Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/b5adc270c9c81020e230fc3124d87f2636bec02f.roa
File:                     b5adc270c9c81020e230fc3124d87f2636bec02f.roa (raw, json)
Hash identifier:          6mcsTUl5Rl0Lbr1PJWt3OTEzyc2Z4SXV4OivpqDzW0g=
Subject key identifier:   67:D1:67:E7:5A:54:11:4D:83:BA:67:75:6D:35:71:58:86:73:69:1C
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       26AE51
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/b5adc270c9c81020e230fc3124d87f2636bec02f.roa
Signing time:             Tue 26 Dec 2023 02:42:24 +0000
ROA not before:           Tue 26 Dec 2023 02:42:24 +0000
ROA not after:            Fri 26 Dec 2025 02:42:24 +0000
asID:                     264740
IP address blocks:        2803:f4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534993 (0x26ae51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Dec 26 02:42:24 2023 GMT
            Not After : Dec 26 02:42:24 2025 GMT
        Subject: CN=b5adc270c9c81020e230fc3124d87f2636bec02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:e4:fd:07:d4:7c:b4:0f:65:dc:05:54:a5:
                    c6:08:1f:3b:99:bf:5f:2c:08:d1:d5:1a:a7:f6:be:
                    88:ca:10:f5:f0:2a:2a:85:00:c3:bf:96:86:84:0c:
                    92:9e:d8:95:d7:10:37:a9:27:aa:8d:27:b3:00:ec:
                    96:df:ee:2d:5d:72:5d:8e:31:06:72:5f:16:5f:5e:
                    f5:c8:2d:f8:a8:26:f6:2c:72:db:1d:d6:69:bc:d6:
                    1e:b8:d5:de:f6:12:69:91:fe:95:ac:e6:d1:36:c6:
                    d6:ea:10:3d:9c:41:39:72:a0:95:b1:e8:a5:be:be:
                    20:4e:83:33:02:0f:48:a1:cb:1b:98:24:ed:fc:1d:
                    5f:21:28:b0:4a:3f:9d:7d:a6:39:11:78:60:23:68:
                    84:71:e2:01:d3:34:a5:60:ce:7c:0e:b4:a7:42:fa:
                    2d:4e:0e:42:0d:2a:b1:5e:1f:49:2f:91:58:da:68:
                    20:70:87:b9:fa:70:fe:65:9c:ac:13:c1:69:e0:c0:
                    b8:b0:c6:a9:72:e5:7a:b1:89:0e:97:1d:68:dc:63:
                    8b:e5:38:53:23:8a:fb:40:b5:08:df:ff:b1:b8:73:
                    18:57:05:20:19:f0:c0:20:b1:43:ae:51:a0:ba:50:
                    47:0f:e4:9f:c3:c9:15:c3:36:fc:a3:bb:dc:19:e0:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:67:E7:5A:54:11:4D:83:BA:67:75:6D:35:71:58:86:73:69:1C
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/b5adc270c9c81020e230fc3124d87f2636bec02f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:7e:e4:cc:38:a4:c5:22:2d:8e:f1:26:17:be:f0:a5:4b:
         2f:a5:e6:82:c6:b2:8c:34:b9:8e:25:ec:6a:fc:2f:73:01:ac:
         37:b3:5d:fb:d0:41:fb:8f:18:ef:f0:46:bb:f3:46:07:5b:2b:
         cd:64:64:fb:f5:94:19:36:3f:64:51:bd:6b:64:f0:d6:de:b8:
         31:5b:59:a1:23:cf:be:2f:c1:38:60:ea:d1:22:c4:cf:4e:d3:
         df:c4:e0:4e:4a:e7:bd:79:34:bd:2d:37:27:79:82:fa:84:ba:
         70:79:1e:9c:db:d1:91:8e:3e:03:95:a2:01:2c:ae:fc:b3:30:
         94:0b:d1:82:d6:73:34:88:a5:69:e7:1f:75:6d:bd:59:8a:7e:
         df:85:f2:b0:05:00:b2:ba:e2:f1:14:de:8c:33:9c:cc:21:7d:
         ed:3e:57:e0:b6:2b:24:21:de:ae:13:82:a7:ea:fd:7a:49:c1:
         d8:b1:ef:47:71:17:c6:af:c8:4a:65:31:d2:56:b6:55:70:d9:
         b9:e9:f3:8b:a5:a5:80:f8:30:bb:e2:3d:b5:9d:e5:41:9a:4d:
         8c:d2:20:e1:70:17:b3:de:b2:bc:c3:15:36:8c:7f:12:26:ec:
         a7:ec:44:79:1e:70:07:ec:4a:09:33:95:e6:e9:7c:96:e4:9b:
         e6:5d:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----