Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/83dbb97c95ffd7f47e415aa055480f07db815f85.roa
File:                     83dbb97c95ffd7f47e415aa055480f07db815f85.roa (raw, json)
Hash identifier:          6vhjyShwa7AN847GkBV27YxrJou6Qaas0uApolcE3x8=
Subject key identifier:   DC:F9:51:94:02:C6:6D:5F:96:15:0B:FF:05:70:61:23:BD:E2:86:E2
Certificate issuer:       /CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
Certificate serial:       281725
Authority key identifier: 81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/83dbb97c95ffd7f47e415aa055480f07db815f85.roa
Signing time:             Tue 12 Mar 2024 19:35:02 +0000
ROA not before:           Tue 12 Mar 2024 19:35:02 +0000
ROA not after:            Thu 12 Mar 2026 19:35:02 +0000
asID:                     266753
IP address blocks:        2803:7b20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2627365 (0x281725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d4ee4c6cbb510dff8752615e5c10ead28fc25b
        Validity
            Not Before: Mar 12 19:35:02 2024 GMT
            Not After : Mar 12 19:35:02 2026 GMT
        Subject: CN=83dbb97c95ffd7f47e415aa055480f07db815f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:be:b3:7f:03:cf:37:6d:cf:25:95:ed:d5:
                    7f:bc:a7:c6:b7:ec:18:86:9a:1b:97:62:ff:43:c0:
                    39:6a:50:31:4c:8c:7a:18:ee:81:50:13:16:f7:96:
                    6a:f8:1e:89:8e:61:6e:ba:ae:ee:72:d1:e6:a7:a2:
                    b3:32:f8:41:47:43:88:4e:d9:22:62:1f:7a:80:36:
                    c8:b2:79:78:c7:7f:45:bb:80:a2:81:f5:23:7d:7e:
                    d7:48:0b:2e:a3:88:85:11:ab:fe:4c:4c:a4:f9:5b:
                    23:12:1d:39:c4:24:23:87:28:aa:14:93:db:1a:87:
                    84:c8:83:68:51:3a:58:d6:80:d8:ae:d2:e5:d5:51:
                    2a:51:ce:a5:cc:c7:af:f3:12:23:6a:e8:e1:34:06:
                    ff:ee:be:7a:32:50:47:10:4f:3a:cf:0e:1a:54:e9:
                    97:62:0f:2f:76:d4:55:b3:11:62:32:95:1a:19:79:
                    00:32:3c:8a:e8:0b:35:85:62:1b:cd:5a:b3:77:d5:
                    41:85:95:0e:f7:ca:27:89:17:7d:70:e4:6a:11:01:
                    65:d0:67:3e:9f:07:1c:1b:66:05:d0:97:31:49:60:
                    f3:87:3f:d0:26:38:14:0e:dc:5d:4b:93:67:24:b8:
                    e3:ec:af:28:54:c2:76:d6:c5:ce:32:41:47:6a:ad:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:51:94:02:C6:6D:5F:96:15:0B:FF:05:70:61:23:BD:E2:86:E2
            X509v3 Authority Key Identifier:
                keyid:81:F7:78:67:24:19:97:75:7B:FC:0A:8F:1A:AE:54:D9:37:60:43:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/83dbb97c95ffd7f47e415aa055480f07db815f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8c82d87-9e3f-45c5-83fa-ac60276a0918/32d4ee4c6cbb510dff8752615e5c10ead28fc25b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:45:13:10:7c:ec:7b:2c:c1:15:a4:b5:53:f0:6e:e3:66:6a:
         7f:37:d8:d6:9d:17:be:06:e9:53:2e:af:34:ae:4c:10:e6:ba:
         f1:6d:93:73:d7:09:08:49:99:fa:d4:ec:fc:f5:d3:87:b9:c7:
         24:3b:38:35:bc:fa:12:aa:86:7a:23:ab:11:08:e2:18:4b:7a:
         1a:5b:5a:b7:24:83:e8:44:6f:73:49:5b:3a:79:7b:f8:7d:e8:
         40:3d:ad:b9:7f:39:8f:98:93:6d:22:7c:c5:0f:c1:43:a1:b3:
         2b:cb:09:fd:5e:2c:5e:7f:a0:81:96:9b:e9:c5:9a:2b:6f:25:
         8f:be:0a:ff:72:99:43:52:e5:2b:d4:52:c3:ac:dc:c9:d0:63:
         02:52:bd:ec:6e:27:49:25:e1:86:46:d3:f2:57:ba:81:95:e9:
         70:4f:8e:b5:80:6c:a8:84:af:a7:9d:13:01:67:29:47:a7:74:
         f6:43:07:44:85:15:f9:30:2e:4d:e6:4b:e3:ea:7e:94:98:09:
         eb:ba:d4:a0:af:38:ff:99:86:41:f5:21:51:53:4a:09:d7:7a:
         9d:a4:6f:dc:20:9f:f7:14:c1:44:40:39:5d:30:d2:b5:7c:75:
         05:11:a2:98:76:e5:5d:2f:b1:9b:77:06:73:34:d8:13:6c:27:
         a8:e0:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----