Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/bfc734aae531dc076596084c23a19f038f052419.roa
File:                     bfc734aae531dc076596084c23a19f038f052419.roa (raw, json)
Hash identifier:          qEYPZGMYPazIFf+vXiQgdlfIyXKz4DIDnegjGN9Nivk=
Subject key identifier:   96:9C:73:13:F7:3D:05:C2:07:26:69:4F:D5:00:10:DC:DB:81:7E:33
Certificate issuer:       /CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
Certificate serial:       223082
Authority key identifier: C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/bfc734aae531dc076596084c23a19f038f052419.roa
Signing time:             Mon 11 Sep 2023 19:34:22 +0000
ROA not before:           Sun 10 Sep 2023 19:34:22 +0000
ROA not after:            Thu 11 Sep 2025 19:34:22 +0000
asID:                     10617
IP address blocks:        2803:9780::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240642 (0x223082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
        Validity
            Not Before: Sep 10 19:34:22 2023 GMT
            Not After : Sep 11 19:34:22 2025 GMT
        Subject: CN=bfc734aae531dc076596084c23a19f038f052419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:5b:0c:ad:2c:6b:65:f8:ac:90:a3:e1:44:
                    6c:bd:9f:48:d8:9c:5c:d5:45:e3:40:d4:8d:c1:ba:
                    2d:96:e1:11:24:94:d6:b7:80:37:10:46:52:21:92:
                    1e:ee:68:21:08:2e:d7:3a:83:bf:50:d0:8c:dd:56:
                    5a:91:77:dc:cb:38:30:90:ed:8f:83:c6:7c:79:a9:
                    93:65:03:f9:b8:e9:1b:28:c5:5f:2e:db:a4:ca:1c:
                    9b:14:9b:4a:26:b2:ff:1e:fa:ee:1f:10:2c:b6:49:
                    75:68:43:a9:b6:24:12:26:af:71:c4:80:3f:38:b3:
                    92:07:a4:91:21:97:ea:dd:57:b5:48:21:4f:d2:51:
                    0c:cb:91:20:f2:f7:07:79:bf:19:e5:95:b4:ac:d2:
                    05:95:6d:84:10:cb:2c:59:65:af:11:27:76:60:d1:
                    26:7b:44:a7:0b:7c:b7:c2:89:ee:d8:bb:e7:28:c9:
                    3e:76:05:d1:14:c7:0e:92:1b:74:20:51:ce:b9:b4:
                    01:a3:fd:fc:c8:2f:d9:8b:03:ca:53:06:6e:b0:b6:
                    c8:c6:ca:fb:01:11:df:b6:24:ba:a1:53:df:97:92:
                    db:df:1a:d8:a9:0d:b0:77:80:19:1a:97:9c:2a:1c:
                    53:80:ec:81:b9:72:5c:fb:62:c3:47:c5:7b:51:54:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:73:13:F7:3D:05:C2:07:26:69:4F:D5:00:10:DC:DB:81:7E:33
            X509v3 Authority Key Identifier:
                keyid:C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/bfc734aae531dc076596084c23a19f038f052419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9780::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:a4:43:36:e6:ab:e3:1f:b6:5d:70:57:28:0d:5d:17:1b:
         3b:72:9d:ec:b9:e6:68:1d:e6:db:35:45:ed:a0:57:04:8b:05:
         cb:7b:d2:a3:13:a1:b1:48:3e:56:ef:74:fe:78:cf:c2:04:d3:
         d1:c6:2e:3f:04:f3:e7:7d:06:92:b1:ff:e0:e2:ff:29:95:bf:
         1b:fa:34:20:53:82:71:9c:4d:4e:18:e7:3e:62:7b:fe:cc:90:
         9c:84:fa:14:db:3a:e3:4a:b0:ac:b4:50:b9:e7:05:fa:e7:f4:
         a8:92:fc:69:15:19:c3:6e:7e:9f:bf:fe:f0:cd:12:51:83:4f:
         c9:9f:9b:14:34:00:a5:18:ac:97:a8:9d:07:36:85:88:51:ed:
         52:01:d9:56:5b:59:a1:31:25:56:c2:d0:21:46:25:ab:66:09:
         da:88:da:2e:9f:d9:cf:75:9d:44:94:c0:3e:56:ea:7a:52:83:
         b9:53:17:ed:34:ea:9e:03:1d:f3:ed:70:36:45:e2:e9:3b:28:
         6e:81:a2:9b:21:0a:13:af:8c:8e:da:49:ab:36:18:46:f9:de:
         95:3f:e3:3b:17:53:ba:cf:1a:e3:c5:88:82:e3:6f:ec:c6:c6:
         ed:03:a2:b1:3b:20:54:6f:a2:35:20:0a:60:53:fb:1e:04:39:
         94:cf:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----