Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/2efe485862939683a080b7ff5bb5cfc4714b006f.roa
File:                     2efe485862939683a080b7ff5bb5cfc4714b006f.roa (raw, json)
Hash identifier:          M8ORc8lELfV4+9+pypzYm02WETxPI+aLTbIQYsOQ5OI=
Subject key identifier:   84:DD:9B:A1:D4:95:18:3A:BF:7A:BE:E3:6A:0A:42:F5:35:50:48:DC
Certificate issuer:       /CN=768d3f90fddd18cca90c45a0e35a0f1d95e50766
Certificate serial:       03B1A8
Authority key identifier: 52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/2efe485862939683a080b7ff5bb5cfc4714b006f.roa
Signing time:             Fri 05 Jan 2024 21:32:11 +0000
ROA not before:           Fri 05 Jan 2024 21:32:11 +0000
ROA not after:            Mon 05 Jan 2026 21:32:11 +0000
asID:                     272886
IP address blocks:        2803:7a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242088 (0x3b1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=768d3f90fddd18cca90c45a0e35a0f1d95e50766
        Validity
            Not Before: Jan  5 21:32:11 2024 GMT
            Not After : Jan  5 21:32:11 2026 GMT
        Subject: CN=2efe485862939683a080b7ff5bb5cfc4714b006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:a0:3b:48:f6:e0:b7:59:32:24:3c:44:3a:
                    2d:20:5d:75:2c:f1:9c:2e:3d:64:72:93:3d:b3:51:
                    8a:75:09:81:8a:d0:ce:4d:8e:52:98:9c:31:61:a7:
                    81:ae:f2:c3:e2:0a:0b:f7:d9:c1:f3:f2:0b:9b:32:
                    8e:2e:9f:5a:ce:13:c1:95:a0:6e:7e:b3:e8:9b:6b:
                    ae:18:69:1a:59:72:3c:b0:b4:bb:42:df:1f:6e:de:
                    38:6c:a2:2b:fa:cf:38:09:33:9b:89:6a:df:e2:49:
                    9c:03:4d:4d:02:9d:1c:92:54:b8:f4:cf:0a:34:6d:
                    1f:d2:01:f0:20:e1:c0:00:56:0c:50:af:43:c5:37:
                    29:e6:74:f3:3c:e4:aa:4d:c3:65:ad:64:d3:c4:3f:
                    98:4b:5e:a5:a7:70:4d:49:c4:3d:61:75:9d:15:eb:
                    92:8b:d5:8b:81:7b:07:7a:6f:b1:82:7e:b1:c8:59:
                    86:91:4a:ef:a3:fb:fe:11:c2:da:ef:0e:3f:85:d3:
                    68:84:7d:88:63:b6:78:11:77:75:61:13:f5:6d:3c:
                    d5:19:3b:f1:e8:1b:f6:54:d0:0a:39:73:a1:8b:ca:
                    5e:66:3f:9d:b8:89:39:1c:43:bd:f8:cf:4a:42:60:
                    4b:5d:05:d9:c0:1f:39:46:39:57:81:97:0f:af:aa:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DD:9B:A1:D4:95:18:3A:BF:7A:BE:E3:6A:0A:42:F5:35:50:48:DC
            X509v3 Authority Key Identifier:
                keyid:52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/2efe485862939683a080b7ff5bb5cfc4714b006f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/768d3f90fddd18cca90c45a0e35a0f1d95e50766.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:e9:c0:09:3e:fa:e5:e4:14:42:3e:e1:aa:17:85:58:fb:38:
         2b:8d:45:c3:e9:41:ed:da:ad:ce:84:37:43:65:5c:1b:a1:23:
         b6:47:17:03:5a:23:cc:68:84:bf:18:27:99:a7:8c:8c:46:f6:
         77:7b:0a:fe:c5:19:d3:cf:ab:44:c4:f5:8d:25:f9:19:40:df:
         27:39:14:16:e7:f9:a5:0b:20:fa:df:e7:95:97:91:71:74:1f:
         63:e4:f6:9a:76:99:86:a3:58:41:c8:1c:72:16:a7:59:c1:a0:
         b4:c8:c3:79:5e:66:d6:3b:da:27:3d:c5:b2:0c:94:52:da:50:
         0b:c9:82:a6:cd:68:38:ef:cb:f6:7a:fb:ec:51:52:9e:11:c4:
         58:68:b7:1f:7e:9e:8a:b2:08:89:18:52:3e:e7:61:2f:b8:08:
         31:d9:d1:8d:d8:aa:13:26:5d:95:cc:15:5e:fb:e1:c6:a1:5b:
         c6:64:56:6b:c0:f5:8b:57:17:13:d3:b7:27:b8:98:6e:64:fd:
         67:6b:ae:71:30:de:74:f9:98:1c:3a:ef:f0:09:a3:cf:23:03:
         49:66:66:5f:de:ff:e5:48:2f:12:60:ff:23:83:eb:25:00:f3:
         00:98:06:a7:31:2c:bb:ac:79:96:cd:07:2f:34:ea:fc:c5:87:
         bb:c5:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----