Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/b3c1f09ac59abf509d9803820256f99b4aace524.roa
File:                     b3c1f09ac59abf509d9803820256f99b4aace524.roa (raw, json)
Hash identifier:          LYxJtvufhbyGupFeDhkxRy0gTLfL8P6VXJQNtJXZmV4=
Subject key identifier:   77:A6:0D:24:AC:E7:E0:DB:47:CE:A2:CF:B0:A0:3A:2D:5F:E1:4E:30
Certificate issuer:       /CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
Certificate serial:       1AFA7E
Authority key identifier: 52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/b3c1f09ac59abf509d9803820256f99b4aace524.roa
Signing time:             Fri 13 Jan 2023 19:36:30 +0000
ROA not before:           Tue 23 Mar 2021 14:40:07 +0000
ROA not after:            Tue 24 Mar 2026 14:40:07 +0000
asID:                     271840
IP address blocks:        2803:fd60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768062 (0x1afa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
        Validity
            Not Before: Mar 23 14:40:07 2021 GMT
            Not After : Mar 24 14:40:07 2026 GMT
        Subject: CN=b3c1f09ac59abf509d9803820256f99b4aace524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:8f:a0:dc:92:2d:38:02:e3:7b:ff:07:8e:
                    b6:b7:80:c6:08:4e:59:fb:22:03:5c:56:f9:e0:55:
                    97:4e:c3:99:1e:50:29:1e:20:e1:b4:b0:a2:a6:47:
                    23:b3:5a:13:25:34:8a:4d:95:8b:a5:36:03:e1:32:
                    4f:3f:17:46:1b:67:1d:ea:7c:de:8b:9e:7c:b9:0e:
                    ab:fd:2a:4d:8b:3d:d6:35:6b:d1:36:f4:ae:b3:eb:
                    34:59:42:a0:3f:9d:d9:7c:c1:01:00:9d:1a:cf:10:
                    40:4f:e6:37:3d:27:35:94:7c:41:79:59:e5:ba:92:
                    40:17:94:b0:07:c9:37:8b:6d:0f:ab:43:d0:27:e8:
                    fa:af:55:2b:25:58:67:86:69:f4:e8:17:0c:b5:a1:
                    0d:03:9a:90:95:d7:10:42:9d:cb:a9:3b:6d:8b:94:
                    af:06:29:fa:ef:1b:e7:f5:d1:b8:ac:f0:bd:8b:33:
                    1a:a3:d6:50:91:a2:4d:ca:4a:5c:f5:df:3e:f5:db:
                    e9:bb:b0:71:9d:62:c9:f6:ba:39:fd:9e:f1:47:ac:
                    60:d3:57:34:2b:84:db:d8:90:c0:06:ff:83:a0:8c:
                    f8:1e:c1:12:99:02:a9:28:ca:a3:ef:de:33:54:86:
                    fd:a4:30:43:9b:c9:83:3a:3c:21:e4:27:2c:cd:8f:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:0D:24:AC:E7:E0:DB:47:CE:A2:CF:B0:A0:3A:2D:5F:E1:4E:30
            X509v3 Authority Key Identifier:
                keyid:52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/b3c1f09ac59abf509d9803820256f99b4aace524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1f:00:a0:23:3a:26:27:ec:a9:cb:c8:dd:3e:57:6b:5a:5f:
         51:7a:16:9e:07:fe:7a:ed:3d:a2:34:b3:bd:85:9c:32:d6:28:
         3b:c1:25:37:82:ba:69:3c:d0:e5:33:1d:9b:97:89:63:b6:4a:
         2d:57:cb:30:33:96:60:ba:ea:ff:34:b1:a8:6f:c7:84:06:37:
         2d:95:10:91:5c:aa:56:81:ae:4c:63:4e:cb:4f:72:08:5e:4a:
         99:6e:87:19:d5:43:88:2e:bf:53:5a:0a:6d:a8:3e:48:58:17:
         c0:f7:42:02:07:50:18:81:e4:38:9a:c8:2d:65:94:a8:b7:b9:
         25:80:30:6a:1a:7d:48:d1:95:e4:d2:53:b8:2d:d1:f7:fd:b1:
         de:57:63:a8:a4:04:07:f1:13:6e:8e:3c:93:8a:52:a4:b3:bc:
         ca:66:95:04:34:ba:f2:ac:60:f7:33:82:81:91:14:b9:f5:87:
         87:87:e5:34:b9:15:b0:9b:cc:48:c1:2a:99:14:67:4e:27:7f:
         82:f0:65:64:cf:da:c3:f1:b6:3c:6e:88:04:82:e6:ae:d0:ca:
         24:76:cc:0b:de:89:58:60:97:82:82:54:06:b4:6a:b6:eb:38:
         ae:36:76:cd:b0:4d:2a:b0:5f:a6:f0:5e:dc:33:ea:00:1b:f3:
         35:f4:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----