Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/20fd507d91b41ac3859edab2824ee612fdccb1ad.roa
File:                     20fd507d91b41ac3859edab2824ee612fdccb1ad.roa (raw, json)
Hash identifier:          Jao349VE3CICNsJ04le8vH3D2rH5KlTHyA4S9cO3jIM=
Subject key identifier:   10:59:4D:83:1C:B1:6D:68:FD:10:9E:00:B6:4F:05:70:A2:05:7D:7F
Certificate issuer:       /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Certificate serial:       0442F0
Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/20fd507d91b41ac3859edab2824ee612fdccb1ad.roa
Signing time:             Fri 26 Jan 2024 16:16:26 +0000
ROA not before:           Fri 26 Jan 2024 16:16:26 +0000
ROA not after:            Mon 26 Jan 2026 16:16:26 +0000
asID:                     273114
IP address blocks:        2803:790::/36 maxlen: 64
                          2803:790:5000::/36 maxlen: 64
                          2803:790:2000::/36 maxlen: 64
                          2803:790:3000::/36 maxlen: 64
                          2803:790:4000::/36 maxlen: 64
                          2803:790:7000::/36 maxlen: 64
                          2803:790:8000::/36 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279280 (0x442f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
        Validity
            Not Before: Jan 26 16:16:26 2024 GMT
            Not After : Jan 26 16:16:26 2026 GMT
        Subject: CN=20fd507d91b41ac3859edab2824ee612fdccb1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:65:43:8b:90:0a:5e:3c:75:50:e5:fb:5b:
                    7e:be:93:e9:ed:af:b8:c3:10:7c:fa:d9:a6:d7:7a:
                    68:8d:61:2d:04:43:76:e7:dc:86:83:0d:c0:81:aa:
                    a0:02:f9:1f:68:5c:02:47:e3:ad:25:8a:e9:cd:6f:
                    f6:0c:13:2f:90:67:95:0d:06:95:c6:73:e6:6c:1e:
                    f8:88:a8:e2:5b:9b:41:e7:9a:74:f1:9d:3d:1f:8f:
                    aa:2a:10:e6:64:7f:c9:5a:9e:86:4e:28:d1:61:b3:
                    de:81:5a:79:21:73:59:ae:e6:33:68:48:bd:66:2a:
                    f8:de:41:62:e1:52:3a:c4:3c:7f:56:2c:41:b3:c8:
                    f3:3e:eb:4f:7a:7f:cc:1c:93:01:ec:23:75:ac:09:
                    a1:f1:89:19:d3:10:f4:f1:38:32:7d:fe:ce:ea:95:
                    50:86:e6:59:9b:61:5f:e4:40:53:db:4a:e4:ed:2d:
                    62:70:5c:91:b2:96:ba:4a:d6:3a:44:10:04:58:12:
                    e4:40:8a:32:00:14:f1:4e:86:2f:a3:79:6b:a2:06:
                    df:7e:46:48:5b:dd:11:be:c6:eb:70:ca:7d:68:c5:
                    e8:ec:e0:3e:b9:c5:77:a8:6b:98:28:59:63:3d:55:
                    60:28:07:78:1a:71:1e:a8:a2:aa:2c:18:ce:52:ac:
                    f5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:4D:83:1C:B1:6D:68:FD:10:9E:00:B6:4F:05:70:A2:05:7D:7F
            X509v3 Authority Key Identifier:
                keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/20fd507d91b41ac3859edab2824ee612fdccb1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790::/36
                  2803:790:2000::-2803:790:5fff:ffff:ffff:ffff:ffff:ffff
                  2803:790:7000::-2803:790:8fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         07:69:cc:8a:37:86:42:53:66:89:a5:dc:b4:94:39:12:18:cc:
         f4:e6:19:c9:ce:6e:46:e7:0c:98:12:c7:0f:3d:de:5d:55:23:
         05:c0:41:d0:be:01:b8:62:0f:e7:59:d5:3c:1f:d8:bb:bb:f2:
         81:a4:8e:3a:73:b3:8e:1f:21:2f:11:f8:5d:55:b1:fb:e8:a1:
         7f:9f:4d:a4:cd:92:24:52:4a:be:a3:aa:f4:6b:33:17:1b:ef:
         a9:4f:dc:9e:af:71:4f:fc:93:49:46:8f:d6:f9:bf:a2:59:1e:
         99:14:0f:9e:91:60:29:0e:9b:76:c6:ff:f0:3c:5c:71:b7:ed:
         8d:c9:86:fa:23:97:7f:d0:ae:e6:a0:ac:af:63:72:12:e9:4e:
         d1:9c:a1:f9:46:bb:97:6c:e6:72:88:73:4c:62:1e:f3:38:bb:
         d3:ad:1d:e7:e3:88:b1:67:9f:2c:c0:0d:2d:7f:0e:9c:b1:a1:
         7f:5c:55:2a:96:ab:0b:bd:aa:60:66:df:f5:9e:ba:fe:64:af:
         ee:a7:f7:9e:b8:d9:43:cc:5f:0d:1a:a6:b5:0e:a2:a2:ab:f5:
         7e:1a:7d:2c:54:f3:64:ef:79:40:23:0d:84:9f:92:ca:8a:a1:
         bb:25:7a:27:19:d6:0a:10:4f:8b:65:15:02:22:90:ca:a1:42:
         d6:73:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----