Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/e797f0b68a9768b023d295272a5e7733370590ee.roa
File:                     e797f0b68a9768b023d295272a5e7733370590ee.roa (raw, json)
Hash identifier:          ATnOrr32XgKkM7KdztwbsY1vbpwCAJu+8hTOaSjMVNc=
Subject key identifier:   F8:0A:2B:0B:7A:DD:2F:1B:40:10:38:20:A2:CC:50:3A:7D:EC:C0:DF
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       2418D5
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/e797f0b68a9768b023d295272a5e7733370590ee.roa
Signing time:             Tue 12 Sep 2023 17:11:20 +0000
ROA not before:           Mon 11 Sep 2023 17:11:20 +0000
ROA not after:            Fri 12 Sep 2025 17:11:20 +0000
asID:                     264830
IP address blocks:        2803:2c0:f000::/41 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365653 (0x2418d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Sep 11 17:11:20 2023 GMT
            Not After : Sep 12 17:11:20 2025 GMT
        Subject: CN=e797f0b68a9768b023d295272a5e7733370590ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:1a:02:c8:ce:aa:05:1f:a7:55:70:2f:9a:
                    ff:06:38:44:e0:0e:dc:55:f4:e6:31:3c:b4:88:b4:
                    fc:c6:61:d8:99:c2:47:83:45:90:32:32:a1:b8:b3:
                    1d:04:66:a5:03:ba:19:5e:a5:86:e5:5e:83:03:d5:
                    98:65:53:e8:10:3f:18:53:bb:d7:ce:99:4a:52:85:
                    54:43:2a:9f:47:1c:4f:aa:29:4c:0e:03:30:e9:8b:
                    69:34:20:2d:53:c9:38:56:60:5c:bc:a8:d7:a2:5c:
                    d3:79:7b:8d:73:32:4f:3b:2c:95:35:1d:f7:0c:70:
                    17:db:b4:fb:8a:95:43:5c:40:40:d1:9b:2e:0f:92:
                    1c:0d:9a:87:21:ee:4e:b3:c6:aa:dc:bf:34:d3:f9:
                    58:14:81:a8:18:5a:07:76:75:c9:8f:6b:e8:8a:99:
                    54:3c:9a:3c:1d:34:d2:b6:2f:c3:4e:83:52:8b:46:
                    95:ec:95:9a:f3:ec:c9:50:74:70:ba:dd:6b:f7:ed:
                    e9:ec:7e:1e:d1:de:c4:9c:fd:76:74:82:d9:d0:30:
                    99:ff:c2:04:f2:a9:83:22:f2:23:a7:1e:29:38:b7:
                    ee:c1:42:c5:f4:73:22:aa:bb:97:d0:7f:98:b3:3c:
                    fd:dc:c3:f8:37:29:1c:24:00:17:bd:14:22:c9:f5:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0A:2B:0B:7A:DD:2F:1B:40:10:38:20:A2:CC:50:3A:7D:EC:C0:DF
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/e797f0b68a9768b023d295272a5e7733370590ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f000::/41

    Signature Algorithm: sha256WithRSAEncryption
         b2:5f:a5:21:25:71:fc:0f:b0:fb:4e:51:13:a7:1d:61:a4:9f:
         3c:89:d0:29:36:f6:87:9a:22:f6:5a:c9:08:25:0e:0c:f7:7a:
         47:68:8c:81:3d:91:18:87:e8:0d:f7:43:9e:a9:f5:f5:dc:38:
         ae:2f:92:96:e7:2f:b6:14:80:ca:96:f0:ec:11:38:48:ab:75:
         55:99:d2:fb:f0:a5:28:e8:1d:48:70:3d:bd:7b:5e:84:e9:a2:
         11:d3:28:88:5a:6d:08:f3:ef:b8:fd:63:1b:de:39:82:70:9f:
         e4:28:1f:a1:56:a9:12:20:01:c5:bd:ff:f4:d9:24:a1:c1:f5:
         b1:48:e4:ad:c9:f7:45:9f:fc:17:05:d2:b1:a0:cf:e6:67:1b:
         bc:de:3f:88:26:19:29:bf:e4:75:03:e9:6c:c5:8b:8e:d7:1e:
         20:d3:4c:f8:86:70:ea:70:b1:90:25:b0:d7:36:12:20:c2:42:
         8d:14:87:68:9b:25:53:cf:f8:fb:06:46:fd:50:90:87:22:d5:
         ab:84:3f:f8:0e:ce:2a:f4:4f:64:b3:58:50:f7:c7:02:28:61:
         0c:2c:01:ed:67:b5:e1:94:55:c2:43:a5:1c:01:ef:66:65:76:
         74:6d:be:12:32:bc:e0:ad:40:6d:67:4f:ac:a5:29:04:f9:2a:
         64:1f:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----