Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/d2a86d5abab2eed85ae50172f7b0e33ea11dc0f3.roa
File:                     d2a86d5abab2eed85ae50172f7b0e33ea11dc0f3.roa (raw, json)
Hash identifier:          lScHgeuwui3Hcfg5UF9jVIunwJuGBL8e+/uh+wYBEKo=
Subject key identifier:   D4:A3:5F:75:45:9E:A8:C9:05:95:E1:11:C5:11:BD:CC:06:3A:53:DC
Certificate issuer:       /CN=0317b9d1456b48aa14ec8d784f305e45943a6533
Certificate serial:       0D923A
Authority key identifier: F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/d2a86d5abab2eed85ae50172f7b0e33ea11dc0f3.roa
Signing time:             Mon 30 Oct 2023 15:25:32 +0000
ROA not before:           Mon 30 Oct 2023 15:25:32 +0000
ROA not after:            Thu 30 Oct 2025 15:25:32 +0000
asID:                     265622
IP address blocks:        2806:3a3::/34 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889402 (0xd923a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0317b9d1456b48aa14ec8d784f305e45943a6533
        Validity
            Not Before: Oct 30 15:25:32 2023 GMT
            Not After : Oct 30 15:25:32 2025 GMT
        Subject: CN=d2a86d5abab2eed85ae50172f7b0e33ea11dc0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:1a:f7:39:e9:0a:62:ab:74:d6:f6:19:cb:
                    5e:04:25:7c:c9:3b:77:73:a8:00:42:8e:f2:c8:bd:
                    5d:70:1b:00:68:65:9a:b2:63:6c:21:35:52:9b:7a:
                    ca:a2:2d:37:80:4f:86:89:88:55:ae:13:df:bb:0d:
                    fe:60:55:0a:0b:1e:07:02:52:f7:0a:a1:df:a0:c9:
                    28:9e:a7:9e:02:cb:10:c0:6d:5f:ca:59:96:8e:bc:
                    cd:06:ca:59:b3:7d:e6:32:d7:de:69:3b:ea:1b:10:
                    d6:6c:8e:2b:4c:47:2b:35:75:2f:98:4e:d1:8f:5c:
                    14:0a:90:c1:53:70:db:d6:3e:ed:9e:f3:c2:86:72:
                    92:59:8b:4b:2f:85:07:a9:de:8c:a8:69:8a:02:8b:
                    70:48:00:c8:12:6c:16:dc:37:22:fe:e5:71:6c:11:
                    05:5f:25:bd:c0:fd:a1:c3:b4:a3:46:92:bf:03:eb:
                    81:f2:27:5f:ed:97:29:71:dc:74:5b:2b:c9:88:66:
                    f4:44:99:ae:9a:e5:9e:5f:e5:cd:27:28:53:9f:14:
                    65:1f:3d:a1:66:cd:28:d8:b8:f8:9a:0c:27:41:06:
                    5f:c2:6a:92:a1:68:ff:6c:e1:f6:6f:39:b3:da:9e:
                    4d:77:78:52:cc:66:2d:df:6e:1f:cf:a7:6b:36:6d:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:5F:75:45:9E:A8:C9:05:95:E1:11:C5:11:BD:CC:06:3A:53:DC
            X509v3 Authority Key Identifier:
                keyid:F4:47:05:7F:65:3B:51:F1:25:37:4B:6E:18:CD:11:CA:E3:4C:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0317b9d1456b48aa14ec8d784f305e45943a6533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/d2a86d5abab2eed85ae50172f7b0e33ea11dc0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9dd7231-a8d6-4c51-949e-30d2bc58f091/0317b9d1456b48aa14ec8d784f305e45943a6533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3a3::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:ce:0a:a1:e5:5d:fc:11:d4:4e:b0:ca:13:a7:f4:d5:ab:
         c4:da:bc:5c:12:cd:bd:cd:6a:3e:8a:c7:b1:0a:e7:4e:a1:75:
         4d:b5:cb:27:d0:99:96:7b:4e:6d:54:a9:c2:df:2d:46:55:42:
         c5:98:bc:28:ee:da:fb:ee:64:22:82:58:2c:8d:60:51:46:50:
         a6:fe:83:d2:dc:8c:12:66:43:20:18:24:45:97:af:8c:b2:2f:
         18:5b:b2:9c:55:e2:b5:b1:2e:81:01:8f:f1:cc:3a:3b:c5:5b:
         5f:fb:c6:84:f8:b9:83:59:af:53:4c:16:17:17:2f:6a:6c:1b:
         3a:0c:37:ef:03:a4:99:bb:dd:8f:0a:3b:50:38:dc:4f:c0:e6:
         83:60:25:b6:70:a3:7b:a0:a1:32:3c:d4:a3:c1:f4:49:d3:03:
         41:01:e5:a6:fe:ca:b6:0a:33:11:01:4a:49:80:59:33:b0:13:
         b3:16:ff:64:48:8e:2e:92:f6:c4:01:d9:38:2b:2a:bc:c6:ea:
         67:ec:71:48:d3:6e:52:46:00:ca:e3:27:2c:2a:c3:cc:2c:e2:
         91:42:8c:98:89:38:00:d7:93:a8:72:83:3f:6f:7d:20:78:89:
         a5:0f:db:e9:ad:5d:c7:39:34:e9:0a:14:3a:a0:18:4e:47:cf:
         82:8c:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----