Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db57baa8-296e-4a20-8611-eb0cea0050e6/22a272ea0c935f5431ab075a183b8f85927508ae.roa
File:                     22a272ea0c935f5431ab075a183b8f85927508ae.roa (raw, json)
Hash identifier:          wsJcGWu23LMab12yCfFm3KYyFSzkX+w7EgwQDTytEnc=
Subject key identifier:   E2:A1:47:0A:BA:C3:7A:67:EF:45:D3:AE:66:E4:0D:F2:1B:BD:EB:43
Certificate issuer:       /CN=877ee566d70aeeb6a62772232d1972ab022d2227
Certificate serial:       021C
Authority key identifier: 50:06:EC:FD:67:98:65:A9:10:37:A4:04:FF:FF:20:19:8C:B2:E5:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ee566d70aeeb6a62772232d1972ab022d2227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db57baa8-296e-4a20-8611-eb0cea0050e6/22a272ea0c935f5431ab075a183b8f85927508ae.roa
Signing time:             Fri 22 Dec 2023 20:35:21 +0000
ROA not before:           Fri 22 Dec 2023 20:35:21 +0000
ROA not after:            Mon 22 Dec 2025 20:35:21 +0000
asID:                     273044
IP address blocks:        2803:1b90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ee566d70aeeb6a62772232d1972ab022d2227
        Validity
            Not Before: Dec 22 20:35:21 2023 GMT
            Not After : Dec 22 20:35:21 2025 GMT
        Subject: CN=22a272ea0c935f5431ab075a183b8f85927508ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:84:1f:51:02:c6:8d:30:5d:c6:c6:18:60:
                    25:74:f8:3d:b5:a8:89:e2:73:55:f6:16:d7:81:fd:
                    6a:23:06:ca:0a:86:3c:b0:d9:8b:5f:ec:1d:1e:68:
                    2b:09:d1:aa:1d:cd:1f:bb:df:c5:ec:18:88:58:b2:
                    3f:75:84:15:76:be:29:cd:6f:39:12:17:44:4a:7e:
                    87:a3:af:48:e9:21:84:c7:57:7b:8f:4f:b6:b2:e8:
                    b0:da:03:d7:0b:b8:bb:f0:9d:a9:c4:78:1d:59:41:
                    59:c3:71:b3:7c:90:83:8d:5d:be:4a:af:bc:78:c8:
                    59:b3:f2:76:2e:eb:0b:36:e0:9b:e7:d2:af:1d:1b:
                    f2:a3:6e:47:ab:c3:c3:8d:db:63:60:71:cf:1b:6e:
                    c9:32:9b:b5:f8:c5:33:53:aa:d1:b0:9f:14:7a:54:
                    e5:ec:bf:ea:c7:e6:95:18:90:dd:43:d7:09:ec:33:
                    81:ac:3a:c2:88:5a:8e:34:c0:94:e4:d7:91:05:b8:
                    b7:6d:4e:d5:17:ac:2c:4a:d2:b1:75:7a:12:5c:3c:
                    fc:21:02:00:41:70:58:b6:ed:ba:f8:db:0a:44:7f:
                    a2:66:ea:fd:d3:77:29:f9:d6:89:c8:26:8d:ae:be:
                    f0:33:f8:17:e4:15:58:1b:c3:57:aa:fd:c6:89:df:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:47:0A:BA:C3:7A:67:EF:45:D3:AE:66:E4:0D:F2:1B:BD:EB:43
            X509v3 Authority Key Identifier:
                keyid:50:06:EC:FD:67:98:65:A9:10:37:A4:04:FF:FF:20:19:8C:B2:E5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ee566d70aeeb6a62772232d1972ab022d2227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db57baa8-296e-4a20-8611-eb0cea0050e6/22a272ea0c935f5431ab075a183b8f85927508ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db57baa8-296e-4a20-8611-eb0cea0050e6/877ee566d70aeeb6a62772232d1972ab022d2227.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:58:40:e1:3d:b6:e5:26:87:1d:13:6a:b9:82:dc:bb:03:
         2f:b1:64:c1:bb:4d:25:b4:cb:39:ed:09:57:45:b6:92:ba:6f:
         f3:14:1f:20:95:a4:6f:1d:76:72:76:da:3a:8e:7f:6b:eb:9e:
         42:bf:d5:21:08:05:db:d6:99:dd:47:e7:6e:b0:5a:e2:e8:20:
         be:40:35:69:eb:db:6d:31:45:57:cb:80:30:a8:a6:b5:f5:bd:
         2e:ef:28:cc:7c:ec:be:c6:ab:c1:7d:46:c0:1f:12:09:75:da:
         2c:a2:ee:76:8c:56:10:db:a2:81:34:a7:80:9a:6a:89:32:57:
         fa:2a:6f:33:31:74:a6:8c:26:a3:b4:4a:62:38:8a:e6:bc:d6:
         74:6c:44:c2:ec:07:e4:d6:c0:94:ea:94:fe:fe:23:64:df:4f:
         20:c8:d2:dd:0a:51:39:12:b9:26:d2:11:d8:33:ed:b3:df:3a:
         6b:eb:e4:3d:d7:c1:4c:3c:cd:4c:2d:57:96:4b:0d:8f:bd:2e:
         1b:a9:f2:d8:ef:d9:67:2b:50:4d:a5:90:6c:26:53:31:5c:2a:
         e6:b0:a4:95:a8:24:0d:2c:8b:0e:4c:fd:c1:50:f5:0a:97:fd:
         9a:95:e2:5b:26:03:bb:a6:10:47:c3:dc:40:a2:bf:94:ea:22:
         ea:7b:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----