Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/49b7df587b12782469fe59a4240e17f19202da67.roa
File:                     49b7df587b12782469fe59a4240e17f19202da67.roa (raw, json)
Hash identifier:          YS7l44I0s7NyQixtui1umYBKt1LzBoJ7UqgYiTX+DAg=
Subject key identifier:   EE:6C:BC:05:A2:B2:CF:D5:9F:89:C0:AC:A4:4E:7E:C3:18:89:32:AA
Certificate issuer:       /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Certificate serial:       033763
Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/49b7df587b12782469fe59a4240e17f19202da67.roa
Signing time:             Mon 18 Dec 2023 18:48:58 +0000
ROA not before:           Mon 18 Dec 2023 18:48:58 +0000
ROA not after:            Thu 18 Dec 2025 18:48:58 +0000
asID:                     273114
IP address blocks:        2803:790::/36 maxlen: 36
                          2803:790:5000::/36 maxlen: 36
                          2803:790:2000::/36 maxlen: 36
                          2803:790:3000::/36 maxlen: 36
                          2803:790:4000::/36 maxlen: 36
                          2803:790:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210787 (0x33763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
        Validity
            Not Before: Dec 18 18:48:58 2023 GMT
            Not After : Dec 18 18:48:58 2025 GMT
        Subject: CN=49b7df587b12782469fe59a4240e17f19202da67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:9d:44:b8:96:c9:95:94:de:1f:27:d4:7b:
                    6c:5a:74:eb:11:3c:fe:c3:3e:d3:7e:05:c5:e5:08:
                    79:34:be:82:05:0d:0e:f6:e9:65:1e:de:74:b4:d7:
                    94:60:c9:04:45:a3:76:ef:70:32:93:75:fc:5c:ee:
                    a6:2d:e1:b5:eb:0c:87:1d:a2:90:83:30:74:bb:bf:
                    42:5c:00:7f:53:06:41:6c:43:6c:39:7c:fe:77:e6:
                    86:ec:04:83:1d:83:b4:0a:f0:2a:13:a6:b8:8e:97:
                    e7:e8:07:0c:8a:b6:77:d6:33:03:b4:0c:19:22:56:
                    82:20:ea:3e:fc:91:b0:4a:f3:03:62:fa:0c:76:4c:
                    4d:8c:b6:5f:88:67:c8:e3:06:5e:c3:6a:d5:3a:0a:
                    40:3d:ce:03:72:a7:d9:44:c0:30:db:44:bc:4f:48:
                    e0:07:36:f2:64:19:ca:e2:f2:a7:f4:be:48:b3:8c:
                    98:91:ea:5f:1c:ab:d4:23:c1:57:5d:6a:77:bc:7a:
                    03:7d:ed:fc:80:ee:a9:fb:50:61:b0:8d:d7:87:b6:
                    f7:a3:da:0a:76:ee:73:10:4c:96:49:7a:49:d6:0a:
                    25:78:48:54:03:e7:aa:c4:6e:c3:d9:6d:2e:ef:59:
                    5a:74:e2:36:65:83:09:1b:25:1b:e6:c7:3d:32:c5:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:BC:05:A2:B2:CF:D5:9F:89:C0:AC:A4:4E:7E:C3:18:89:32:AA
            X509v3 Authority Key Identifier:
                keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/49b7df587b12782469fe59a4240e17f19202da67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790::/36
                  2803:790:2000::-2803:790:5fff:ffff:ffff:ffff:ffff:ffff
                  2803:790:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:51:3c:32:14:c0:ef:2a:6e:1a:75:16:55:ab:45:5c:14:
         8a:f1:2a:e0:ac:08:62:24:44:d5:92:6d:f6:04:0c:b2:e0:93:
         f9:55:64:5f:88:42:ff:e4:57:b8:63:04:30:ec:f8:97:d6:c2:
         88:38:0e:b8:7d:8f:54:3a:be:32:5e:35:36:94:36:60:a2:89:
         7d:2d:96:e8:03:a7:8b:0d:b3:c2:f2:bd:33:2d:2d:df:fe:2b:
         ae:a6:03:e1:9e:58:d4:ad:6d:61:1c:81:bc:12:15:a2:1f:a0:
         fe:e8:77:1d:3b:3d:2e:e5:db:58:a4:e9:1e:45:d0:86:bb:da:
         06:14:16:d5:d2:1f:2c:f9:92:6c:cd:82:55:43:08:39:3e:3f:
         85:30:70:c9:05:4f:96:58:57:21:40:13:1b:a3:1c:77:8e:21:
         cf:da:17:2e:8a:40:6d:23:9c:86:b9:43:07:46:0c:8c:44:da:
         28:cb:9a:2f:86:69:72:3b:f7:dd:13:d8:2c:23:6c:74:78:23:
         0b:61:23:4d:d5:9a:09:2a:a0:c4:93:ae:27:da:d6:fa:1c:37:
         09:c0:3b:6b:92:13:7c:0d:eb:27:f5:20:5c:27:90:06:73:fc:
         4d:5a:f8:b0:33:d7:11:e5:7e:14:5f:d2:15:b0:5c:3e:03:87:
         3e:bf:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----