Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/ad9a27a9cda6748a09e5b8977e7faf5034568b27.roa
File:                     ad9a27a9cda6748a09e5b8977e7faf5034568b27.roa (raw, json)
Hash identifier:          tNESYsJBXy/yzX77UWrfKHaPu3ZhFTgJ6rKlBpWaW8c=
Subject key identifier:   1B:F9:40:4F:15:99:98:2B:93:46:B8:A8:C1:B9:EC:B2:14:EB:AB:9D
Certificate issuer:       /CN=e3603d4198c0643191d4d24f2f4868c4fbcc4310
Certificate serial:       05DDDB
Authority key identifier: E4:41:B1:9A:DF:34:2A:12:7E:AF:DA:B6:9D:3D:C9:A2:7F:5E:87:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3603d4198c0643191d4d24f2f4868c4fbcc4310.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/ad9a27a9cda6748a09e5b8977e7faf5034568b27.roa
Signing time:             Tue 28 Nov 2023 02:44:32 +0000
ROA not before:           Tue 28 Nov 2023 02:44:32 +0000
ROA not after:            Fri 28 Nov 2025 02:44:32 +0000
asID:                     272877
IP address blocks:        2803:2a90:200::/40 maxlen: 40
                          2803:2a90:300::/40 maxlen: 40
                          2803:2a90:400::/40 maxlen: 40
                          2803:2a90:500::/40 maxlen: 40
                          2803:2a90:600::/40 maxlen: 40
                          2803:2a90:700::/40 maxlen: 40
                          2803:2a90:800::/40 maxlen: 40
                          2803:2a90:900::/40 maxlen: 40
                          2803:2a90:a00::/40 maxlen: 40
                          2803:2a90:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384475 (0x5dddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3603d4198c0643191d4d24f2f4868c4fbcc4310
        Validity
            Not Before: Nov 28 02:44:32 2023 GMT
            Not After : Nov 28 02:44:32 2025 GMT
        Subject: CN=ad9a27a9cda6748a09e5b8977e7faf5034568b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:27:2e:6c:c5:be:41:99:ae:6d:20:da:fa:
                    46:68:03:84:45:b6:00:2b:b1:94:d7:96:65:12:29:
                    60:9e:6c:08:b4:9d:a9:e4:c5:ef:2f:55:5d:bf:4a:
                    39:6a:d5:9f:f7:af:4d:ec:7c:1a:a0:48:02:fe:47:
                    5c:fd:f6:7d:45:79:8c:af:93:34:68:8d:8b:76:cf:
                    67:c8:1f:17:ea:fc:e6:ee:e6:5b:a9:bc:51:85:b2:
                    81:99:a5:29:65:8b:df:1f:48:14:34:c8:85:de:10:
                    07:68:de:19:a9:12:ba:ae:66:8c:4b:3f:24:67:17:
                    46:0e:4f:c5:1e:00:fe:d1:b7:b9:c6:19:1e:32:6b:
                    67:5d:03:c3:37:15:1e:28:ae:3c:73:22:3e:84:c1:
                    67:ef:1c:a1:80:14:05:9e:13:5e:4f:ff:c5:ef:68:
                    1b:55:f8:3c:b9:42:a0:b7:14:fb:48:18:9b:f5:3b:
                    9a:1b:ab:4a:99:5a:7d:00:d8:88:7e:16:c9:44:dc:
                    14:6e:91:f0:6f:4d:f2:30:1f:22:f7:cc:21:cc:6a:
                    bd:c1:63:cb:d0:c8:0f:2e:79:dd:0b:45:59:45:f2:
                    1c:b8:75:40:55:df:f8:a8:4a:ad:a7:23:77:6b:77:
                    92:c7:91:1f:12:40:e3:a4:a0:f7:db:61:a3:4a:e4:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F9:40:4F:15:99:98:2B:93:46:B8:A8:C1:B9:EC:B2:14:EB:AB:9D
            X509v3 Authority Key Identifier:
                keyid:E4:41:B1:9A:DF:34:2A:12:7E:AF:DA:B6:9D:3D:C9:A2:7F:5E:87:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3603d4198c0643191d4d24f2f4868c4fbcc4310.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/ad9a27a9cda6748a09e5b8977e7faf5034568b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/e3603d4198c0643191d4d24f2f4868c4fbcc4310.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:200::-2803:2a90:bff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:71:d7:25:f0:06:2d:9d:92:10:b4:e4:cb:58:11:c3:73:
         9d:97:89:76:99:ec:10:12:cc:50:49:ca:04:66:dc:8e:b3:60:
         cc:36:8d:08:af:25:05:d6:64:b6:c6:e9:59:51:c2:80:bb:ad:
         32:32:1c:68:ef:64:26:73:5d:7e:bd:7d:19:f4:13:b7:9a:dc:
         a2:b0:d0:62:9b:b1:1c:ec:5b:ae:07:08:63:84:1a:a0:fd:07:
         9a:32:1e:3c:05:ad:b5:eb:47:a8:a2:d1:75:43:3d:2d:1d:af:
         ff:8e:8f:cb:f0:a9:34:37:f0:be:b9:55:2c:14:4a:84:9a:c3:
         ae:ad:e3:6e:bd:be:b1:e0:6b:28:d0:8d:3d:85:2e:99:c6:02:
         64:4f:d8:60:2d:50:1c:c9:1e:c3:b3:ad:61:42:89:87:d8:7c:
         32:1b:6a:e7:92:67:c8:61:75:28:e8:59:a1:94:ec:a8:e0:a4:
         d5:e0:0e:08:e7:11:fd:bb:43:84:48:c2:51:1f:e3:49:b1:50:
         5c:7b:0f:43:bd:6a:9f:0a:d4:fc:81:67:25:72:23:c7:35:f5:
         8f:be:58:a1:83:52:45:86:52:bb:cf:93:d6:d4:5a:f0:ad:5f:
         d2:d5:ec:21:5a:0c:46:bc:81:89:41:fe:7f:53:ec:a4:c1:b8:
         bc:82:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----