Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/f4209cad6baabe28bec25992a33f21722814e87e.roa
File:                     f4209cad6baabe28bec25992a33f21722814e87e.roa (raw, json)
Hash identifier:          1cEA86Wwz1Uvper5VUxj21vDyWO8wxFuBkKIVqIaq1Y=
Subject key identifier:   F0:43:FA:8B:C0:38:59:A0:4D:18:62:9F:B4:72:1F:D2:55:1A:BA:96
Certificate issuer:       /CN=6aca29b07c02c710bd73d00bf0cd4579755f76d4
Certificate serial:       021091
Authority key identifier: 6E:66:B5:91:73:A1:AE:FD:FD:5D:17:53:A4:C6:4A:66:80:B2:BD:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aca29b07c02c710bd73d00bf0cd4579755f76d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/f4209cad6baabe28bec25992a33f21722814e87e.roa
Signing time:             Mon 03 Jul 2023 14:37:39 +0000
ROA not before:           Sun 02 Jul 2023 14:37:39 +0000
ROA not after:            Thu 03 Jul 2025 14:37:39 +0000
asID:                     272882
IP address blocks:        2803:9a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135313 (0x21091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca29b07c02c710bd73d00bf0cd4579755f76d4
        Validity
            Not Before: Jul  2 14:37:39 2023 GMT
            Not After : Jul  3 14:37:39 2025 GMT
        Subject: CN=f4209cad6baabe28bec25992a33f21722814e87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:15:f0:2f:7a:87:bb:dd:bb:16:95:6d:56:
                    1a:a4:3c:52:cf:af:41:2a:13:2c:21:71:58:64:dd:
                    cb:5f:ee:d8:cd:3f:d2:e4:3e:b1:1f:fe:30:08:74:
                    20:7a:9b:8e:8e:b6:42:1f:63:bb:71:eb:1e:a8:44:
                    74:95:54:04:aa:b0:7f:5b:82:40:55:df:f1:f0:dc:
                    ec:9a:20:d9:89:93:8b:cf:67:f7:6e:86:5e:d8:22:
                    b1:7f:32:ce:97:89:c8:d7:33:93:71:94:cd:17:fb:
                    16:32:39:e6:ad:4c:40:40:4c:a3:27:89:31:45:de:
                    59:3f:d3:b0:b0:e4:ed:33:78:dd:c5:79:82:9b:3c:
                    9f:51:37:f7:19:7d:40:4d:9e:b3:ef:3b:61:c7:6e:
                    62:a5:c3:1c:b6:8e:1b:26:12:22:93:82:1f:df:4f:
                    23:74:b1:56:02:c7:24:2a:02:14:29:9f:1f:35:1b:
                    52:a0:34:31:a5:dc:47:f1:ae:e5:60:23:7a:b5:50:
                    7b:db:18:94:ae:5a:e8:3b:fa:cc:3a:48:25:87:af:
                    8c:e3:27:9e:a3:6a:06:4e:81:e8:c6:33:25:3a:c1:
                    44:b2:04:e9:02:4a:6c:ab:67:0f:e6:f6:4d:95:69:
                    8a:7c:b2:fd:15:a9:7c:24:3b:a0:4a:30:c6:ec:dd:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:43:FA:8B:C0:38:59:A0:4D:18:62:9F:B4:72:1F:D2:55:1A:BA:96
            X509v3 Authority Key Identifier:
                keyid:6E:66:B5:91:73:A1:AE:FD:FD:5D:17:53:A4:C6:4A:66:80:B2:BD:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aca29b07c02c710bd73d00bf0cd4579755f76d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/f4209cad6baabe28bec25992a33f21722814e87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/6aca29b07c02c710bd73d00bf0cd4579755f76d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:5b:ae:55:4e:0c:35:e8:a8:a5:88:75:72:94:48:7d:6b:
         90:9c:d4:fa:6e:a8:a1:a9:26:de:f6:46:6b:a7:35:51:58:51:
         69:5a:4c:78:ea:f5:03:b4:f9:d9:2a:9c:3c:f9:01:76:4c:69:
         57:ba:6b:c8:52:aa:4d:bb:67:7b:9f:f4:f7:0c:7b:07:41:38:
         20:f3:3c:84:77:96:95:0c:28:5b:54:76:c4:ff:3c:a4:2e:61:
         90:3a:11:a0:0f:57:c8:44:87:6f:fd:9e:1c:53:5d:ed:d0:c1:
         bb:1c:dc:c3:4f:68:5a:0f:30:33:67:77:76:ae:a5:51:06:9d:
         a3:79:55:ec:73:15:55:f3:d0:d2:58:4b:f4:85:55:72:d3:ba:
         0c:55:29:85:69:32:42:db:7b:ce:91:38:85:dc:f6:9c:5c:e9:
         92:f1:50:fe:36:6d:22:b3:f1:77:5e:0a:f2:6c:fc:c9:0e:5c:
         e6:bd:c3:36:b6:3e:72:39:13:89:95:2a:bb:66:96:d6:aa:9a:
         cd:c1:13:e2:24:f1:a5:82:ed:a3:0e:3f:48:12:7e:7e:6a:d7:
         31:0f:98:53:8b:e3:a1:72:bb:cb:dd:d5:8d:05:4e:02:eb:83:
         ad:8b:39:85:74:a0:08:a5:2c:0f:ee:32:6b:ec:79:e0:b7:f1:
         b0:ca:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----