Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/f7df1f481969ee282e9512492360556d6df1ec12.roa
File:                     f7df1f481969ee282e9512492360556d6df1ec12.roa (raw, json)
Hash identifier:          qWT6It3RhSK+V0V04fGfZKlaZ99mUCMh1yrXVVhbD7k=
Subject key identifier:   83:A4:F4:FA:A7:1E:3E:82:86:D4:7D:20:42:C2:2F:69:33:B4:FB:F3
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       242608
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/f7df1f481969ee282e9512492360556d6df1ec12.roa
Signing time:             Tue 12 Sep 2023 17:12:03 +0000
ROA not before:           Mon 11 Sep 2023 17:12:03 +0000
ROA not after:            Fri 12 Sep 2025 17:12:03 +0000
asID:                     264830
IP address blocks:        2803:2c0:f400::/41 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369032 (0x242608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Sep 11 17:12:03 2023 GMT
            Not After : Sep 12 17:12:03 2025 GMT
        Subject: CN=f7df1f481969ee282e9512492360556d6df1ec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:8e:e1:01:75:a9:61:db:69:f3:fa:f9:1b:
                    9c:a4:03:91:e4:16:2c:33:ec:41:7f:da:fa:bf:ae:
                    9d:85:85:4b:9c:8d:5a:f5:e3:7e:a5:1c:9d:51:7f:
                    00:af:9a:fe:9e:13:41:ab:20:79:c5:61:fc:30:95:
                    77:54:82:61:f2:c9:42:cd:9b:56:4c:3c:b8:45:19:
                    97:33:81:38:00:ec:f5:44:32:af:b4:ae:ee:11:66:
                    b6:4a:9b:1c:97:aa:d8:d4:c2:41:3d:a4:b8:14:3e:
                    03:8c:56:c0:4b:71:22:d3:21:89:a7:ef:fe:62:5c:
                    e9:37:fd:b5:3d:5d:f8:eb:78:75:b9:54:28:56:a7:
                    78:0a:01:94:51:31:a3:75:98:17:fc:ae:c8:eb:5e:
                    98:94:c9:ef:78:58:c9:ed:5f:c3:28:1b:50:55:84:
                    6e:6f:81:03:19:05:b1:ac:68:98:27:49:ef:82:5b:
                    eb:fc:23:11:9f:a2:83:ab:cd:53:39:be:03:80:01:
                    68:95:75:d1:69:f4:c2:c1:e1:b4:81:93:8d:56:f8:
                    5a:82:9d:20:6e:08:b2:b9:b0:04:08:2c:dd:59:0f:
                    cc:10:79:d5:98:58:ef:7b:5b:f7:cf:7a:7d:8f:57:
                    3f:9a:16:9c:c1:d7:bc:89:ad:66:a8:9c:2c:ef:4b:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A4:F4:FA:A7:1E:3E:82:86:D4:7D:20:42:C2:2F:69:33:B4:FB:F3
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/f7df1f481969ee282e9512492360556d6df1ec12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f400::/41

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:8f:c8:6b:3b:b3:4d:fe:57:44:97:9c:64:a1:d6:61:e2:
         f9:b8:1f:46:37:33:d4:ad:25:75:5a:67:22:c8:1e:4c:e2:ef:
         5d:02:19:d3:76:47:87:84:e7:40:a9:71:63:0e:c5:a9:9c:25:
         d3:83:34:d6:92:75:f8:8f:db:d4:31:1d:7b:e5:75:89:ab:29:
         42:2a:81:d0:bf:4a:72:26:de:06:6d:71:54:e1:db:d5:2f:6f:
         13:c7:6a:db:ed:74:75:ba:f2:d6:a1:fe:96:fd:6f:bf:43:53:
         4f:37:13:29:bf:8b:46:65:ff:06:0d:6a:f6:fc:1a:6a:a5:4d:
         d7:1c:c2:15:2a:0d:1e:4a:44:4c:5e:c9:ca:3a:62:9f:44:3c:
         7b:4a:db:ce:d7:2f:52:2a:21:a9:74:2d:db:db:66:f4:ae:5d:
         92:c2:c3:11:b0:ac:b1:91:6c:c5:f4:dc:20:71:3c:28:9b:f7:
         1b:3d:ac:8e:63:3f:36:45:f6:95:4a:47:ee:6a:1e:23:94:9c:
         db:b4:37:fd:c9:12:6c:2c:2e:8e:90:6b:2b:a9:aa:6b:ee:fc:
         b5:72:80:a4:f5:f1:ee:8e:e7:c1:ea:47:3a:72:e9:6a:37:28:
         44:03:a1:95:11:85:f8:b4:4b:71:25:99:6a:c2:99:32:dc:c8:
         6f:16:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----