Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/ace9e26a071dc514756b3c5d3137eca34ae05c30.roa
File:                     ace9e26a071dc514756b3c5d3137eca34ae05c30.roa (raw, json)
Hash identifier:          eQsdXsFbLb3uGCU7HLU1t4BqGUPdNiLp6E6eTkH3nEo=
Subject key identifier:   CD:BA:76:E6:79:28:BE:06:19:0B:CB:F8:A7:78:DD:49:6C:50:DC:D5
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       67D1
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/ace9e26a071dc514756b3c5d3137eca34ae05c30.roa
Signing time:             Wed 08 Feb 2023 19:56:34 +0000
ROA not before:           Wed 01 Feb 2023 23:04:10 +0000
ROA not after:            Wed 05 Feb 2025 23:04:10 +0000
asID:                     272937
IP address blocks:        2803:3190::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26577 (0x67d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Feb  1 23:04:10 2023 GMT
            Not After : Feb  5 23:04:10 2025 GMT
        Subject: CN=ace9e26a071dc514756b3c5d3137eca34ae05c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:39:25:90:84:f5:66:32:ce:fe:30:3d:36:
                    47:36:9c:92:e0:db:18:d9:8e:2d:4f:2f:04:72:b1:
                    dc:bd:3a:66:2e:c2:0f:c8:57:18:1a:ba:66:b2:08:
                    50:93:a0:f0:23:b0:9b:60:fb:cb:f6:46:58:dc:6e:
                    dd:42:4f:fc:5f:20:1d:74:de:ca:85:12:59:2b:28:
                    60:d6:8f:ab:26:d7:af:59:74:35:9b:18:5a:73:f1:
                    37:71:37:a1:d2:80:d1:da:c6:2d:7f:90:3e:21:69:
                    f1:1e:6c:a0:f0:e0:f2:05:47:ed:dd:f7:3d:58:32:
                    36:45:09:17:8a:da:b3:24:8c:90:71:e8:06:8c:a5:
                    fd:4f:d9:6b:01:23:3d:2f:91:89:ce:42:fe:9d:4c:
                    ba:16:5c:47:20:ca:d9:03:5b:d6:45:7b:b5:09:4f:
                    40:7c:86:6a:9a:5a:f4:c6:0a:a9:79:79:77:97:66:
                    ba:bf:b6:ab:eb:a2:86:08:a1:64:61:6c:16:55:bc:
                    02:e7:9b:e5:51:da:a8:0e:8b:74:7e:de:28:5e:65:
                    ff:63:6a:27:77:57:0e:96:ce:01:3b:00:1b:73:70:
                    c2:fe:2b:f0:6c:bd:04:6c:51:f7:a6:77:fa:96:e7:
                    ec:0c:06:a8:6b:43:11:fe:e1:0f:93:7f:d9:0f:b6:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:76:E6:79:28:BE:06:19:0B:CB:F8:A7:78:DD:49:6C:50:DC:D5
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/ace9e26a071dc514756b3c5d3137eca34ae05c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:44:b0:23:d2:4f:71:a0:93:5f:29:27:b6:a5:b3:72:8f:55:
         79:1f:82:a7:df:14:8a:28:87:21:2e:8f:15:4b:e4:c3:bc:a7:
         85:99:25:7e:79:92:1d:4a:5c:6f:37:72:68:a3:88:38:d3:e9:
         46:0b:5d:3f:19:e1:3b:ee:0e:82:c3:01:4e:44:95:be:f6:aa:
         26:92:17:7a:f7:5d:c8:bb:dd:82:d2:0a:e4:49:88:d6:c7:d9:
         22:03:ec:65:a7:60:d8:0c:e7:72:df:0a:60:e2:5b:b2:31:64:
         3e:8c:c9:8c:35:88:96:4b:85:dc:0e:40:81:0d:64:c1:4b:5d:
         27:7b:47:86:a0:e8:02:40:d1:25:57:87:98:06:3a:29:a4:0b:
         36:b0:90:06:26:e4:c6:d0:41:33:d2:a0:0c:db:71:3a:22:61:
         34:f4:ca:e0:ff:3c:4f:e2:8d:39:43:43:8f:e2:ba:c0:56:bd:
         12:bb:cf:f4:9a:26:8a:27:65:fb:47:11:b4:62:98:2a:25:a3:
         87:d7:43:9e:60:e4:b1:3e:7f:0b:b8:52:14:56:cf:2b:9d:73:
         cd:21:72:82:e8:8c:92:f6:aa:2e:63:52:b0:9c:9a:1e:ea:6d:
         3d:a5:d0:1c:ff:6d:6c:93:ca:85:64:86:c4:b8:99:17:34:1a:
         c4:08:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----