Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/901e6f46b9c8fa47db94fd33863875c0eff55084.roa
File:                     901e6f46b9c8fa47db94fd33863875c0eff55084.roa (raw, json)
Hash identifier:          90v2+bxhMwtcHCX0SIu9UR7SCbJoICbXgcsLcDSl54E=
Subject key identifier:   F1:6E:A3:18:39:50:B8:53:C7:5C:BC:27:4D:3D:19:C3:11:60:DD:83
Certificate issuer:       /CN=aa48bdf98923c008b9085066d1cb5863456f5e2e
Certificate serial:       118BB4
Authority key identifier: DA:E6:08:EB:3B:4E:CC:C7:82:8B:3E:6C:00:13:D3:5C:0A:6A:BC:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa48bdf98923c008b9085066d1cb5863456f5e2e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/901e6f46b9c8fa47db94fd33863875c0eff55084.roa
Signing time:             Wed 13 Sep 2023 08:30:00 +0000
ROA not before:           Tue 12 Sep 2023 08:30:00 +0000
ROA not after:            Thu 11 Sep 2025 08:30:00 +0000
asID:                     271915
IP address blocks:        2803:7210::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149876 (0x118bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa48bdf98923c008b9085066d1cb5863456f5e2e
        Validity
            Not Before: Sep 12 08:30:00 2023 GMT
            Not After : Sep 11 08:30:00 2025 GMT
        Subject: CN=901e6f46b9c8fa47db94fd33863875c0eff55084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:bf:62:15:03:eb:83:07:04:fc:71:4f:5c:
                    f7:92:99:87:12:ff:98:6e:de:95:f8:0f:68:c0:09:
                    56:d9:71:dc:ba:32:c6:a7:be:53:58:73:6b:d8:d4:
                    cf:96:fe:00:ef:58:1e:55:11:e4:ce:83:d0:ef:75:
                    a2:84:4d:b2:2e:6f:8a:77:ac:a9:3d:d4:98:6b:76:
                    74:76:b2:7c:08:32:2e:9c:2e:2f:8e:31:e9:0c:55:
                    99:b6:1e:ad:d1:b7:c2:bd:87:b0:c1:53:c9:ec:5b:
                    82:55:81:b3:b7:c2:74:ca:12:55:85:dd:d0:95:2e:
                    e3:94:a5:df:22:4e:3e:7c:f7:62:97:f3:09:60:5d:
                    f7:1c:60:69:da:70:2d:55:71:f3:b7:22:a5:c5:b8:
                    bd:8f:13:9b:7e:fc:42:66:56:0a:0d:3c:0e:47:a7:
                    36:34:f8:63:1b:27:20:a8:80:b3:06:00:c3:fe:88:
                    6e:a5:6b:d9:d4:6c:a8:c7:a3:eb:8a:42:2d:71:6f:
                    2b:2a:c7:05:ab:2f:2c:d8:41:b4:73:7f:d2:46:26:
                    0b:4f:a8:39:7d:08:27:14:2e:8a:d3:b2:fe:d1:40:
                    10:01:cc:fe:0b:35:8b:97:68:9e:f7:df:68:1c:49:
                    b7:98:11:04:b0:01:6e:2c:f5:47:ed:9e:c4:ba:e2:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:A3:18:39:50:B8:53:C7:5C:BC:27:4D:3D:19:C3:11:60:DD:83
            X509v3 Authority Key Identifier:
                keyid:DA:E6:08:EB:3B:4E:CC:C7:82:8B:3E:6C:00:13:D3:5C:0A:6A:BC:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa48bdf98923c008b9085066d1cb5863456f5e2e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/901e6f46b9c8fa47db94fd33863875c0eff55084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b73b77a4-7c4f-4089-b6ce-b2ce27ae92e5/aa48bdf98923c008b9085066d1cb5863456f5e2e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7210::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:9f:85:26:96:fd:87:2c:c2:93:7c:96:c3:4e:cf:a7:54:
         8d:3f:11:e7:a5:10:a1:69:bd:1e:d6:29:1c:35:99:db:a4:9d:
         f4:a5:95:e3:72:de:b1:56:a6:c9:c1:c1:27:04:bd:85:ee:54:
         5a:83:39:06:da:ab:34:df:3d:dc:c0:e3:b1:d3:ee:68:ff:ea:
         e0:09:35:d4:3a:14:47:cf:fc:4c:5e:5a:ca:b8:2c:3e:36:40:
         de:a1:8b:85:c7:d4:99:fd:30:72:57:36:e1:08:b8:3d:74:0f:
         91:f1:69:6d:7c:b4:59:00:2a:32:7a:ef:0f:a3:a6:a3:57:b1:
         65:ac:30:4b:06:f5:12:a9:26:55:8c:fd:86:ca:ae:c3:ff:86:
         27:2d:29:34:8e:5c:13:42:86:6e:c5:71:78:e5:98:19:b4:99:
         01:29:36:de:49:e9:14:f2:c9:30:70:2e:ac:ca:8a:77:ea:75:
         39:7d:53:bb:86:1d:83:ba:5d:43:be:5c:90:fa:b3:04:88:d9:
         09:e4:bf:1d:bd:be:c4:ca:f6:24:35:b0:38:58:b9:8d:e7:1b:
         14:c4:a3:3d:16:be:63:4b:b2:01:ad:ed:2e:58:2b:09:dd:46:
         56:eb:f1:03:63:a6:7e:79:80:58:b4:cc:f0:5f:5a:30:b4:88:
         88:8f:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----