Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/77eae4b6adc1d5cd47a1d2708babb760bdcf13d1.roa
File:                     77eae4b6adc1d5cd47a1d2708babb760bdcf13d1.roa (raw, json)
Hash identifier:          IPAq7B8rvKvd5ehQu8dN/a3NcdHuQa5VlDR8/QiAf2U=
Subject key identifier:   54:A5:93:65:58:8D:83:99:81:32:A5:B4:59:8D:0F:A8:57:69:86:2F
Certificate issuer:       /CN=8feb5b04bb39522f043c7303dc6c68fe603e6c09
Certificate serial:       02D2AA
Authority key identifier: 76:86:9C:CC:14:1D:BD:CB:1A:49:D6:D9:75:00:85:8E:2C:DF:5B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8feb5b04bb39522f043c7303dc6c68fe603e6c09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/77eae4b6adc1d5cd47a1d2708babb760bdcf13d1.roa
Signing time:             Thu 05 Oct 2023 19:56:42 +0000
ROA not before:           Wed 04 Oct 2023 19:56:42 +0000
ROA not after:            Sun 05 Oct 2025 19:56:42 +0000
asID:                     272083
IP address blocks:        2803:5b10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185002 (0x2d2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feb5b04bb39522f043c7303dc6c68fe603e6c09
        Validity
            Not Before: Oct  4 19:56:42 2023 GMT
            Not After : Oct  5 19:56:42 2025 GMT
        Subject: CN=77eae4b6adc1d5cd47a1d2708babb760bdcf13d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:b8:0b:1f:c5:1e:04:96:30:5a:4c:30:a1:
                    50:65:6e:5e:5e:b1:8a:cf:19:60:dc:da:06:59:c2:
                    25:4a:c0:c3:3c:23:16:f1:92:11:c5:ab:7f:04:e1:
                    a3:9c:33:47:0f:90:0f:2f:aa:7c:2b:81:81:99:4b:
                    0a:b1:f9:f1:89:9f:d8:0b:28:c7:1f:74:1f:54:f1:
                    c2:9f:d4:c9:cf:09:d5:ce:65:c6:ad:0d:3a:55:5f:
                    a2:e9:13:7f:b6:f8:8a:b8:72:59:84:e2:4f:19:1e:
                    39:bd:33:ba:69:92:83:ec:bc:19:43:ec:a9:42:99:
                    c9:b9:4a:4f:44:06:00:de:3a:01:7b:c0:d3:3f:ab:
                    c4:fc:e7:16:1a:87:eb:72:00:44:fc:7b:34:46:e1:
                    42:a9:36:67:2b:68:27:c4:05:07:3e:b5:86:17:3a:
                    e1:3e:79:65:b3:24:57:ac:b3:b4:45:da:bb:40:2a:
                    04:52:1e:0f:7d:e3:76:ee:23:25:1e:43:2b:03:46:
                    97:9d:5e:b6:24:74:15:63:dd:6d:1c:f9:d0:a8:85:
                    45:b5:89:0b:56:fe:17:3d:cb:43:f6:f3:31:50:d8:
                    46:30:09:81:1d:5e:29:9d:cb:d1:6b:28:1e:27:12:
                    03:78:f9:3e:64:8b:c3:2a:9d:d9:bc:7f:a9:27:45:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:93:65:58:8D:83:99:81:32:A5:B4:59:8D:0F:A8:57:69:86:2F
            X509v3 Authority Key Identifier:
                keyid:76:86:9C:CC:14:1D:BD:CB:1A:49:D6:D9:75:00:85:8E:2C:DF:5B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8feb5b04bb39522f043c7303dc6c68fe603e6c09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/77eae4b6adc1d5cd47a1d2708babb760bdcf13d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaf8ca69-f87e-4f0a-a4ac-c860a44902f1/8feb5b04bb39522f043c7303dc6c68fe603e6c09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:03:c6:16:22:af:9c:83:78:52:fe:78:64:c9:77:4d:14:a5:
         31:c3:ff:b9:79:1a:4e:f1:e1:fb:87:8b:bc:5f:31:0e:34:a6:
         d3:e7:ac:4b:09:1c:f9:53:9f:19:e0:a8:f0:60:72:c5:9e:45:
         03:e7:e0:ad:89:dc:a2:46:6c:86:8a:55:72:4b:10:62:d7:c4:
         f2:40:7c:8f:01:98:a2:fb:e1:60:aa:f7:0b:33:de:0b:af:7c:
         23:35:35:22:48:c6:17:47:0d:60:90:68:b3:e5:a7:f2:6a:2e:
         c6:76:d3:43:bf:38:88:e3:90:f2:d5:d4:52:83:34:5f:e5:09:
         c4:78:4a:b8:e9:cd:98:4c:92:0e:8b:e7:91:f7:99:9f:66:7a:
         9f:f3:a3:ad:c8:c8:00:ba:74:77:bc:26:70:07:3b:be:dc:39:
         d8:b0:57:9c:4b:7c:34:27:4a:01:3c:61:c0:db:96:d3:2c:14:
         bd:b4:f8:59:ed:2f:50:3e:e5:e1:88:58:12:66:ba:da:df:23:
         8a:c2:dc:52:11:f8:c5:1f:a4:21:c8:f5:f7:c3:a5:6c:26:b4:
         a0:d1:09:95:cf:f0:56:76:8f:99:34:ad:00:c2:d1:4b:5d:f1:
         89:a8:51:84:4f:71:b6:65:e9:60:21:59:81:41:c2:05:ad:7e:
         b7:09:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----