Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8646382-c048-4171-8599-f7bf0be1b664/6b14c29c83b649b045362cc08f4969bcdeed1282.roa
File:                     6b14c29c83b649b045362cc08f4969bcdeed1282.roa (raw, json)
Hash identifier:          WzkbHsbvrElUueX7tus3weCrFJm6n5xiufBzkaWSIaM=
Subject key identifier:   4A:73:52:27:2B:9C:F0:55:D9:18:98:AE:40:8C:39:92:2E:9A:B9:F5
Certificate issuer:       /CN=53f54db2e3145aee991c093f42286d81fc93199a
Certificate serial:       EACC
Authority key identifier: 0A:9A:93:1D:2B:4A:5E:76:66:DD:3A:49:4E:77:81:69:5F:CC:CA:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53f54db2e3145aee991c093f42286d81fc93199a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8646382-c048-4171-8599-f7bf0be1b664/6b14c29c83b649b045362cc08f4969bcdeed1282.roa
Signing time:             Sat 02 Dec 2023 00:47:22 +0000
ROA not before:           Sat 02 Dec 2023 00:47:22 +0000
ROA not after:            Tue 02 Dec 2025 00:47:22 +0000
asID:                     273113
IP address blocks:        2803:6850::/48 maxlen: 48
                          2803:6850:1::/48 maxlen: 48
                          2803:6850:2::/48 maxlen: 48
                          2803:6850:3::/48 maxlen: 48
                          2803:6850:4::/48 maxlen: 48
                          2803:6850:5::/48 maxlen: 48
                          2803:6850:6::/48 maxlen: 48
                          2803:6850:7::/48 maxlen: 48
                          2803:6850:8::/48 maxlen: 48
                          2803:6850:9::/48 maxlen: 48
                          2803:6850:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60108 (0xeacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f54db2e3145aee991c093f42286d81fc93199a
        Validity
            Not Before: Dec  2 00:47:22 2023 GMT
            Not After : Dec  2 00:47:22 2025 GMT
        Subject: CN=6b14c29c83b649b045362cc08f4969bcdeed1282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:7e:76:d0:fe:ae:ca:db:8a:31:3f:88:09:
                    54:e9:1a:e4:77:aa:53:32:28:9a:88:71:a9:0c:cf:
                    9c:e3:53:d8:e2:62:8a:fa:7a:a5:75:13:5a:83:ea:
                    8b:fb:2f:b9:bf:88:d9:14:92:62:7c:19:27:d3:03:
                    81:01:54:42:14:0f:03:c8:43:6e:1d:59:d9:34:ea:
                    c4:57:eb:31:b3:57:b2:4d:4f:9c:11:e6:90:ca:a8:
                    1e:98:6d:03:5e:c9:1b:c9:70:38:49:b7:b8:9f:0c:
                    a5:0e:6b:7f:2c:1e:19:cf:af:4f:64:81:d9:73:10:
                    49:2f:22:04:2d:82:ee:fa:5f:1a:47:3b:78:b9:41:
                    d0:d8:99:41:eb:45:23:f6:d1:93:c2:d4:9e:08:22:
                    e3:b4:9a:c9:43:e7:4f:d4:c7:c2:b1:fe:b9:c1:01:
                    8d:50:0f:f0:ec:7e:ae:8d:e2:c0:9b:ac:68:10:21:
                    f5:07:70:2d:d0:88:a7:a8:2a:ec:36:22:65:e5:48:
                    49:71:58:8f:d5:4b:93:28:0b:40:76:da:53:ad:15:
                    78:ec:42:43:9e:4b:9e:4a:ed:76:3e:6f:79:bc:79:
                    2e:96:d5:7c:53:85:2b:4c:56:f4:43:b6:77:10:dc:
                    77:ab:c2:2c:4c:ce:a2:3b:6e:39:4c:22:03:19:14:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:52:27:2B:9C:F0:55:D9:18:98:AE:40:8C:39:92:2E:9A:B9:F5
            X509v3 Authority Key Identifier:
                keyid:0A:9A:93:1D:2B:4A:5E:76:66:DD:3A:49:4E:77:81:69:5F:CC:CA:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53f54db2e3145aee991c093f42286d81fc93199a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8646382-c048-4171-8599-f7bf0be1b664/6b14c29c83b649b045362cc08f4969bcdeed1282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8646382-c048-4171-8599-f7bf0be1b664/53f54db2e3145aee991c093f42286d81fc93199a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850::-2803:6850:a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:d2:43:b6:4b:11:41:61:d0:50:8e:e2:2a:fd:42:90:78:
         d4:21:c0:0e:4f:aa:b7:b0:ab:d6:bd:df:b1:58:5d:8e:98:2b:
         58:a3:21:75:ae:cf:10:aa:aa:2b:ba:16:d2:4e:f2:7e:bd:cc:
         79:53:97:48:f9:ed:c2:b1:76:b5:b5:fd:72:e3:81:d7:c6:b7:
         2e:97:b9:a1:6b:57:e3:81:f0:eb:62:07:9a:2f:ad:d3:39:fe:
         f6:b7:ce:61:0f:35:38:be:45:b6:4b:46:d5:5d:ed:b8:ce:5d:
         8c:c7:2c:75:05:45:9f:96:de:ce:8a:55:28:53:05:82:1b:0e:
         b4:f9:93:1e:36:55:d4:e4:1a:17:ad:fe:18:2f:40:4b:c1:c5:
         f3:5b:17:0b:5a:06:5a:b7:c6:e3:be:44:2e:c8:73:71:b3:ce:
         3a:30:f1:6a:92:86:c3:54:5f:84:33:a3:d1:fa:59:57:fa:84:
         24:c1:d4:76:93:92:1c:98:88:7a:eb:a8:76:d5:5b:95:ae:7e:
         5e:63:ab:17:ec:45:d6:ee:00:c5:9c:f9:eb:5f:e2:13:7f:21:
         2e:1c:cc:c5:88:3a:96:23:6e:0e:e5:f7:86:ab:0a:d0:9e:8b:
         cf:ea:0b:3f:6b:27:bb:ae:e4:c6:7a:c8:23:e2:6e:bc:23:79:
         b7:05:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----