Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/c4ea789638fc380db26ffb18e612f4fe0a4e4b0f.roa
File:                     c4ea789638fc380db26ffb18e612f4fe0a4e4b0f.roa (raw, json)
Hash identifier:          cR/5u4MMQb2BPKWnVUNRF7HjPu0ubChpGwJFJAsayDU=
Subject key identifier:   6B:AB:FE:B4:10:D6:73:A6:50:DB:A6:15:1E:3E:48:23:83:DB:BB:86
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       21E953
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/c4ea789638fc380db26ffb18e612f4fe0a4e4b0f.roa
Signing time:             Mon 28 Aug 2023 14:29:04 +0000
ROA not before:           Sun 27 Aug 2023 14:29:04 +0000
ROA not after:            Thu 28 Aug 2025 14:29:04 +0000
asID:                     267869
IP address blocks:        2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222419 (0x21e953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Aug 27 14:29:04 2023 GMT
            Not After : Aug 28 14:29:04 2025 GMT
        Subject: CN=c4ea789638fc380db26ffb18e612f4fe0a4e4b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:82:05:8a:c2:54:a0:77:26:99:2d:ef:1d:
                    ed:3a:5d:82:83:e5:f2:f1:4d:98:4a:79:21:a1:1a:
                    c7:56:d3:be:2b:93:a5:71:2c:80:4e:98:49:81:f7:
                    45:11:c3:c6:de:4f:d2:14:89:f4:d8:91:77:72:7e:
                    d7:09:7f:d4:65:02:aa:b0:6c:e4:df:83:21:65:f4:
                    e4:fb:47:10:b5:df:bc:0a:7a:d9:27:05:78:cc:f0:
                    ae:aa:87:a3:ea:ac:a3:72:14:f4:88:f3:7f:1d:dc:
                    3a:50:22:99:a7:f4:e0:16:c5:97:4a:c2:28:4a:35:
                    44:ac:d9:4f:d1:71:50:96:20:6c:a7:03:57:da:1b:
                    b3:73:19:c3:f7:b6:56:a8:57:b7:a8:80:e7:f2:36:
                    4c:0c:35:1e:63:85:b2:65:cb:e9:01:df:de:94:87:
                    8c:63:1e:af:8c:4f:ed:85:d6:00:92:e4:2b:e6:99:
                    c5:df:41:07:b6:30:6f:75:36:1a:5f:29:ac:cf:2e:
                    f5:36:42:8d:17:60:72:58:6c:11:bb:75:ba:84:c7:
                    5f:59:ee:54:d4:f5:de:53:a2:af:79:5a:0d:b8:fb:
                    1f:ef:06:5a:df:92:57:41:84:0f:a7:ac:0d:72:b7:
                    6c:a3:9a:5c:9b:a5:97:24:28:59:70:f6:19:6e:f5:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:FE:B4:10:D6:73:A6:50:DB:A6:15:1E:3E:48:23:83:DB:BB:86
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/c4ea789638fc380db26ffb18e612f4fe0a4e4b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:f7:06:b0:8d:64:ce:92:49:36:80:ee:e9:17:19:a6:c8:
         d2:40:a1:67:b8:66:4f:00:4c:43:18:f8:1d:61:de:9a:b4:3d:
         b2:79:c7:6d:96:f9:46:eb:0f:fe:c5:9e:61:14:30:2e:05:ed:
         60:d4:25:ca:8d:7b:52:38:04:1b:9e:26:6b:02:e5:7e:02:e3:
         1a:ee:0f:35:4e:1d:9d:50:41:17:64:aa:1b:7c:93:b3:1d:fd:
         55:6e:a4:20:4f:c7:bc:43:f7:5e:89:04:06:8f:c7:4c:c6:32:
         d9:bb:74:ee:f0:2a:b8:15:8b:e9:ac:9a:e6:b5:2a:3e:3d:c3:
         76:e4:bf:17:ac:56:5f:11:fc:27:dc:2b:3a:38:ed:05:a3:30:
         74:43:42:b6:6d:fa:4e:67:f8:f2:df:60:42:7c:46:c0:eb:60:
         02:a5:92:5e:12:44:be:58:47:0e:24:bd:3e:f2:80:88:21:23:
         cf:0e:fd:66:03:d3:2a:b6:84:19:8c:03:57:91:ca:3d:a2:ea:
         bb:2a:54:f8:6a:13:02:a1:ae:48:42:9b:70:19:53:fc:eb:40:
         d0:56:ee:ff:9a:65:90:9c:ef:a4:65:36:09:f1:f7:7f:b2:df:
         d6:ec:e5:f5:d1:8b:33:65:99:70:15:79:2e:18:a4:71:9f:e0:
         f8:fd:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----