Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/d479ceb2e91de02ec32cd34df3052a8f24ffd3ff.roa
File:                     d479ceb2e91de02ec32cd34df3052a8f24ffd3ff.roa (raw, json)
Hash identifier:          s5mMKZW4inSB9Lrz7GcV1C70chxtPo8IQA8SBIC8d2c=
Subject key identifier:   D5:0B:97:08:B9:88:F3:EF:42:33:35:ED:B5:E4:CF:50:75:89:9F:7A
Certificate issuer:       /CN=50802344b486a4c01c04470934151964e086db83
Certificate serial:       0C6EAA
Authority key identifier: 11:36:9C:AD:EE:D0:36:AA:AB:A5:5F:B7:E5:EA:2F:8E:2A:EE:92:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50802344b486a4c01c04470934151964e086db83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/d479ceb2e91de02ec32cd34df3052a8f24ffd3ff.roa
Signing time:             Fri 11 Aug 2023 15:19:13 +0000
ROA not before:           Thu 10 Aug 2023 15:19:13 +0000
ROA not after:            Mon 11 Aug 2025 15:19:13 +0000
asID:                     272111
IP address blocks:        2803:f710::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814762 (0xc6eaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50802344b486a4c01c04470934151964e086db83
        Validity
            Not Before: Aug 10 15:19:13 2023 GMT
            Not After : Aug 11 15:19:13 2025 GMT
        Subject: CN=d479ceb2e91de02ec32cd34df3052a8f24ffd3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:1f:89:16:c5:1f:43:71:eb:1a:a1:8c:ff:
                    ca:de:d1:26:98:d0:a9:f4:53:69:93:f3:99:68:08:
                    fb:88:bf:f4:90:d4:01:4c:ce:0c:c8:71:c8:36:fb:
                    93:09:9b:81:5d:83:71:1f:7b:72:77:0a:37:1d:ba:
                    52:30:44:cf:b0:cf:32:cc:6b:80:f6:ea:a3:9a:b2:
                    58:43:6b:05:ce:be:e5:c1:81:b5:88:b1:17:8b:74:
                    d7:b8:55:e4:91:32:f4:bc:36:5c:77:23:00:fd:e3:
                    e7:20:f2:62:18:fe:27:c6:95:72:ce:60:60:7d:25:
                    0e:1f:47:de:0e:c3:8a:66:4d:4c:81:97:54:34:2e:
                    cc:bb:48:6f:b1:60:4f:3d:f9:a6:b3:69:a4:db:1c:
                    f1:52:df:e0:09:76:26:ac:a7:05:a7:80:f8:44:e1:
                    1d:e8:f2:0a:48:0e:ba:b4:6c:0c:f0:95:7c:53:fb:
                    5b:5f:6c:7b:d3:92:de:08:c1:97:a7:75:a2:ed:e1:
                    2f:e4:41:98:ce:42:7b:dc:ed:99:66:aa:11:8e:73:
                    ab:5e:89:09:4f:70:91:e4:b5:2d:d4:99:b6:7c:1c:
                    49:0a:12:0f:01:b8:48:30:1c:e1:4f:a6:66:6c:d0:
                    da:01:a9:42:b6:9e:1b:1c:10:c8:84:90:24:69:73:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:97:08:B9:88:F3:EF:42:33:35:ED:B5:E4:CF:50:75:89:9F:7A
            X509v3 Authority Key Identifier:
                keyid:11:36:9C:AD:EE:D0:36:AA:AB:A5:5F:B7:E5:EA:2F:8E:2A:EE:92:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50802344b486a4c01c04470934151964e086db83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/d479ceb2e91de02ec32cd34df3052a8f24ffd3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/50802344b486a4c01c04470934151964e086db83.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f710::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:7c:d2:a6:81:bb:9e:06:a1:d2:2f:35:f8:73:71:97:74:
         39:4b:2d:fc:86:38:b7:c6:6e:21:9b:31:79:74:ba:ce:c3:69:
         5a:20:1a:f0:42:47:cb:a5:ca:d7:87:fa:48:73:ce:52:35:49:
         ab:aa:8e:d2:27:4e:b7:fc:01:22:5d:83:0e:7a:7c:48:db:39:
         89:2a:36:20:96:e0:61:46:2a:57:10:19:61:a8:2c:09:61:e1:
         8f:9d:4b:b5:df:b4:29:10:4f:28:5b:c6:7a:b8:d2:b7:d7:bc:
         47:74:1c:5d:14:11:4b:60:e9:bf:b4:8f:f9:cc:1d:51:1f:04:
         e7:81:f1:f7:90:42:90:01:69:e0:5f:a3:bc:41:dc:c3:61:48:
         23:36:92:ce:2a:18:57:cb:6d:63:44:d4:af:ec:b9:3b:7d:1a:
         95:2c:71:5e:b3:0a:f8:f0:65:f7:cb:cf:8f:8c:18:d9:81:06:
         74:8a:d9:a7:96:b2:df:1e:28:a1:79:38:76:4c:a2:ef:e9:93:
         a9:4d:2f:8b:44:b2:60:28:c2:43:f1:fe:59:10:72:8c:08:71:
         e3:5d:8e:39:cf:d0:9d:77:5d:7e:07:1f:40:8f:96:a1:27:ce:
         4a:1e:bd:82:18:39:e4:b1:e1:ad:cc:7e:6d:c9:6f:21:85:ee:
         d2:4c:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----