Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/7887a5add8c94b4c0f87e591f3d39745227b733f.roa
File:                     7887a5add8c94b4c0f87e591f3d39745227b733f.roa (raw, json)
Hash identifier:          CWhEinhBCZoqnkonyEJHt0f4bex54QrwNKDZiQ95e00=
Subject key identifier:   CD:A6:A5:B4:EA:D9:0D:05:3E:55:30:89:9C:3F:45:DE:D2:51:F2:9A
Certificate issuer:       /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Certificate serial:       033F18
Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/7887a5add8c94b4c0f87e591f3d39745227b733f.roa
Signing time:             Mon 18 Dec 2023 19:16:58 +0000
ROA not before:           Mon 18 Dec 2023 19:16:58 +0000
ROA not after:            Thu 18 Dec 2025 19:16:58 +0000
asID:                     273114
IP address blocks:        2803:790::/36 maxlen: 48
                          2803:790:5000::/36 maxlen: 48
                          2803:790:2000::/36 maxlen: 48
                          2803:790:3000::/36 maxlen: 48
                          2803:790:4000::/36 maxlen: 48
                          2803:790:7000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212760 (0x33f18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
        Validity
            Not Before: Dec 18 19:16:58 2023 GMT
            Not After : Dec 18 19:16:58 2025 GMT
        Subject: CN=7887a5add8c94b4c0f87e591f3d39745227b733f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:d0:f3:1b:ad:40:b6:e0:99:84:1a:77:a3:
                    12:5a:12:69:2e:10:db:75:9c:96:75:7a:ce:24:cd:
                    78:6c:a9:f8:86:6a:b5:77:c6:1b:2d:7c:ae:ad:c3:
                    a0:ec:e5:64:14:fc:90:0e:1b:48:be:43:2f:4a:d6:
                    6d:b7:96:9f:d2:81:3e:79:50:33:cf:aa:b2:4f:e5:
                    32:f4:0d:25:07:22:35:13:4e:ab:2f:9f:dd:8f:70:
                    df:51:97:a0:fe:98:e3:84:fb:94:6a:f2:61:a5:3e:
                    90:6a:7d:c1:1b:67:ef:7d:f3:b5:88:ed:46:dc:4e:
                    3a:58:68:33:86:13:ff:aa:08:8f:eb:b6:44:53:95:
                    c6:ef:3b:e8:8f:0d:f2:d1:3e:33:f0:ef:ac:50:f5:
                    44:48:f7:cb:da:05:3b:21:b9:45:1b:29:7c:e8:26:
                    00:d7:91:56:f0:cb:31:18:54:f9:06:97:9b:42:81:
                    0f:ee:a6:fb:58:4f:9b:fc:c1:dc:68:93:cc:df:c7:
                    50:ed:d6:33:0a:f1:a8:89:a8:88:98:bc:aa:20:af:
                    76:20:d0:dc:5e:82:0d:9a:4b:69:cb:28:19:7a:d7:
                    c6:e1:16:60:ce:a0:9e:e5:f4:04:32:54:3f:43:60:
                    0e:a3:5e:b2:65:3a:b6:6a:89:36:03:d6:6a:47:dd:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:A5:B4:EA:D9:0D:05:3E:55:30:89:9C:3F:45:DE:D2:51:F2:9A
            X509v3 Authority Key Identifier:
                keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/7887a5add8c94b4c0f87e591f3d39745227b733f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790::/36
                  2803:790:2000::-2803:790:5fff:ffff:ffff:ffff:ffff:ffff
                  2803:790:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:19:10:4e:c7:40:19:4d:2a:ec:bd:56:b4:d2:13:07:8b:ba:
         8b:67:13:d7:8f:15:24:c0:f7:47:d9:36:61:35:9c:20:ef:0a:
         1b:f0:70:cd:99:8e:56:25:7b:81:96:13:1e:83:8c:03:04:6b:
         eb:49:ad:89:93:75:f1:fb:6a:ce:0e:ed:26:1a:ec:de:1b:44:
         2e:8d:57:70:a5:97:12:b3:ad:03:08:85:4c:cf:82:48:3a:81:
         fe:b0:79:33:6f:e3:74:35:e8:c2:47:47:a2:72:dd:d7:b8:f6:
         a6:f6:11:62:3a:6b:e9:a2:7d:6a:84:dd:a4:29:2d:e5:13:b7:
         da:b2:b6:cf:f3:f3:ed:a3:87:0b:d6:03:ed:14:3c:bf:43:16:
         b4:a1:e0:4c:6f:b1:66:db:07:e9:6c:53:aa:7d:fe:29:f2:cb:
         0c:b1:4b:d7:e4:88:11:08:e7:4c:df:2d:9f:b2:3d:67:0c:94:
         46:72:b5:6c:cb:a3:10:d7:7a:f3:f0:07:ee:77:64:b3:ad:bd:
         c9:96:16:a7:bf:cf:16:e7:44:15:2f:4b:00:99:40:6f:62:f2:
         b6:75:9a:94:d1:34:05:a5:3b:c9:d2:cf:9e:a7:ca:e8:d2:68:
         d9:db:8d:59:a4:8e:2b:b0:f0:d7:e3:5b:aa:06:c9:ff:01:58:
         96:31:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----