Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/b8e7ed3a05bc76a3e79e8cf9f412b266b01d7dee.roa
File:                     b8e7ed3a05bc76a3e79e8cf9f412b266b01d7dee.roa (raw, json)
Hash identifier:          orjwkhxFQUZgfGdQfhGkpgsxGigJcjCA9nVpDq060/M=
Subject key identifier:   A0:9C:02:96:EE:6C:E8:4C:AF:54:53:FF:0F:8D:85:C3:7C:BD:AC:C6
Certificate issuer:       /CN=958ec93745c200e2ec4523ba6b1c5792ea0735d9
Certificate serial:       0386E5
Authority key identifier: 3A:18:1D:59:C9:ED:5B:A9:47:0C:2D:F4:E2:23:21:5B:18:B1:71:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958ec93745c200e2ec4523ba6b1c5792ea0735d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/b8e7ed3a05bc76a3e79e8cf9f412b266b01d7dee.roa
Signing time:             Mon 02 Oct 2023 15:23:21 +0000
ROA not before:           Sun 01 Oct 2023 15:23:21 +0000
ROA not after:            Thu 02 Oct 2025 16:23:21 +0000
asID:                     272996
IP address blocks:        2803:6d90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231141 (0x386e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958ec93745c200e2ec4523ba6b1c5792ea0735d9
        Validity
            Not Before: Oct  1 15:23:21 2023 GMT
            Not After : Oct  2 16:23:21 2025 GMT
        Subject: CN=b8e7ed3a05bc76a3e79e8cf9f412b266b01d7dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:1f:fa:79:7a:fe:5a:6e:49:d0:83:0c:20:
                    28:c3:66:6e:1e:d3:68:9c:98:41:4a:2e:24:46:7e:
                    1f:d7:dc:08:d9:e3:59:1d:f4:c5:7f:93:2c:fe:71:
                    0b:8f:c3:00:2a:65:b9:37:20:ec:29:fe:77:e5:e2:
                    fb:6c:8a:82:a0:a8:73:bf:93:b9:26:d4:65:df:05:
                    8e:50:94:c1:73:bd:6f:07:dc:23:f5:fb:e2:b7:f7:
                    18:2d:b5:ae:a5:33:68:2c:cd:9d:d4:aa:23:8b:18:
                    f5:bf:3b:a3:33:d9:48:80:00:46:e3:ce:25:e1:76:
                    ad:11:b5:8b:ee:0e:fa:c1:62:03:f3:d1:a3:d4:ac:
                    24:91:8b:ed:67:fa:57:e7:1a:11:8c:54:ce:81:ff:
                    dd:0a:b9:19:38:63:d9:4f:7d:01:28:85:d4:88:85:
                    52:c5:c7:70:31:ba:91:fc:3c:09:d7:94:54:90:4b:
                    94:ad:6d:22:7b:6e:31:2a:be:89:11:40:ee:09:51:
                    65:ad:6c:80:45:11:af:b4:55:87:a0:fa:4b:45:a1:
                    34:9e:94:06:c6:ef:e0:49:5d:a4:6c:47:ac:40:2f:
                    d5:86:38:a1:0e:5c:cd:4d:91:c6:16:ee:6d:08:a1:
                    73:65:0a:26:80:89:47:11:2a:0a:fc:f6:30:dc:37:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:02:96:EE:6C:E8:4C:AF:54:53:FF:0F:8D:85:C3:7C:BD:AC:C6
            X509v3 Authority Key Identifier:
                keyid:3A:18:1D:59:C9:ED:5B:A9:47:0C:2D:F4:E2:23:21:5B:18:B1:71:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958ec93745c200e2ec4523ba6b1c5792ea0735d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/b8e7ed3a05bc76a3e79e8cf9f412b266b01d7dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc6512f7-9e97-40a0-8604-7dd5b175874e/958ec93745c200e2ec4523ba6b1c5792ea0735d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:ba:f0:b6:00:3d:4e:97:21:53:af:06:ea:62:6c:bd:b4:
         bf:ac:f4:e7:7f:96:76:1d:f0:ca:db:7f:a2:a8:60:18:ef:b7:
         93:24:1a:15:b6:ab:d3:52:a3:09:5c:0d:89:7a:5c:9f:a6:e7:
         0b:3c:ae:5b:7b:91:6b:2c:2a:93:30:01:2c:e1:e0:51:c0:d1:
         2b:5c:c5:69:d1:5c:59:cd:7d:8c:27:34:42:be:a0:6c:59:e4:
         6a:f2:a8:33:39:2b:cd:d1:bc:a6:8f:a3:0d:53:25:04:68:25:
         80:c8:57:5a:0b:f3:53:f5:43:09:ab:93:7e:19:28:b2:0d:be:
         03:83:18:1f:2a:58:73:06:36:8e:85:3b:c0:b1:b2:b7:01:86:
         d7:84:c6:60:e4:22:bc:b1:10:eb:33:ff:df:ae:58:2f:5a:2e:
         c6:98:72:16:e4:98:2d:3a:68:80:47:cf:5c:92:80:28:7d:24:
         52:9a:03:3d:56:a3:9f:19:03:a5:77:bf:ef:25:99:3c:f6:38:
         c7:7e:71:ad:77:f8:db:56:82:e9:73:03:8c:52:d6:5b:43:f0:
         55:91:b9:39:04:3b:e5:8a:65:06:a9:66:36:9a:77:ec:f1:a0:
         85:a3:13:a3:5b:6e:96:25:cc:49:ec:37:79:e5:16:e0:27:35:
         61:bd:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----