Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/a4d2773e0951aa5192f6d7b5fd004b2225a259ee.roa
File:                     a4d2773e0951aa5192f6d7b5fd004b2225a259ee.roa (raw, json)
Hash identifier:          TwswcurMTv7IFYcy2NfjCXz921pA37kIzybRxhS1+oI=
Subject key identifier:   12:96:A1:7C:45:43:73:29:8E:51:2E:F4:49:02:30:46:21:6C:A0:E7
Certificate issuer:       /CN=dada928f014f164e6aa671c157fde2998a0ae179
Certificate serial:       4201
Authority key identifier: F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/a4d2773e0951aa5192f6d7b5fd004b2225a259ee.roa
Signing time:             Wed 06 Dec 2023 12:27:51 +0000
ROA not before:           Wed 06 Dec 2023 12:27:51 +0000
ROA not after:            Sat 06 Dec 2025 12:27:51 +0000
asID:                     273138
IP address blocks:        2803:f450::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16897 (0x4201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dada928f014f164e6aa671c157fde2998a0ae179
        Validity
            Not Before: Dec  6 12:27:51 2023 GMT
            Not After : Dec  6 12:27:51 2025 GMT
        Subject: CN=a4d2773e0951aa5192f6d7b5fd004b2225a259ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:90:c3:4a:6c:73:14:14:a6:12:a2:b9:30:
                    a6:b2:dc:ba:fb:93:96:3d:2d:08:86:fe:77:f5:ed:
                    1a:7f:a9:3a:10:fb:27:7d:54:77:ab:26:f6:1a:fc:
                    de:e3:03:98:b9:c0:12:ea:f3:a1:bb:41:0c:f0:b6:
                    bc:bc:f8:fd:81:83:40:10:a0:55:16:8b:49:cb:43:
                    23:88:6a:db:76:47:8f:58:42:ae:7e:5a:7e:4b:1b:
                    52:e5:6d:02:1e:a0:c3:4d:f9:c5:cb:95:4e:24:d3:
                    70:21:ff:78:e4:88:d7:15:bc:a3:dc:e2:39:ab:5d:
                    95:a8:49:1a:ab:30:10:7d:ac:72:32:c6:b6:c0:8a:
                    08:a4:cf:88:27:41:4e:34:4d:76:cc:5c:a1:cf:c1:
                    1c:13:2b:28:f2:5d:1c:3c:c0:78:a8:1e:0b:e7:4c:
                    ff:7c:97:0e:9e:b8:f2:6c:b9:52:38:ab:20:3d:93:
                    c3:c9:d9:b4:97:9e:c9:1a:c2:31:55:56:3f:5d:05:
                    04:09:17:7e:95:4e:54:6c:dd:e2:81:40:ab:df:fe:
                    7d:4c:a9:6d:90:ba:6f:74:1e:0e:10:1d:ba:1b:d4:
                    e3:80:34:d0:5b:9b:a7:ba:f4:06:52:9f:a1:65:5f:
                    fa:34:eb:2b:fc:eb:da:93:d9:8b:f6:05:ac:8f:a0:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:A1:7C:45:43:73:29:8E:51:2E:F4:49:02:30:46:21:6C:A0:E7
            X509v3 Authority Key Identifier:
                keyid:F0:01:F6:47:D9:9E:CA:FF:F0:20:0A:C1:E2:F6:22:5C:5E:BD:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dada928f014f164e6aa671c157fde2998a0ae179.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/a4d2773e0951aa5192f6d7b5fd004b2225a259ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddc626ec-2479-471b-98df-9c52b49cf85f/dada928f014f164e6aa671c157fde2998a0ae179.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:f1:72:72:aa:aa:00:08:61:20:1b:dd:0b:d1:f4:a0:78:
         d3:28:8e:ca:18:8b:88:a5:1b:db:27:c9:28:fe:d8:0e:0d:3f:
         48:8c:c9:99:24:a2:1f:16:42:10:35:c0:4e:ba:5f:16:e6:98:
         48:1c:07:b3:c4:da:9f:72:b1:ea:2b:5b:01:d7:13:1c:09:e4:
         0e:b2:49:08:62:05:a1:0b:6b:bd:8a:9f:20:3c:e6:3b:a2:84:
         9c:6b:76:2f:88:65:ea:4c:f4:a0:3c:49:b8:d2:92:27:2c:4f:
         14:e0:58:f0:05:8e:ef:71:e7:5d:6a:2b:12:ee:dd:59:2e:d8:
         59:30:b8:ce:59:9b:ec:4f:7f:89:1b:d9:46:99:3e:ca:59:7d:
         72:e6:e1:6a:86:55:44:23:42:90:b9:a3:3e:91:c5:18:c9:ef:
         8a:86:2e:9b:87:41:08:de:d2:31:e7:49:cb:19:ab:cf:61:6b:
         65:7e:a7:bb:2b:64:26:38:c1:20:de:53:67:ba:01:a9:db:b3:
         87:a6:13:51:15:89:0b:07:21:18:7a:92:90:90:de:fa:42:c0:
         3f:73:aa:60:7d:64:09:7d:5b:f4:39:a6:c2:31:12:4d:6f:96:
         0c:0f:5b:03:9a:ca:86:41:8a:d1:d1:85:08:55:1c:d1:68:2b:
         38:ba:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----