Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/ea21fa1315974162aaa02208446966d6f1084b72.roa
File:                     ea21fa1315974162aaa02208446966d6f1084b72.roa (raw, json)
Hash identifier:          gKVTOL9e5U09OFVPIawvsfoscxb06eOpRBZbxuG9QXw=
Subject key identifier:   60:B3:54:DD:8D:26:69:7D:62:ED:BD:0F:B8:B2:60:77:08:11:F3:12
Certificate issuer:       /CN=49d54da8d27034bcd22d917632e38d68bbeae195
Certificate serial:       0EBFF6
Authority key identifier: 2D:9A:E3:CA:72:15:42:01:DF:53:FA:27:34:BE:26:91:CF:4E:98:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49d54da8d27034bcd22d917632e38d68bbeae195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/ea21fa1315974162aaa02208446966d6f1084b72.roa
Signing time:             Fri 24 Nov 2023 04:01:53 +0000
ROA not before:           Fri 24 Nov 2023 04:01:53 +0000
ROA not after:            Mon 24 Nov 2025 04:01:53 +0000
asID:                     272082
IP address blocks:        2803:9b10::/48 maxlen: 48
                          2803:9b10:1::/48 maxlen: 48
                          2803:9b10:2::/48 maxlen: 48
                          2803:9b10:3::/48 maxlen: 48
                          2803:9b10:4::/48 maxlen: 48
                          2803:9b10:5::/48 maxlen: 48
                          2803:9b10:6::/48 maxlen: 48
                          2803:9b10:7::/48 maxlen: 48
                          2803:9b10:8::/48 maxlen: 48
                          2803:9b10:9::/48 maxlen: 48
                          2803:9b10:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966646 (0xebff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d54da8d27034bcd22d917632e38d68bbeae195
        Validity
            Not Before: Nov 24 04:01:53 2023 GMT
            Not After : Nov 24 04:01:53 2025 GMT
        Subject: CN=ea21fa1315974162aaa02208446966d6f1084b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:cb:92:83:25:92:e9:88:74:fc:98:5a:5b:
                    69:b6:f5:5b:d9:91:2c:bf:75:f2:e7:5a:74:74:61:
                    ae:9c:c7:56:49:74:0c:90:4a:d8:94:23:09:56:74:
                    c2:5c:3e:07:ea:b7:24:2a:3d:72:ce:2b:d2:ed:5c:
                    cd:99:81:b1:e1:ad:aa:30:13:ad:d5:4e:83:6e:c7:
                    ee:cf:7f:40:28:55:e6:ec:0f:b7:b6:76:22:1a:9a:
                    f3:b0:ed:9f:a1:d3:cf:df:4a:e0:15:2b:55:37:48:
                    c5:b6:52:19:ed:00:df:d0:da:8a:40:45:a1:24:a9:
                    23:1a:17:dc:98:1c:2b:e2:0d:32:6e:75:22:fa:dc:
                    cb:16:86:e5:a4:e3:93:5c:87:5c:fb:ea:c7:2c:f4:
                    06:55:29:3a:38:31:6f:dd:c4:d2:29:9f:ea:b6:b5:
                    a2:e5:5f:9f:4c:d1:2d:6b:a3:c2:d3:2f:ca:e4:26:
                    0e:9c:04:36:db:0f:3c:24:30:c4:f2:22:e5:9c:2c:
                    65:ee:d6:0c:83:c9:67:4e:50:e6:09:46:5c:2d:b0:
                    00:f7:d5:40:ef:9b:22:5d:9f:f6:fa:b5:90:7d:68:
                    e9:96:97:7f:4f:46:2e:70:6c:57:95:ce:79:1e:f9:
                    b1:96:df:ba:7a:4e:ee:d5:49:6f:c0:e3:03:85:4d:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B3:54:DD:8D:26:69:7D:62:ED:BD:0F:B8:B2:60:77:08:11:F3:12
            X509v3 Authority Key Identifier:
                keyid:2D:9A:E3:CA:72:15:42:01:DF:53:FA:27:34:BE:26:91:CF:4E:98:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49d54da8d27034bcd22d917632e38d68bbeae195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/ea21fa1315974162aaa02208446966d6f1084b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bddfea7c-f1a1-4155-a920-d1217ee6a925/49d54da8d27034bcd22d917632e38d68bbeae195.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10::-2803:9b10:a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         61:01:b9:18:d1:2b:38:5e:15:3b:b2:ba:fa:1d:62:d2:83:bd:
         62:64:f9:3b:31:9a:63:d4:3f:77:4b:f6:71:02:60:11:46:3e:
         f6:33:9b:e9:67:2e:67:e7:07:da:00:ab:c0:03:77:0f:a8:b0:
         c5:ff:41:1c:40:d7:89:82:84:ab:d3:4d:28:ad:9a:56:65:3a:
         ce:d6:ac:53:b8:30:cc:74:76:26:84:13:e0:75:fe:5b:8f:a5:
         7c:27:5d:45:d7:32:16:7f:97:89:9b:a2:38:24:5a:c9:9f:a3:
         b6:c8:14:e4:f6:3a:4d:02:56:21:e8:25:2c:50:a9:b5:da:74:
         85:7f:5a:45:ad:fd:48:48:1f:30:8c:6e:b6:5a:ec:fe:29:8c:
         22:c5:e3:a8:97:a6:c9:ee:67:98:89:09:fc:b2:ab:8d:3f:23:
         d8:b9:24:c3:92:90:2c:c8:7a:12:cb:c7:e4:09:a4:46:eb:62:
         3f:de:48:b4:cd:c1:4d:2d:e0:5b:04:c2:ce:3e:61:10:6a:0f:
         c3:89:84:3c:4b:95:52:1e:d5:08:50:58:58:13:f8:5b:9f:35:
         3f:1b:c6:f0:f7:60:04:87:6c:8c:40:59:9b:94:e8:c0:22:65:
         03:33:af:46:22:17:57:2c:b7:0c:65:ba:5e:b1:4c:17:cb:82:
         1c:62:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----