Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/8e80d193bdf438cbca74a553e7aae8f3b072e978.roa
File:                     8e80d193bdf438cbca74a553e7aae8f3b072e978.roa (raw, json)
Hash identifier:          zDfwLJVp70Fg3DpZbNjDnyLddK5s8YWl4cDGr7gHKfU=
Subject key identifier:   3E:EA:32:9D:CC:96:44:A9:1E:C8:D6:B8:2D:6F:63:59:92:C9:B0:DD
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       059B58
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/8e80d193bdf438cbca74a553e7aae8f3b072e978.roa
Signing time:             Wed 30 Aug 2023 04:36:29 +0000
ROA not before:           Tue 29 Aug 2023 04:36:29 +0000
ROA not after:            Sat 30 Aug 2025 04:36:29 +0000
asID:                     272937
IP address blocks:        2803:3190:e000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367448 (0x59b58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Aug 29 04:36:29 2023 GMT
            Not After : Aug 30 04:36:29 2025 GMT
        Subject: CN=8e80d193bdf438cbca74a553e7aae8f3b072e978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:dd:29:4b:7c:20:75:78:11:f8:6b:14:81:
                    53:79:f0:e1:0d:75:6f:c9:d9:e3:43:70:ef:21:55:
                    bc:e4:6c:cc:5c:89:22:2f:df:b5:b6:90:92:7a:af:
                    12:a5:24:46:1c:e3:a6:df:4b:84:ed:40:17:f8:66:
                    51:b6:00:ec:de:17:98:6b:09:5d:64:08:b6:1f:02:
                    24:46:83:63:a6:19:16:23:f1:1e:87:da:80:fe:68:
                    30:ed:0a:f1:2b:a0:63:2d:72:80:26:95:6d:8e:8e:
                    1f:21:9d:ca:f1:43:24:ce:31:81:e7:fb:17:58:40:
                    22:d8:fe:97:cf:6b:24:b5:36:36:85:e7:a9:1f:7d:
                    34:66:31:cd:21:56:27:b9:c7:b7:6b:c8:f7:82:b0:
                    d9:b2:a1:de:10:24:59:46:20:bc:98:82:51:21:77:
                    29:0f:da:0f:f5:dd:b4:42:d1:a3:a7:20:76:5e:93:
                    d2:90:26:58:36:ad:c3:59:da:de:ce:aa:4f:4e:7c:
                    3f:95:6e:07:71:13:df:62:0f:3c:e1:cf:ac:3e:39:
                    b0:44:5c:a2:2e:d8:36:fa:45:6c:b9:23:d2:18:bb:
                    a0:48:0f:db:96:67:18:70:51:ce:9a:e2:de:72:7f:
                    95:77:a0:4e:9d:13:a3:ad:fa:42:be:a8:96:2f:28:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:32:9D:CC:96:44:A9:1E:C8:D6:B8:2D:6F:63:59:92:C9:B0:DD
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/8e80d193bdf438cbca74a553e7aae8f3b072e978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e000::/39

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:de:eb:c4:36:35:98:26:18:6d:bf:8e:70:4b:df:46:7c:
         78:1d:98:a0:f2:df:a7:ac:25:c2:c4:4f:61:4f:c6:2e:76:39:
         a3:01:6a:cb:e9:e4:ab:fe:41:15:17:7d:84:8a:cd:01:51:49:
         e4:56:03:a9:4f:3c:76:7d:8a:43:8b:1a:7e:41:cb:5b:bb:d8:
         9d:4b:84:d4:79:81:94:1b:fd:2d:f7:80:77:b8:de:68:ee:42:
         21:da:03:6e:ea:2d:7f:bc:b0:09:32:31:9f:22:99:de:bf:7c:
         70:1f:44:f2:1d:04:1d:5c:3e:a8:fd:52:c6:fc:35:5e:2d:11:
         14:dd:fc:10:57:31:5f:0f:b7:bf:9a:07:b6:6a:79:b0:55:06:
         15:14:9b:46:62:6e:cd:9b:d5:7c:94:82:4b:3c:e1:ba:36:82:
         f8:03:d6:e8:a5:4e:99:72:dc:fd:90:07:2a:c8:0b:4d:0d:9a:
         bf:96:db:90:b7:15:fe:43:93:bf:03:b7:b9:0d:bc:fb:21:b6:
         7a:41:55:3d:2a:d2:83:6e:30:f7:98:5b:1a:ee:c4:9c:88:4c:
         d8:75:97:0c:cb:61:f7:29:44:4e:0f:fa:ad:99:f1:f5:4b:13:
         25:6d:03:ea:b4:d1:04:3d:e0:70:12:9d:1f:2c:3d:1d:95:13:
         57:60:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----