Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/3cad71f553f5a4ee28c1a326c9318e215a9a94ba.roa
File:                     3cad71f553f5a4ee28c1a326c9318e215a9a94ba.roa (raw, json)
Hash identifier:          izXK2U94VLriKVDjTKwxPqkOjYjYSgrMivd21sBipGA=
Subject key identifier:   43:92:01:83:AA:5F:76:3F:D5:E1:24:8C:47:E0:7F:73:0F:10:2A:B4
Certificate issuer:       /CN=fb2a328489ce9d41f7b97d77b70ab1b89edc349f
Certificate serial:       5875
Authority key identifier: C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/3cad71f553f5a4ee28c1a326c9318e215a9a94ba.roa
Signing time:             Fri 21 Apr 2023 19:11:17 +0000
ROA not before:           Thu 20 Apr 2023 19:11:17 +0000
ROA not after:            Mon 21 Apr 2025 19:11:17 +0000
asID:                     272961
IP address blocks:        2803:7990::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22645 (0x5875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2a328489ce9d41f7b97d77b70ab1b89edc349f
        Validity
            Not Before: Apr 20 19:11:17 2023 GMT
            Not After : Apr 21 19:11:17 2025 GMT
        Subject: CN=3cad71f553f5a4ee28c1a326c9318e215a9a94ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:c3:5c:01:85:05:bf:f3:b1:29:ce:92:f5:
                    06:90:15:d3:e5:31:50:6f:c7:38:ec:e3:24:54:9b:
                    8d:85:7f:da:af:14:42:50:cc:0c:0e:6d:df:9a:2d:
                    51:95:98:71:04:2c:cb:a4:29:38:f5:91:03:55:02:
                    dc:f6:e5:fc:2d:c7:68:08:5a:a5:e8:a6:5e:34:4e:
                    f8:f1:58:4d:ad:f9:36:78:e6:9b:58:80:50:1e:5a:
                    cf:4b:09:05:ce:34:bb:cf:d5:1d:67:da:01:6a:3d:
                    22:99:fc:a8:b1:e9:b4:bb:47:47:29:ad:9d:60:d9:
                    45:c0:82:be:8a:3f:3b:76:95:17:f0:4c:7a:20:09:
                    b3:b8:9d:b1:66:8b:3a:49:55:91:a3:d9:a6:3b:79:
                    7b:33:23:4c:cd:aa:9f:2c:cc:ee:32:a8:23:e2:e6:
                    b9:f7:87:0a:e6:8b:d1:e0:a8:2b:58:ba:3d:ae:aa:
                    2b:fc:c5:c3:6d:86:ad:7e:3d:66:60:39:08:e4:c3:
                    13:a8:81:70:ef:2b:f9:04:d9:9a:c4:d2:5b:73:d9:
                    90:cd:e8:bd:45:35:67:41:8b:e3:9b:b5:eb:d9:1e:
                    b2:63:c7:f9:cf:52:8a:d2:d8:94:99:cd:4b:88:b3:
                    66:a0:90:98:21:85:63:c6:6b:8c:5d:be:b6:81:df:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:92:01:83:AA:5F:76:3F:D5:E1:24:8C:47:E0:7F:73:0F:10:2A:B4
            X509v3 Authority Key Identifier:
                keyid:C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/3cad71f553f5a4ee28c1a326c9318e215a9a94ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7990::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:60:1b:75:cf:03:54:98:c2:eb:f7:06:be:13:5a:0f:f1:0f:
         db:ec:71:56:3e:9f:28:00:41:98:08:fc:2b:c1:d6:be:e6:fc:
         64:c0:cb:de:2f:af:b9:00:d7:9f:f4:2d:0b:93:ed:10:d7:9f:
         a7:ee:ed:2b:82:14:e4:49:be:05:b4:86:e6:ad:00:17:fb:f5:
         91:b2:eb:12:78:90:43:59:7b:4a:87:eb:5c:c1:c5:76:47:3f:
         90:66:b2:04:f5:ab:ad:2f:90:82:72:b7:95:98:dd:49:91:cc:
         db:ea:31:da:4d:9b:36:10:79:1d:d5:5c:34:77:4e:bb:7a:ea:
         d1:8c:f2:2c:06:a8:c7:4b:a6:3e:cb:e5:92:bc:d4:3e:ce:e1:
         12:ff:81:d9:bc:6f:b1:89:36:50:24:96:fd:fb:ab:33:4f:ad:
         38:50:84:52:33:a7:e1:54:64:35:03:37:d7:83:bc:88:d0:cf:
         12:96:b3:1a:d2:5f:ad:93:2d:72:73:b3:5e:62:56:f5:f1:30:
         8a:9e:98:2d:9f:42:7f:65:08:92:82:c4:40:2a:b9:3e:c4:5a:
         d7:12:be:8a:9e:55:dc:22:d9:e5:3c:c3:3b:eb:c6:83:ca:02:
         a7:af:09:84:41:db:21:01:fd:12:51:d7:0c:83:b5:00:f4:16:
         dc:41:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----