Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/322f7949da96b5f14efb69dd6291fe62cc152293.roa
File:                     322f7949da96b5f14efb69dd6291fe62cc152293.roa (raw, json)
Hash identifier:          cb6tLaK9j2+4XFlbXS7XbSZJmScOBGOYicETJzDpiRA=
Subject key identifier:   56:D2:0F:58:60:E0:5F:A8:46:2A:ED:60:FA:E2:2D:FB:1C:A6:0D:C6
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       E1FA
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/322f7949da96b5f14efb69dd6291fe62cc152293.roa
Signing time:             Tue 26 Dec 2023 13:40:10 +0000
ROA not before:           Tue 26 Dec 2023 02:00:00 +0000
ROA not after:            Fri 26 Dec 2025 02:00:00 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57850 (0xe1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec 26 02:00:00 2023 GMT
            Not After : Dec 26 02:00:00 2025 GMT
        Subject: CN=322f7949da96b5f14efb69dd6291fe62cc152293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:8e:b8:10:24:57:30:b4:3a:a6:8d:84:5d:
                    ab:77:06:a1:7c:98:fc:74:46:31:22:d2:6c:52:fa:
                    2c:fd:dc:b3:1e:ac:d1:ce:c1:2e:eb:db:67:2b:0b:
                    14:dd:4f:e8:a5:50:e5:02:7a:25:b8:a7:9e:7c:04:
                    06:e7:eb:45:f3:31:e8:e0:f0:a5:5e:9e:ae:50:42:
                    79:0d:c4:5d:41:5a:90:d8:65:46:00:54:99:7c:4b:
                    81:ea:0a:5a:4d:ac:50:4e:bc:30:3e:fc:f5:3b:7d:
                    49:c8:dc:df:ed:ae:13:4b:f1:22:ca:5f:31:18:2b:
                    c3:41:79:21:89:3e:2a:c2:f8:12:74:52:8f:d9:b7:
                    ce:2f:fd:c1:f9:0b:70:59:61:a7:02:55:02:39:48:
                    5c:dc:bf:bf:12:b6:45:c9:3d:89:ad:d3:ff:24:4b:
                    d7:90:ab:30:39:56:d7:e2:be:fd:38:66:86:d2:67:
                    c9:99:7f:a6:11:bc:58:e4:d0:b3:c1:c4:fd:79:ff:
                    85:a9:90:ad:0f:3f:6e:36:e0:f1:bf:33:0f:71:64:
                    98:5d:2f:46:e0:dc:16:74:7f:31:7d:4d:65:af:b2:
                    55:07:9f:56:4c:23:b3:8f:bb:bd:97:a9:e8:9b:d3:
                    0a:11:a5:e4:16:30:12:a8:2b:8f:c6:19:b3:69:d5:
                    3e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:0F:58:60:E0:5F:A8:46:2A:ED:60:FA:E2:2D:FB:1C:A6:0D:C6
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/322f7949da96b5f14efb69dd6291fe62cc152293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:8a:29:dd:b7:c7:90:71:2c:81:bc:4e:b9:4f:06:b6:cc:
         8e:b5:32:36:15:a0:c0:21:e2:a2:1b:eb:6a:90:b6:8a:a3:84:
         95:33:3d:72:85:19:d8:56:24:2c:6d:de:6a:1c:0d:dc:80:ff:
         47:da:19:8a:95:fd:03:50:e6:ed:b0:bc:0d:f7:a2:ea:f3:ea:
         78:2e:5d:45:ec:56:da:d8:28:58:d5:d7:1a:26:b2:15:7e:d7:
         7c:d0:02:2c:9b:95:7e:c9:29:55:a2:e0:49:0e:b3:2e:8f:66:
         ad:35:a0:a0:e3:6c:90:34:b4:c3:71:51:d2:fb:df:1a:bf:f1:
         c3:df:c0:61:77:58:1f:67:1d:f5:6a:1a:08:48:d3:5a:76:9f:
         d3:fe:17:6b:b9:c3:8a:2e:a1:08:67:e6:15:f8:d1:9d:52:8f:
         26:0c:1f:13:0d:46:16:30:58:a3:47:3d:2e:2a:99:81:b6:af:
         12:5f:a9:f2:81:47:85:28:db:88:bb:16:bd:37:7a:20:b8:02:
         2d:2d:44:7c:e7:69:1f:b2:dc:af:10:2d:f9:e7:d0:b9:2b:91:
         bd:22:a8:1b:61:49:95:d2:80:3d:df:1f:31:18:b4:0a:8d:2b:
         44:34:a2:20:0f:67:a3:56:f8:cf:ec:e5:3b:6b:9e:05:20:46:
         e1:01:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----