Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5fafd7-4a8a-4052-b7f2-cadf08021a61/5137886399cd8a06a053d9d81086f611ec530101.roa
File:                     5137886399cd8a06a053d9d81086f611ec530101.roa (raw, json)
Hash identifier:          ZgCyA0gJGvuWntnmp8MxT5cQur8J7G5N9nEDtcVxYlo=
Subject key identifier:   78:7B:65:AD:7D:6D:3B:C3:23:77:74:3B:44:09:71:1B:F2:B1:C5:B2
Certificate issuer:       /CN=a729040db713a266d9931ebc546daa6c71b926b3
Certificate serial:       03F6A1
Authority key identifier: B5:83:54:9A:A4:90:C5:D1:D3:1F:E9:A9:54:04:D4:3C:71:2C:40:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a729040db713a266d9931ebc546daa6c71b926b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5fafd7-4a8a-4052-b7f2-cadf08021a61/5137886399cd8a06a053d9d81086f611ec530101.roa
Signing time:             Mon 02 Oct 2023 23:21:11 +0000
ROA not before:           Sun 01 Oct 2023 23:21:11 +0000
ROA not after:            Fri 03 Oct 2025 00:21:11 +0000
asID:                     272923
IP address blocks:        2803:3e90:100::/40 maxlen: 40
                          2803:3e90:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259745 (0x3f6a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a729040db713a266d9931ebc546daa6c71b926b3
        Validity
            Not Before: Oct  1 23:21:11 2023 GMT
            Not After : Oct  3 00:21:11 2025 GMT
        Subject: CN=5137886399cd8a06a053d9d81086f611ec530101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:3a:3d:e3:58:f8:de:b8:60:a5:f4:a3:81:
                    0e:e2:43:8f:50:ed:8d:af:4a:95:28:84:17:84:5e:
                    6e:02:8f:b2:8e:25:73:74:5b:9c:62:f3:88:53:66:
                    01:79:1f:ad:8e:8e:ce:17:45:d9:14:87:c1:f2:ea:
                    c8:f8:b1:e6:0c:51:1f:a4:c7:1f:d0:5b:1d:aa:f1:
                    5b:02:12:8b:89:ca:ba:77:bd:97:10:48:83:fa:d3:
                    7c:79:66:cc:8a:58:9b:9c:76:05:7a:24:24:14:c0:
                    c9:24:6d:70:52:34:80:d5:f9:e8:de:bd:4d:dc:0e:
                    de:7a:3b:08:06:dc:09:05:0f:8b:f3:67:c7:f0:e9:
                    52:be:f7:a4:18:0b:f9:44:6d:11:c8:39:87:a9:41:
                    ef:54:f5:44:6c:92:39:b5:45:c9:70:64:70:97:42:
                    b5:88:60:19:c2:c2:be:bb:90:dc:d0:d0:3c:4f:1c:
                    20:e9:f3:a0:75:35:1f:00:32:f4:2e:b3:2b:58:83:
                    92:07:3f:bd:ba:0b:93:06:29:4a:d7:f3:5c:78:9e:
                    d7:55:07:2c:43:7b:50:33:6e:2d:a4:0e:e8:66:af:
                    64:f7:5a:52:e2:a2:08:a1:66:45:db:c0:be:2b:82:
                    5c:5c:2b:7a:07:61:b1:1e:48:04:6e:09:bb:71:76:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:65:AD:7D:6D:3B:C3:23:77:74:3B:44:09:71:1B:F2:B1:C5:B2
            X509v3 Authority Key Identifier:
                keyid:B5:83:54:9A:A4:90:C5:D1:D3:1F:E9:A9:54:04:D4:3C:71:2C:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a729040db713a266d9931ebc546daa6c71b926b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5fafd7-4a8a-4052-b7f2-cadf08021a61/5137886399cd8a06a053d9d81086f611ec530101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5fafd7-4a8a-4052-b7f2-cadf08021a61/a729040db713a266d9931ebc546daa6c71b926b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e90:100::-2803:3e90:2ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:e5:74:60:cb:ee:74:d1:00:e1:df:c8:9f:ff:64:7d:96:
         c2:29:55:30:0e:36:90:f9:6c:d4:42:1c:97:d9:e0:c1:7a:e4:
         3c:38:15:eb:fa:ca:49:4a:37:c0:03:25:f3:d7:21:33:63:73:
         66:8b:da:d1:a8:70:04:03:c3:4f:08:64:70:78:5c:60:01:5e:
         f1:7a:6c:e1:45:49:50:2b:cd:34:39:ca:cc:f6:be:0c:3c:50:
         18:34:a1:e5:8f:e1:e0:06:e7:04:e1:17:df:c3:93:23:87:12:
         81:4c:72:5d:46:41:59:6a:c6:25:e0:3c:a5:fe:6a:fc:d0:52:
         28:75:3a:ce:00:aa:2f:fb:44:d9:0f:91:b1:e5:d4:ab:8d:e2:
         a5:5c:00:f3:69:44:dd:a6:a4:35:f7:e7:35:99:79:fd:66:86:
         dc:7e:7f:a2:8e:12:2d:f2:01:52:82:70:fe:73:8e:60:5f:e6:
         93:00:86:2a:94:9f:ef:af:f2:d1:2b:f8:4d:05:e0:4c:c0:07:
         28:34:66:71:b9:51:e1:30:5a:f8:99:3d:3f:d5:0d:0f:8b:5a:
         e4:df:43:c3:50:8f:8e:33:81:d0:c9:00:98:a5:64:ea:ca:a3:
         25:39:fe:ed:37:6d:a8:f8:a9:24:43:1c:02:d4:7c:c7:1f:4a:
         28:21:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----