Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/11817e3d08a585ea0c2ed58e7daec5742f8295d5.roa
File:                     11817e3d08a585ea0c2ed58e7daec5742f8295d5.roa (raw, json)
Hash identifier:          YnIAouCXv3ueh6WLDzGXQ16qDwtbBn1eS+ZphtTrGt4=
Subject key identifier:   AB:42:50:B5:AB:BE:4A:68:41:2D:FA:CD:BF:B0:69:D2:E8:03:F5:0A
Certificate issuer:       /CN=c8f1310a362cd69ce795e3aa969a8da18d9648f6
Certificate serial:       0658B8
Authority key identifier: CA:8B:A8:B5:1B:82:14:1F:6C:19:28:BC:72:D6:F2:10:03:C6:55:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8f1310a362cd69ce795e3aa969a8da18d9648f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/11817e3d08a585ea0c2ed58e7daec5742f8295d5.roa
Signing time:             Wed 13 Mar 2024 09:20:49 +0000
ROA not before:           Wed 13 Mar 2024 09:20:49 +0000
ROA not after:            Fri 13 Mar 2026 09:20:49 +0000
asID:                     272889
IP address blocks:        2803:8690::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415928 (0x658b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f1310a362cd69ce795e3aa969a8da18d9648f6
        Validity
            Not Before: Mar 13 09:20:49 2024 GMT
            Not After : Mar 13 09:20:49 2026 GMT
        Subject: CN=11817e3d08a585ea0c2ed58e7daec5742f8295d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:65:9e:a1:f5:a5:41:3e:1d:1f:53:0b:1a:
                    9d:f3:cb:39:28:ec:89:9c:e5:f2:b2:e1:73:af:bc:
                    de:22:ec:b3:1c:3b:a4:ba:a8:06:27:f8:f6:4e:ae:
                    d0:f2:da:11:e3:c7:db:6d:60:56:e7:3c:90:ba:73:
                    0a:67:95:02:7a:a6:42:4b:5d:3f:97:5f:e6:cd:51:
                    e2:06:15:d4:5c:2e:68:7c:54:99:da:f8:7c:27:9f:
                    9d:8d:b5:e5:b5:e0:1d:92:96:5b:12:3f:21:62:d2:
                    5d:42:2d:d0:ca:5f:06:57:8b:03:dd:5e:14:b9:03:
                    a9:a3:b9:d9:54:ce:55:da:e1:e0:e3:fb:1e:72:a4:
                    fc:26:b7:c9:1f:af:a8:2e:05:96:ff:64:f3:ec:7e:
                    62:9a:24:4f:57:ed:dc:69:9f:18:07:54:58:46:d4:
                    ea:1a:85:5d:f4:b5:d4:98:5d:54:fe:2c:6a:9f:e7:
                    e2:71:78:36:48:2a:35:af:0d:08:c3:06:8d:e0:0f:
                    39:ed:98:6b:c0:89:aa:9f:bf:75:67:dd:ec:45:c1:
                    47:10:1a:42:4c:72:54:ca:51:48:38:b7:0e:f9:66:
                    c1:03:61:a4:5f:26:83:6f:04:b1:69:50:59:88:eb:
                    9c:7c:1d:7d:49:13:86:b5:66:20:bb:15:ff:d3:ec:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:50:B5:AB:BE:4A:68:41:2D:FA:CD:BF:B0:69:D2:E8:03:F5:0A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:A8:B5:1B:82:14:1F:6C:19:28:BC:72:D6:F2:10:03:C6:55:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8f1310a362cd69ce795e3aa969a8da18d9648f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/11817e3d08a585ea0c2ed58e7daec5742f8295d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4933b7a-1445-4774-90fb-3567de3a5364/c8f1310a362cd69ce795e3aa969a8da18d9648f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:31:0a:7e:b4:46:2c:99:ed:e4:34:eb:0c:a8:4a:95:4c:d5:
         e0:75:e3:7f:ef:76:15:76:60:61:90:8f:64:2f:d5:f6:13:23:
         57:5d:88:5b:7e:47:41:3e:da:e0:b3:6b:61:ac:20:4c:d8:8e:
         1b:30:9f:aa:a1:ce:5b:40:98:da:e7:8c:f3:6c:80:58:13:19:
         d2:99:a2:06:3e:19:8e:58:cf:80:2f:c5:ea:05:cd:c4:76:7d:
         6b:a1:62:96:16:b7:54:a2:95:0d:5d:c5:d0:23:64:e0:36:c5:
         8c:c4:1e:05:f3:71:73:84:f6:e5:4d:fd:0b:eb:66:e2:42:dd:
         92:4d:ac:43:4e:92:e0:46:5f:d3:7c:94:c5:f7:5b:87:34:f4:
         bd:fb:46:b7:7f:25:8b:b9:24:df:fc:fe:9f:a1:92:6d:96:53:
         5b:d1:39:d0:51:cd:26:d9:c9:b5:48:4a:2f:08:1b:df:d1:2b:
         0f:45:a6:4e:8e:ad:18:4a:86:14:10:59:31:e7:9d:c0:1f:00:
         59:98:b0:49:52:0a:6f:aa:ce:28:e4:bd:f0:7e:5f:3a:ea:03:
         8a:52:65:d2:0f:ba:10:80:21:da:25:c4:94:f2:97:b9:cf:4e:
         8a:36:24:be:3b:41:1a:13:3d:d5:95:21:b8:64:a3:35:61:f4:
         4a:e8:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----