Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/fc077df97e477e0f32485c4118d4459d6973440b.roa
File:                     fc077df97e477e0f32485c4118d4459d6973440b.roa (raw, json)
Hash identifier:          dcmCSgkWeidJgi+OEuqLlVAEgAp4o74FYDN2r2e4UMo=
Subject key identifier:   C4:58:AC:13:1F:2E:57:81:E8:96:47:D8:97:4F:5B:EC:73:AB:74:93
Certificate issuer:       /CN=6780eb9d10b7ab18546ad32d7c475947b0f31c57
Certificate serial:       011835
Authority key identifier: 53:B5:A8:46:38:01:F4:23:D9:E6:EE:2A:16:56:1E:7B:10:35:9B:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6780eb9d10b7ab18546ad32d7c475947b0f31c57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/fc077df97e477e0f32485c4118d4459d6973440b.roa
Signing time:             Wed 06 Mar 2024 20:46:42 +0000
ROA not before:           Wed 06 Mar 2024 20:46:42 +0000
ROA not after:            Fri 06 Mar 2026 20:46:42 +0000
asID:                     273166
IP address blocks:        2803:5250::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71733 (0x11835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6780eb9d10b7ab18546ad32d7c475947b0f31c57
        Validity
            Not Before: Mar  6 20:46:42 2024 GMT
            Not After : Mar  6 20:46:42 2026 GMT
        Subject: CN=fc077df97e477e0f32485c4118d4459d6973440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:27:ae:2b:5d:fd:bb:1c:13:d5:93:a0:ed:
                    2a:cf:67:33:51:da:c6:35:24:87:54:4e:99:2d:1b:
                    16:5f:d1:69:19:cb:2e:d4:ea:86:0d:67:8a:05:17:
                    f6:f3:5b:97:fe:b6:4b:3e:09:c0:3e:53:8e:a7:14:
                    13:7a:96:92:cb:94:c8:86:a2:b0:47:d2:d7:03:8f:
                    2f:da:50:7a:ec:35:e8:1c:04:f0:a7:95:87:c1:2f:
                    1e:2b:23:ba:17:b3:3f:6f:95:fe:78:39:dc:b1:9c:
                    8e:a1:97:01:bf:51:b5:57:78:d9:82:18:bf:e7:32:
                    f4:9b:fa:6f:cf:86:27:3b:28:b0:8f:35:86:6e:42:
                    6b:09:b8:f9:db:18:54:7d:66:0f:76:28:9d:05:a0:
                    fb:f8:bf:52:e0:a9:dd:6d:68:37:aa:60:8d:71:79:
                    6f:e2:02:a6:8c:28:e1:00:47:49:46:d0:be:c4:8c:
                    3b:aa:7b:9b:3b:0f:4a:d5:ef:fb:b5:a9:2f:99:eb:
                    d9:9c:c5:f1:2a:c8:8c:9e:f8:ce:1e:25:38:48:d5:
                    38:65:ae:a7:c2:be:77:11:8b:d8:07:bf:dd:78:03:
                    8e:e7:33:b4:67:d6:2d:39:2e:7e:7a:ee:8c:da:f3:
                    96:3d:6d:d5:34:60:38:cc:31:75:0e:c9:99:c5:5e:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:AC:13:1F:2E:57:81:E8:96:47:D8:97:4F:5B:EC:73:AB:74:93
            X509v3 Authority Key Identifier:
                keyid:53:B5:A8:46:38:01:F4:23:D9:E6:EE:2A:16:56:1E:7B:10:35:9B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6780eb9d10b7ab18546ad32d7c475947b0f31c57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/fc077df97e477e0f32485c4118d4459d6973440b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a89d00c9-746d-45f1-afb4-bd77f8ec7d2e/6780eb9d10b7ab18546ad32d7c475947b0f31c57.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5250::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:42:fe:01:46:91:d5:d7:97:a0:7c:ca:c5:81:ed:c7:5d:
         d7:e4:1b:a9:94:2b:7d:69:9f:ed:c8:07:3d:6c:55:c1:bc:cd:
         4d:c3:f1:bd:26:18:e5:15:20:9a:b2:6f:9e:94:4a:03:62:f0:
         3c:cb:47:00:01:14:48:34:4c:8c:28:06:9f:1a:44:f0:64:2d:
         73:32:d7:94:17:a1:51:7a:37:a2:e3:e0:45:b7:28:6b:45:61:
         66:fe:79:87:6b:5e:f5:03:48:eb:7f:25:70:fd:87:11:a1:fc:
         09:b8:48:97:1f:e9:48:68:4b:28:17:8a:58:02:0b:a4:94:75:
         11:9b:b7:f9:55:68:ea:ce:cb:72:ed:85:e0:78:9a:55:14:d5:
         27:f9:19:14:28:d0:7e:61:ca:73:c9:f4:3c:d2:0f:42:ff:d4:
         63:ce:69:47:b7:a9:ab:ec:3a:7a:84:42:b3:9c:f5:3a:a4:16:
         6f:af:fe:da:58:25:83:55:05:18:54:20:86:ab:c8:1f:02:ea:
         1f:59:68:6c:38:5a:aa:37:f5:59:a5:d8:0a:50:de:67:f4:d3:
         cc:bf:83:c9:d6:ef:9c:61:d9:dd:96:8e:54:bd:72:04:dd:ee:
         dc:14:87:d7:03:de:ed:35:26:12:4f:ef:3d:37:63:c9:8a:6e:
         7f:7b:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----