Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/ac0c2bc3730e247ad79ef713aac2b65a82d5cd73.roa
File:                     ac0c2bc3730e247ad79ef713aac2b65a82d5cd73.roa (raw, json)
Hash identifier:          WJNDmeIt2qL3qQXwqdaEeVDZ35DNmOMJyFm+mu5uUf8=
Subject key identifier:   24:3E:D0:85:5C:3A:A7:E2:64:F0:55:6A:7A:5A:11:26:F4:4D:37:2D
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1ECD56
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/ac0c2bc3730e247ad79ef713aac2b65a82d5cd73.roa
Signing time:             Tue 14 Mar 2023 21:44:57 +0000
ROA not before:           Mon 13 Mar 2023 21:44:01 +0000
ROA not after:            Fri 14 Mar 2025 21:44:01 +0000
asID:                     264646
IP address blocks:        2803:1780:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018646 (0x1ecd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Mar 13 21:44:01 2023 GMT
            Not After : Mar 14 21:44:01 2025 GMT
        Subject: CN=ac0c2bc3730e247ad79ef713aac2b65a82d5cd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:0a:37:be:10:ab:d4:40:76:c1:7b:ea:1c:
                    73:8a:28:67:17:20:46:eb:e0:59:bc:d0:c6:8a:90:
                    87:72:02:d5:0a:cf:46:41:e8:41:ca:27:c3:fe:cd:
                    18:23:cf:e7:42:2a:8a:81:9c:61:33:7a:d5:52:04:
                    fb:8b:2a:67:ac:55:0e:ae:f3:91:bb:e4:f5:92:92:
                    37:dc:4d:fe:e5:ba:03:da:a9:a8:fb:ac:e2:a4:da:
                    d5:66:03:b4:67:72:50:06:50:02:82:11:d2:5c:64:
                    d1:02:26:83:ba:f5:9d:ac:f2:af:cd:5a:f3:08:5e:
                    a7:b4:30:01:76:03:c5:c0:4f:5b:7d:43:16:ef:59:
                    9b:25:ab:83:1c:10:e2:af:03:8a:aa:dd:ca:cb:86:
                    31:8b:32:4b:cf:d2:71:7f:74:f3:43:e7:68:5e:23:
                    ce:b8:67:e9:e7:33:1b:b8:61:60:94:71:c7:42:50:
                    4b:bd:2f:50:3b:86:73:a6:60:a2:4a:e9:7b:36:32:
                    dd:c0:f2:68:f0:0d:b1:c1:51:25:32:d2:1a:54:67:
                    fd:ba:9e:71:ff:3a:c4:2a:b9:78:af:75:77:d5:b8:
                    a6:29:02:25:ec:f1:31:72:b5:53:7f:9b:aa:37:54:
                    70:98:ad:ca:00:6a:8e:16:81:9f:59:d0:b9:c2:7d:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3E:D0:85:5C:3A:A7:E2:64:F0:55:6A:7A:5A:11:26:F4:4D:37:2D
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/ac0c2bc3730e247ad79ef713aac2b65a82d5cd73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:87:d3:3b:6c:95:25:b0:4b:44:97:6a:e5:1a:17:17:5f:75:
         3f:8c:3b:c6:3f:fc:0b:98:f4:30:40:f0:c8:cb:24:d6:7f:69:
         ed:50:8b:28:00:88:3c:66:0c:a2:8e:fb:e8:5b:9a:32:80:f9:
         85:70:2c:db:f7:85:8e:5e:75:b5:50:13:5a:32:1f:c9:e4:01:
         fb:e9:a4:d1:58:e1:12:ec:f8:ce:1d:6d:8c:15:bc:64:db:e2:
         3f:0e:34:72:3f:f0:d0:68:01:7a:02:9c:5d:06:ed:9b:bd:9f:
         9f:1a:46:01:c8:a3:02:1e:f1:a3:d5:60:49:2e:26:37:f8:7c:
         49:ee:e2:3c:2c:17:6b:de:52:0a:f8:f5:79:7b:fe:17:bb:ac:
         01:69:0d:98:cf:15:b2:b3:f2:45:c6:a4:c0:9b:1d:ba:24:80:
         2c:b9:ca:98:3a:99:56:85:ea:4d:d3:f4:ad:57:01:ae:f2:24:
         86:96:ad:58:79:1d:dc:29:7a:6c:21:ce:3f:13:55:15:61:5d:
         73:02:27:90:e1:6e:da:ab:80:60:7b:4d:d2:b8:97:b4:16:e0:
         c0:0b:63:a3:ee:46:2c:e0:2d:80:9f:f1:fe:81:76:a0:04:6e:
         b7:48:89:7e:4e:31:a7:b3:59:30:63:55:0c:0f:aa:2b:ea:64:
         c6:80:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----