Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b59fa4a8-8e3c-4646-aeff-a98f777e2171/d1549163d1bd0196a3bd4c59fc63e32395c5e70f.roa
File:                     d1549163d1bd0196a3bd4c59fc63e32395c5e70f.roa (raw, json)
Hash identifier:          8O6FQ98m02yCLhdDxrHYP/C7WHT0KwsCvunk+mzFPRo=
Subject key identifier:   4B:EA:89:71:91:27:F8:75:51:57:9A:CB:54:D0:24:64:DC:9F:00:F4
Certificate issuer:       /CN=048cc0a5fafbc24c3a900a426ce4f88a71c78d23
Certificate serial:       5774
Authority key identifier: 93:0E:21:C6:0A:40:B8:80:C5:5A:AC:BE:D3:7B:6D:00:5A:4C:15:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048cc0a5fafbc24c3a900a426ce4f88a71c78d23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b59fa4a8-8e3c-4646-aeff-a98f777e2171/d1549163d1bd0196a3bd4c59fc63e32395c5e70f.roa
Signing time:             Mon 20 Nov 2023 15:26:10 +0000
ROA not before:           Mon 20 Nov 2023 15:26:10 +0000
ROA not after:            Thu 20 Nov 2025 15:26:10 +0000
asID:                     273102
IP address blocks:        2803:b050::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22388 (0x5774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048cc0a5fafbc24c3a900a426ce4f88a71c78d23
        Validity
            Not Before: Nov 20 15:26:10 2023 GMT
            Not After : Nov 20 15:26:10 2025 GMT
        Subject: CN=d1549163d1bd0196a3bd4c59fc63e32395c5e70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:4f:16:62:b6:65:9c:97:15:1a:3f:b8:4e:
                    e9:e9:b3:10:5f:c9:6e:9f:de:d3:e4:06:15:f0:0e:
                    0e:94:07:7c:5a:db:da:be:14:db:5d:97:ef:2d:b4:
                    5c:89:46:bc:4e:ac:03:b3:e8:fa:6b:7d:c1:93:77:
                    04:dc:15:1c:7d:9f:cc:f6:c4:32:70:cd:4f:d3:fa:
                    29:e5:bb:94:b0:b5:a6:55:78:91:a2:c3:da:c1:e6:
                    03:35:db:c8:9b:64:44:b0:a2:4a:d5:81:93:1d:a3:
                    b6:ca:2c:4d:84:82:0a:2e:5e:b1:75:31:28:d8:aa:
                    34:8c:41:63:43:8f:19:ed:b1:ca:6e:ab:0e:40:13:
                    7c:db:d7:fc:7e:a5:67:10:14:11:4d:e6:b6:18:27:
                    8b:67:32:42:76:d3:a5:07:8b:3a:3b:1d:e5:df:4e:
                    ac:74:16:28:04:72:13:35:58:a5:8d:2f:6a:f9:a4:
                    99:eb:3f:31:01:ae:02:42:37:6d:3c:a9:55:86:da:
                    a8:ea:87:39:58:39:b7:d9:51:44:1f:94:c2:12:f0:
                    9c:ba:c8:76:dd:6d:80:8c:3e:90:4c:ca:1f:4f:7f:
                    8b:ed:89:a1:50:c9:13:66:a7:72:8a:a9:41:9d:52:
                    5c:29:4a:80:13:63:63:37:de:6f:2e:04:05:92:43:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EA:89:71:91:27:F8:75:51:57:9A:CB:54:D0:24:64:DC:9F:00:F4
            X509v3 Authority Key Identifier:
                keyid:93:0E:21:C6:0A:40:B8:80:C5:5A:AC:BE:D3:7B:6D:00:5A:4C:15:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048cc0a5fafbc24c3a900a426ce4f88a71c78d23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b59fa4a8-8e3c-4646-aeff-a98f777e2171/d1549163d1bd0196a3bd4c59fc63e32395c5e70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b59fa4a8-8e3c-4646-aeff-a98f777e2171/048cc0a5fafbc24c3a900a426ce4f88a71c78d23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b050::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:b6:02:12:ac:3d:8b:38:77:51:f7:18:53:96:8a:64:cd:
         93:35:92:2f:cd:78:f1:b5:b0:74:6c:03:27:cf:f7:e0:2c:b1:
         97:d4:b5:9c:d6:ef:fd:c7:5c:4f:7b:87:d1:d7:94:ff:da:05:
         ea:1e:1c:86:13:2e:73:7e:e5:b3:ef:ab:8a:0f:b9:1e:02:48:
         ef:b1:ae:3d:90:b9:5c:8e:c0:80:09:3f:39:c2:2b:81:ff:37:
         8f:8d:66:6a:9f:e0:f2:3b:f6:fe:c5:7f:f0:c4:8e:de:1c:36:
         1a:11:a7:d4:ed:bd:f1:20:bc:fb:3c:f4:0c:eb:44:b3:e1:06:
         f7:9d:f9:97:62:8f:7c:85:dd:90:fc:31:7e:22:d0:3f:a5:5a:
         29:cb:65:99:82:83:a7:83:21:97:3b:3c:47:b2:6b:5d:7c:8e:
         79:00:ec:3f:b6:c7:cc:06:28:ce:2d:a3:dc:ec:33:58:63:ca:
         d5:50:b6:5d:1e:cd:5b:ea:cd:2a:5b:14:cb:78:c1:3b:c6:e6:
         d8:63:1a:a6:a3:26:a4:0a:3e:5f:e5:06:50:f6:d2:e4:d7:32:
         e6:a8:47:56:3b:06:0a:91:f0:78:a9:a8:bc:05:0b:e0:e6:0f:
         27:61:99:9e:06:fa:b4:29:e1:c5:b7:80:de:48:c1:af:a6:ff:
         a6:94:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----