Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/08ea08b19fbebe1f20e991bcc78a25551316b594.roa
File:                     08ea08b19fbebe1f20e991bcc78a25551316b594.roa (raw, json)
Hash identifier:          J2nqd4tm5UHqwSiX4xvBBrkA58Le+YkkSgDwIto0ivg=
Subject key identifier:   84:D7:78:9F:19:E5:A6:C5:55:CA:0D:A6:1C:CC:4D:77:9D:3A:A9:83
Certificate issuer:       /CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
Certificate serial:       027A8F
Authority key identifier: 4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/08ea08b19fbebe1f20e991bcc78a25551316b594.roa
Signing time:             Tue 19 Mar 2024 21:29:53 +0000
ROA not before:           Tue 19 Mar 2024 21:29:53 +0000
ROA not after:            Thu 19 Mar 2026 21:29:53 +0000
asID:                     264696
IP address blocks:        2803:9340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162447 (0x27a8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
        Validity
            Not Before: Mar 19 21:29:53 2024 GMT
            Not After : Mar 19 21:29:53 2026 GMT
        Subject: CN=08ea08b19fbebe1f20e991bcc78a25551316b594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:da:d5:db:05:c0:43:54:80:61:c7:f7:03:
                    ec:b2:54:57:11:83:74:af:5d:5e:4d:39:c1:37:82:
                    ab:d7:b5:78:91:6e:fe:47:00:87:92:71:8c:c9:54:
                    5a:8c:1a:e0:e7:c3:77:45:be:d5:ca:36:13:fe:4d:
                    33:61:af:26:63:25:9c:69:52:3f:63:a5:f8:ba:76:
                    08:18:98:48:a9:a9:d6:a0:2c:8a:27:05:72:db:3f:
                    1c:5f:75:61:e8:3a:51:6f:3e:9e:9b:bf:03:63:a8:
                    ab:16:83:4a:48:2d:2a:cf:36:35:b9:32:d2:22:ea:
                    59:39:39:26:bf:13:32:fa:12:c4:be:33:b9:fe:37:
                    8a:5d:38:92:78:e6:81:12:da:c2:8a:22:34:8a:c1:
                    ff:57:1f:b0:21:fb:5f:bb:fe:1c:f5:8d:a6:e5:f0:
                    b3:87:db:aa:98:03:2b:be:8c:21:a5:98:67:d8:6c:
                    02:fd:0e:de:50:f3:07:3e:e9:a0:8c:9c:ff:f8:09:
                    9b:1d:6a:4a:58:90:32:c3:1d:98:4e:5b:36:31:23:
                    d6:04:e9:d8:44:3f:da:0c:84:95:34:45:5b:03:20:
                    97:2e:5d:fe:bc:7b:4b:bf:c6:12:ea:c9:31:06:b5:
                    39:db:2d:f9:81:08:3c:60:d5:08:4a:10:0b:95:ca:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:78:9F:19:E5:A6:C5:55:CA:0D:A6:1C:CC:4D:77:9D:3A:A9:83
            X509v3 Authority Key Identifier:
                keyid:4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/08ea08b19fbebe1f20e991bcc78a25551316b594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:48:15:08:b3:98:96:a2:a1:72:b3:f1:6d:a7:ce:fd:9d:
         39:89:85:3a:85:c5:7d:2e:c3:2c:56:8f:43:c9:ce:74:c4:0d:
         6a:83:7f:95:d7:8e:23:04:ab:89:1f:c7:96:e6:b0:34:c4:cb:
         4d:8a:27:59:7f:ea:40:c0:ca:55:ff:af:e6:28:0e:58:fc:cf:
         76:5a:e2:7f:67:ee:60:0f:9a:42:95:14:7f:80:a6:5b:6f:c0:
         3a:c3:1c:1b:c0:5b:e4:f4:5e:1a:8b:96:20:07:b5:ba:7c:fb:
         8c:87:ca:79:7e:0d:a1:0c:4b:3f:d8:68:51:89:66:9e:58:a5:
         14:26:45:af:a1:8c:98:0d:de:e3:26:23:b0:e6:ee:27:15:70:
         b8:65:4b:c3:32:f7:df:9a:69:51:8c:3f:37:bb:7f:1b:5a:27:
         55:05:25:b4:fa:8b:7b:4e:97:95:c9:ca:f5:75:35:2a:7f:14:
         34:51:a1:57:81:a6:89:b1:b5:fe:24:cd:63:b7:eb:cd:31:89:
         ce:cc:21:25:66:cf:5c:91:d2:10:4a:97:e5:85:18:a7:ed:69:
         7c:6c:03:88:82:95:6c:ab:cb:f9:2d:8e:ad:37:e0:d9:2b:20:
         6f:18:23:3b:c3:d7:54:85:c6:a2:b5:e8:10:c3:55:14:a1:3b:
         36:fb:c8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----