e2:71:8f:04:
                    c5:72:a9:4d:23:3e:29:0d:bc:b4:5a:01:ee:44:56:
                    bf:75:8e:7c:62:c6:c6:36:71:df:8a:35:fa:31:84:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F5:E8:4E:EE:5C:BF:07:93:37:AB:27:8D:C2:0B:6E:C8:B8:51:1F
            X509v3 Authority Key Identifier:
                keyid:67:08:56:42:75:66:DB:F0:3A:E3:B3:DF:18:3B:CF:66:02:7C:A1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba642079eab1077bf601b1f363bfe1e8764e8d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/ff46fc86ece9bf09571064ca11910edf7c0cb6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a50887bf-fee3-446e-ab57-145460af19ab/aba642079eab1077bf601b1f363bfe1e8764e8d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1860:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:19:49:eb:d1:50:d6:4a:dc:eb:69:95:14:79:f7:5b:c3:
         10:ab:9a:4a:4a:3e:17:e3:ce:e3:76:12:39:d1:19:e4:60:e9:
         e7:da:d1:19:b1:80:eb:65:28:33:c3:34:d1:32:0f:e2:0b:84:
         25:a8:1e:c5:65:7d:ea:74:1d:90:66:30:3a:62:f2:86:9c:50:
         3b:24:08:1c:a4:3c:52:f6:52:c7:62:a6:e9:fd:47:a4:1e:d9:
         b9:41:7b:5d:f1:76:ff:de:dd:2b:84:05:94:35:16:9a:70:fd:
         ef:77:d7:e3:ee:85:36:20:dc:e1:0d:2b:fd:32:39:53:c6:c3:
         1c:34:39:f5:2e:db:03:55:18:c2:40:a9:d6:12:67:a5:bb:3b:
         97:03:a2:de:f8:63:d5:83:a5:a2:96:4e:6e:ff:ec:d3:86:08:
         cd:84:47:83:52:0b:93:c6:23:7c:9e:de:e0:87:48:20:76:b7:
         aa:55:32:8b:5f:88:f5:26:e3:e7:e9:6b:6c:fa:53:7b:7d:db:
         da:ea:00:25:43:b1:6e:de:95:88:c7:24:dc:73:42:2f:7f:50:
         82:0c:9f:f9:e0:c6:50:42:86:c2:af:58:f3:e2:3e:b3:65:6d:
         d4:80:40:c3:38:73:66:8e:6e:9c:28:bb:9c:29:1d:d9:5c:70:
         82:e8:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----