Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/9ae3f722b30841be99b994e11cae5195e8ccfe04.roa
File:                     9ae3f722b30841be99b994e11cae5195e8ccfe04.roa (raw, json)
Hash identifier:          DbMiWO7RjH6j+wJ4HoXNbACw0kxHZIArTceseX0LPoQ=
Subject key identifier:   C4:B1:DE:7B:E0:1F:B3:DE:2C:CC:04:C1:F7:B1:D0:3C:88:7C:CE:D6
Certificate issuer:       /CN=980b87bbedcd455a7b0c73bd40b747dc3f8ab00d
Certificate serial:       ABF1
Authority key identifier: A5:03:E5:1E:37:F5:55:AA:66:B9:AC:9C:8B:9A:83:2E:AD:4C:A6:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/9ae3f722b30841be99b994e11cae5195e8ccfe04.roa
Signing time:             Sun 14 May 2023 02:24:36 +0000
ROA not before:           Sat 13 May 2023 02:24:36 +0000
ROA not after:            Wed 14 May 2025 02:24:36 +0000
asID:                     271968
IP address blocks:        2803:2e10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44017 (0xabf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980b87bbedcd455a7b0c73bd40b747dc3f8ab00d
        Validity
            Not Before: May 13 02:24:36 2023 GMT
            Not After : May 14 02:24:36 2025 GMT
        Subject: CN=9ae3f722b30841be99b994e11cae5195e8ccfe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:b0:d3:c8:84:9f:67:7e:01:7c:be:3d:67:
                    d9:ef:80:59:4c:e2:03:3e:25:c4:31:1a:62:d5:b8:
                    8a:ff:42:74:d3:48:d9:fc:a9:15:87:67:ae:5a:99:
                    04:b2:6b:b5:5a:cb:43:14:cb:44:d8:9e:40:af:d2:
                    a8:ec:c1:54:65:47:c3:9f:12:b5:12:10:c4:f4:f0:
                    3c:e1:a6:73:6b:38:08:19:1b:1c:c3:8f:66:c3:1f:
                    61:92:84:e7:ad:4f:bc:81:ee:f5:60:c0:11:4c:7d:
                    fb:26:90:ec:dc:d2:18:64:4b:f2:e3:c3:a1:be:79:
                    1c:3b:da:b3:9a:e5:21:25:7e:d1:fc:ed:7b:5e:af:
                    2f:ca:da:4e:d0:19:21:b7:85:23:b8:bf:bc:c8:5f:
                    72:4d:f9:83:f9:27:f2:cc:c4:bc:69:0c:18:d7:21:
                    ab:a8:9a:27:d4:a4:fa:85:cf:9c:f8:60:a8:59:57:
                    55:3a:34:99:d4:e9:30:8a:05:ab:15:61:c9:9e:54:
                    db:24:6f:0d:f7:f9:f8:b6:41:51:58:3d:a2:9b:df:
                    5e:19:3b:ac:75:fe:13:dd:b0:a2:a6:d9:64:25:07:
                    eb:7a:43:db:d8:42:e2:0d:f5:68:bd:99:5e:71:b2:
                    ed:92:49:92:dd:7f:06:c2:c1:93:47:42:18:4d:3c:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:DE:7B:E0:1F:B3:DE:2C:CC:04:C1:F7:B1:D0:3C:88:7C:CE:D6
            X509v3 Authority Key Identifier:
                keyid:A5:03:E5:1E:37:F5:55:AA:66:B9:AC:9C:8B:9A:83:2E:AD:4C:A6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/9ae3f722b30841be99b994e11cae5195e8ccfe04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da7429a7-fdbf-48ce-b1f3-85af02ee7d4a/980b87bbedcd455a7b0c73bd40b747dc3f8ab00d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:41:d6:12:05:d1:78:67:03:b5:e5:e7:c9:cc:d5:8f:7b:c3:
         32:d8:7a:0b:45:e2:18:2e:5d:c7:78:9e:ce:01:77:f3:f9:49:
         aa:c3:c5:46:6c:f7:20:72:99:d9:54:4b:0f:fb:58:e5:af:cc:
         e2:55:01:7f:83:a5:68:85:60:99:e6:06:1c:fc:37:01:bf:19:
         e0:48:6f:8a:53:12:52:85:50:2c:67:7d:21:51:87:38:2b:16:
         66:53:16:b0:fe:03:20:e0:a8:b7:2a:42:8f:3e:d7:72:fe:c5:
         5d:95:68:9e:cc:e2:79:97:e7:00:68:6f:35:8a:c9:a7:e1:28:
         66:a7:7f:33:a5:05:e1:e1:dd:42:a2:f6:c3:66:df:15:b0:05:
         9a:89:f9:75:eb:4e:a9:2e:f1:99:cb:7a:5e:14:9f:49:12:3a:
         69:16:78:fc:b3:7b:57:df:2a:60:be:b9:24:5b:50:39:aa:72:
         55:91:28:75:29:05:dd:43:a2:8e:a6:6c:5a:c2:04:6c:07:72:
         e4:d4:1c:22:be:f8:4a:7f:04:38:1a:0a:5c:f9:31:1e:3b:05:
         05:6b:d3:ee:c5:e7:5b:67:7e:cc:a8:10:f6:34:98:3a:12:ee:
         65:ae:68:61:25:44:ac:19:46:4b:b7:42:2b:a2:eb:f7:3e:90:
         5c:a8:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----