Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2b486b46f0846ec8c284e435f7c17029a4cb9a19.roa
File:                     2b486b46f0846ec8c284e435f7c17029a4cb9a19.roa (raw, json)
Hash identifier:          +Fu5zCPkN3E4qo3L+jgRbplvhsNDby+EIlUQvY7ZPuo=
Subject key identifier:   E4:EF:C7:39:F1:18:1A:13:67:C4:6B:8A:B9:F0:6B:EE:76:35:BC:03
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       255B5D
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2b486b46f0846ec8c284e435f7c17029a4cb9a19.roa
Signing time:             Sat 11 Nov 2023 16:31:13 +0000
ROA not before:           Sat 11 Nov 2023 16:31:13 +0000
ROA not after:            Tue 11 Nov 2025 16:31:13 +0000
asID:                     273001
IP address blocks:        2803:a5c0:4000::/36 maxlen: 36
                          2803:a5c0:6000::/36 maxlen: 36
                          2803:a5c0:8000::/36 maxlen: 36
                          2803:a5c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448221 (0x255b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Nov 11 16:31:13 2023 GMT
            Not After : Nov 11 16:31:13 2025 GMT
        Subject: CN=2b486b46f0846ec8c284e435f7c17029a4cb9a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:9d:b3:d7:8f:ad:fd:c4:05:06:60:ac:c4:
                    c7:9e:d9:11:cb:6e:da:3b:ac:e8:dd:32:8a:0a:a8:
                    ef:29:d5:2a:3c:52:46:78:f0:d2:b5:28:0d:64:7f:
                    4a:0f:ac:3f:aa:fb:f7:bd:a0:79:c3:b2:3c:4c:fd:
                    72:24:9e:ff:e5:73:ae:ee:6b:f9:09:9e:bf:f1:2c:
                    c3:98:71:e9:f8:73:c8:18:52:2e:f2:12:3c:6d:8a:
                    48:c6:20:de:17:08:4e:7d:82:da:0a:cf:59:91:6d:
                    c6:f0:36:c3:ab:b3:12:fb:e9:8f:15:05:d1:6c:58:
                    47:45:62:78:d6:1f:88:7d:40:28:f0:39:72:52:d2:
                    2d:a5:6b:bb:a2:58:39:48:e8:f1:94:a2:b1:53:fa:
                    16:ee:86:db:11:d2:8e:4e:6b:c9:46:c5:df:8b:17:
                    cc:8b:94:91:3f:a1:a3:08:f1:75:72:ba:03:01:86:
                    db:bb:cd:4b:db:a8:4a:eb:e8:db:d9:3f:b0:24:ff:
                    40:e9:67:07:d6:f3:73:dd:2d:e4:e8:17:2f:a4:de:
                    0b:04:aa:cd:d5:b6:c8:25:17:cf:2d:8c:8f:2c:a2:
                    e0:fd:61:8b:40:70:98:9e:6e:e7:a9:20:51:ca:8a:
                    70:9e:aa:98:6e:fa:ae:8d:17:fd:46:e0:cb:54:29:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:C7:39:F1:18:1A:13:67:C4:6B:8A:B9:F0:6B:EE:76:35:BC:03
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/2b486b46f0846ec8c284e435f7c17029a4cb9a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:50:52:cf:18:27:6e:c1:e1:e8:31:d3:2a:0d:04:1e:ec:7f:
         d6:95:d8:36:2b:f5:cc:66:f6:b0:ae:65:f1:4b:09:4a:e6:03:
         a2:66:a0:9b:84:0e:be:da:1f:ea:0c:b4:60:98:d4:db:2c:03:
         4d:ee:80:4a:48:c5:f5:21:31:e0:ad:c9:66:0f:cf:3b:7e:d3:
         ef:70:37:67:47:6b:1f:5f:58:98:34:0a:07:f4:f8:ce:d9:80:
         25:0d:a1:e4:67:5d:4b:29:fa:14:67:10:dd:9e:da:37:69:2d:
         a1:21:60:9f:c9:3b:14:33:80:42:b0:7b:37:40:9e:16:6d:9e:
         32:5f:e7:ea:ba:1e:1f:f0:63:d6:44:d9:ae:20:55:cb:1c:1a:
         16:86:f0:60:05:9e:17:3d:3f:d0:f5:4a:bc:d0:c2:68:aa:f7:
         fc:9c:38:70:27:df:ab:87:70:f2:ae:07:d7:9e:5e:90:ef:38:
         23:73:77:39:cc:21:27:e2:c3:99:1f:d0:ce:fa:85:59:05:94:
         21:5d:57:22:e0:01:b4:ee:22:bd:73:be:5a:7e:44:5a:6b:37:
         fa:9e:1d:94:b3:95:a8:5a:25:d1:22:f3:19:90:93:2c:f6:26:
         a6:4f:3d:6d:5b:bd:42:d6:83:23:ff:e0:18:b6:82:51:29:92:
         66:de:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----