Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd7e91dc-1cd9-4eb3-90fd-0e25072f1044/d520e8542e8edfdaa78269172873e121fc392834.roa
File:                     d520e8542e8edfdaa78269172873e121fc392834.roa (raw, json)
Hash identifier:          CL3QeCHmvZEYJ5oiEgGsPLXpzR7JwWAofqdUCCzd9Kg=
Subject key identifier:   CD:6C:3F:E1:9A:B1:A3:9D:FF:61:6C:65:0F:4C:CA:DA:A4:37:E5:92
Certificate issuer:       /CN=abbd4739f0d72ef8166739f676bfadd1757dfab1
Certificate serial:       0290FB
Authority key identifier: 02:11:89:62:27:A4:86:1D:F3:24:3B:E1:9C:44:AE:FC:C3:24:0E:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abbd4739f0d72ef8166739f676bfadd1757dfab1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd7e91dc-1cd9-4eb3-90fd-0e25072f1044/d520e8542e8edfdaa78269172873e121fc392834.roa
Signing time:             Tue 27 Jun 2023 18:54:26 +0000
ROA not before:           Mon 26 Jun 2023 18:54:26 +0000
ROA not after:            Fri 27 Jun 2025 18:54:26 +0000
asID:                     269857
IP address blocks:        2803:9510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168187 (0x290fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbd4739f0d72ef8166739f676bfadd1757dfab1
        Validity
            Not Before: Jun 26 18:54:26 2023 GMT
            Not After : Jun 27 18:54:26 2025 GMT
        Subject: CN=d520e8542e8edfdaa78269172873e121fc392834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:00:ce:1a:4b:70:2e:53:93:eb:09:9f:58:
                    8e:24:1a:23:c0:d6:30:02:dd:d9:cd:24:33:3a:aa:
                    9c:5b:a1:52:83:a3:af:e5:95:c3:0b:6b:c8:23:4a:
                    78:30:7c:99:a5:5c:fc:84:a1:95:cf:8b:27:5a:15:
                    31:29:67:d8:66:4e:c5:f9:25:e8:1d:1d:25:b7:28:
                    fe:98:ae:ad:77:3b:a8:db:4f:b5:33:ec:b5:b6:a0:
                    da:bb:4c:8a:c4:2e:f6:c9:94:78:3c:a7:ab:cd:03:
                    40:15:9c:01:ed:42:84:07:e5:7e:90:e4:49:f3:6f:
                    a0:17:49:ac:ad:6f:38:e6:90:86:31:a4:b2:07:18:
                    d1:d5:c5:0c:f4:d9:12:d2:53:19:d4:ff:12:14:be:
                    30:2d:0c:2c:74:69:63:63:1d:2a:90:b9:a0:1e:3d:
                    00:16:0d:69:5e:d3:9c:fb:a6:1d:26:58:1d:fd:a3:
                    bc:a5:cc:1b:7b:55:97:6c:cd:1d:dd:0d:52:e9:c1:
                    1e:f9:44:74:db:16:2b:51:76:f4:b3:17:65:aa:7e:
                    91:59:88:3a:bc:10:07:60:5d:e3:86:ea:60:fd:c0:
                    23:fb:81:1e:e9:76:cf:ad:94:fc:f1:98:09:e6:df:
                    1a:ec:7a:a7:b2:05:81:69:98:95:0b:70:c8:1d:96:
                    9c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:3F:E1:9A:B1:A3:9D:FF:61:6C:65:0F:4C:CA:DA:A4:37:E5:92
            X509v3 Authority Key Identifier:
                keyid:02:11:89:62:27:A4:86:1D:F3:24:3B:E1:9C:44:AE:FC:C3:24:0E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abbd4739f0d72ef8166739f676bfadd1757dfab1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd7e91dc-1cd9-4eb3-90fd-0e25072f1044/d520e8542e8edfdaa78269172873e121fc392834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd7e91dc-1cd9-4eb3-90fd-0e25072f1044/abbd4739f0d72ef8166739f676bfadd1757dfab1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9510::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:6f:78:0f:05:ba:8d:71:65:c5:60:3d:cb:a6:74:7e:b8:
         1e:90:76:a4:9c:8d:9d:c5:db:69:44:5b:49:9e:56:8c:7a:d6:
         2c:77:dd:cb:ba:da:87:80:f2:09:58:12:46:8d:11:cd:a1:16:
         7d:33:a9:02:5d:e1:bd:cf:25:a4:af:e6:f6:22:f4:16:33:8f:
         9d:f8:5d:77:ec:b8:7c:b7:b0:1c:b1:65:e8:20:5b:b9:d3:a8:
         ae:43:0a:10:ae:77:41:c1:6e:eb:1f:61:0f:0f:1f:15:17:3a:
         83:2b:9e:43:c9:6e:12:10:c5:8b:dd:16:6c:61:dc:dc:bd:1b:
         ce:e9:4c:8a:bc:cf:f9:27:ca:85:71:7c:71:b7:57:5c:08:d7:
         38:b5:dc:36:5e:ec:f4:75:60:cf:89:7c:18:47:af:8d:83:9a:
         3f:62:83:b3:27:74:35:a4:c6:1e:67:da:58:fb:e7:fd:38:70:
         96:95:d7:ef:68:84:80:ff:2b:b2:ed:82:1c:ed:da:7f:c1:7a:
         6b:db:39:23:de:9a:01:11:e3:97:3b:f1:dd:56:b7:0f:39:44:
         69:c2:12:80:5e:1f:e5:83:e9:ba:bb:cd:0d:45:88:e3:5d:a5:
         9a:c7:0b:1c:27:40:f5:94:c5:53:07:e3:97:c3:17:11:34:96:
         2f:af:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----