Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3c467b2cee9ea31e0128416ee40b734077eb8c28.roa
File:                     3c467b2cee9ea31e0128416ee40b734077eb8c28.roa (raw, json)
Hash identifier:          XbPEhYjB85cEKFkFaatNz+dcBVjbTNObAwsPJK/qhFY=
Subject key identifier:   2C:5D:E5:2D:E0:A3:31:9C:0D:64:A4:6C:38:F5:C5:1E:80:6C:4F:B9
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       F7E0
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3c467b2cee9ea31e0128416ee40b734077eb8c28.roa
Signing time:             Wed 27 Dec 2023 03:25:48 +0000
ROA not before:           Wed 27 Dec 2023 03:25:48 +0000
ROA not after:            Sat 27 Dec 2025 03:25:48 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63456 (0xf7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec 27 03:25:48 2023 GMT
            Not After : Dec 27 03:25:48 2025 GMT
        Subject: CN=3c467b2cee9ea31e0128416ee40b734077eb8c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:b1:a2:f3:5b:e9:2f:f2:ba:17:d2:76:5d:
                    7b:55:01:d9:15:86:29:f5:8c:20:04:23:aa:a3:c1:
                    80:e4:81:6c:e2:31:2f:74:3b:8e:6f:e8:04:dc:51:
                    22:8e:7b:f1:1a:63:de:9e:76:e0:96:50:8c:28:c3:
                    48:1c:cc:78:6b:c6:bb:b4:bb:9c:98:e6:de:d2:61:
                    68:d1:0a:90:68:7e:f2:0e:7d:f6:67:7a:bf:3f:ba:
                    f4:5e:50:06:39:61:39:4b:ec:10:69:2b:c3:e5:0a:
                    d0:a7:05:14:95:0e:ae:e4:75:09:e5:fe:24:34:20:
                    2d:7c:0b:45:43:85:31:bf:ba:e4:20:e3:7e:0b:f1:
                    c9:17:bb:5f:30:8b:92:8d:96:b6:53:89:ca:35:eb:
                    07:2c:f3:dc:fd:dd:e9:e9:bb:22:d0:8d:e9:3e:3a:
                    77:30:6b:cc:bf:92:15:c3:09:71:72:42:b7:c4:58:
                    9a:be:06:3c:60:21:ce:a2:cf:a4:87:14:26:60:a4:
                    24:2b:64:c3:68:a9:b7:7e:8b:c3:bb:db:61:0e:95:
                    5a:b8:27:33:26:37:62:50:d2:52:8f:20:52:53:3d:
                    6a:a0:82:41:23:6e:61:09:f3:a8:ea:92:5a:da:d1:
                    43:12:84:2e:4e:d0:e4:da:74:92:a9:93:9e:4c:fe:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:E5:2D:E0:A3:31:9C:0D:64:A4:6C:38:F5:C5:1E:80:6C:4F:B9
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/3c467b2cee9ea31e0128416ee40b734077eb8c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:a6:85:25:1a:81:d6:51:e4:3b:cb:e7:ae:11:d5:ed:a0:
         9f:cc:de:82:47:f7:9f:7a:06:dd:21:72:69:77:d4:48:00:31:
         07:83:79:62:1f:01:b1:b5:05:de:d9:30:a1:58:17:87:81:6f:
         28:36:2f:1c:bd:d3:47:eb:e7:7e:b6:40:3e:b4:0f:28:25:4f:
         ac:00:04:57:64:d2:50:73:8e:63:b2:a7:0e:be:1a:ba:dd:cd:
         1f:15:0c:47:23:96:4e:5e:d5:b1:b0:c5:8a:34:87:75:9f:77:
         1b:7d:3f:94:9c:a5:4f:51:5d:ca:e8:d0:7b:c1:d9:4a:3f:77:
         b9:9a:51:40:fa:dc:ec:20:d5:35:53:4d:37:eb:43:58:c0:04:
         56:c9:3f:82:f6:0d:17:68:0d:69:a5:ed:28:03:6a:46:94:13:
         a2:15:19:ed:7a:d9:7e:1b:55:4e:59:ba:11:8c:49:0a:9e:b4:
         98:d2:2e:09:3e:e2:bf:ed:db:72:52:04:a9:44:1e:29:86:fc:
         fc:da:30:5a:45:f1:ae:2c:4b:fb:93:33:40:9c:b4:35:ec:a5:
         e7:6e:17:3b:93:a8:c9:9b:b0:26:1c:55:89:13:fc:1d:04:f4:
         6e:ec:2f:67:73:67:24:fa:13:8a:87:a5:ec:c7:d4:0a:c6:f7:
         ef:5a:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----