Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa
File:                     0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa (raw, json)
Hash identifier:          CQuiq8D1arMw8rjN4iGtR534MXhSDP8zm4w7MFYB4t8=
Subject key identifier:   B6:0C:94:98:DA:DB:A9:64:BF:65:B7:81:99:F8:2D:7D:4A:F5:8B:0B
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       21D4B5
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa
Signing time:             Tue 19 Sep 2023 03:40:31 +0000
ROA not before:           Mon 18 Sep 2023 03:40:31 +0000
ROA not after:            Fri 19 Sep 2025 03:40:31 +0000
asID:                     14080
IP address blocks:        2803:bfa0:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217141 (0x21d4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Sep 18 03:40:31 2023 GMT
            Not After : Sep 19 03:40:31 2025 GMT
        Subject: CN=0b27acc45d2ac1808b9b342fb5dfaa153904c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:95:4f:a2:7b:2f:94:bc:41:65:72:92:8a:
                    bc:f2:8d:56:8e:cf:77:f9:6a:bb:f5:47:6d:bc:5c:
                    ae:ac:2f:1c:cf:98:47:44:d0:f4:72:10:f7:87:19:
                    8b:1d:cc:1e:f9:2b:d7:dc:0e:7b:53:9e:e0:44:1e:
                    be:eb:f1:b5:a3:d5:f3:b3:29:9e:91:b1:d6:b5:25:
                    97:b2:04:6d:12:46:d2:a9:3c:00:93:1e:d1:9b:cf:
                    3d:92:c0:b3:03:d6:83:7f:ea:54:a7:05:4a:c5:a4:
                    23:91:4f:d8:42:d1:78:c7:a1:99:0e:3e:83:97:0b:
                    52:49:2e:c1:f3:07:55:c0:39:8d:ff:d7:0d:96:76:
                    1a:4e:66:0f:3b:0d:61:97:43:6f:a8:30:72:13:63:
                    df:d0:15:6c:09:b6:c5:a4:2a:bb:a8:65:47:18:01:
                    86:d4:7f:84:03:3e:41:ed:9e:59:86:48:10:1f:89:
                    5e:af:d0:fa:ab:72:c6:95:f3:49:87:90:9d:ba:5d:
                    bb:67:0c:d9:1c:73:e9:36:dc:c9:94:c3:73:b9:2d:
                    28:33:97:38:c5:c8:7a:a3:d7:49:54:d3:9f:92:be:
                    47:2a:ab:d7:ab:35:36:58:e2:9b:d1:41:3a:40:20:
                    22:8b:fe:e5:32:8f:31:68:93:9e:33:3c:85:a2:1e:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0C:94:98:DA:DB:A9:64:BF:65:B7:81:99:F8:2D:7D:4A:F5:8B:0B
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/0b27acc45d2ac1808b9b342fb5dfaa153904c9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:64:02:af:02:97:d6:33:d2:ad:95:8c:e3:ef:fb:44:d9:
         21:40:95:5f:c9:48:50:89:5f:81:da:c1:18:73:57:c5:ba:fb:
         b6:eb:83:70:99:11:e8:79:10:8e:09:bb:28:0f:19:63:09:1b:
         1c:81:c2:ef:50:fc:cf:77:0b:37:51:8e:40:f2:18:cf:7d:de:
         78:24:61:bd:bc:78:67:b1:2a:98:84:53:c2:6d:08:46:f5:16:
         5b:68:a7:d2:bb:f0:88:61:d8:b7:58:da:cf:80:e2:91:4e:a2:
         31:a8:f3:ca:9c:ba:62:54:99:83:fd:35:98:dd:c1:98:8b:17:
         8b:b1:80:bc:0f:4a:c7:85:66:b9:20:53:98:48:76:10:fc:84:
         70:15:81:87:18:b2:c1:6c:9d:92:33:00:3d:86:6b:82:ec:d6:
         f7:27:ba:24:c3:59:c3:7f:ce:44:d4:3f:c8:72:d0:f0:f3:51:
         99:e4:bc:20:37:64:d1:ca:5a:48:38:c2:96:ee:f4:ec:b8:6c:
         91:18:41:4f:91:ca:9d:27:3f:c5:9d:0b:f4:c6:23:50:60:8e:
         a7:c3:e3:38:e8:84:74:6b:c7:ec:ee:27:74:e6:02:dc:b9:91:
         d3:83:25:fe:39:03:18:3c:a6:63:c7:ea:fb:d8:cc:05:1b:3c:
         ce:fd:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----