Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/f5e01d0d267125a0097484d2dbfc3c4a8747718c.roa
File:                     f5e01d0d267125a0097484d2dbfc3c4a8747718c.roa (raw, json)
Hash identifier:          Z24wU5U+uxt78ebwQglYVM8xDbz6C/wysuEwTdytN+M=
Subject key identifier:   05:3E:03:65:FA:BE:A3:B9:49:9E:BC:61:C3:D7:28:3A:F6:C6:09:A9
Certificate issuer:       /CN=c363ae69fd41f81cec9a0c658bea62a73a88d046
Certificate serial:       11FBAF
Authority key identifier: 16:03:D1:19:AC:15:68:FA:C4:55:92:9F:B6:91:37:09:21:59:D2:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c363ae69fd41f81cec9a0c658bea62a73a88d046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/f5e01d0d267125a0097484d2dbfc3c4a8747718c.roa
Signing time:             Sat 13 Apr 2024 08:30:00 +0000
ROA not before:           Sat 13 Apr 2024 08:30:00 +0000
ROA not after:            Mon 13 Apr 2026 08:30:00 +0000
asID:                     272124
IP address blocks:        2803:ef10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178543 (0x11fbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c363ae69fd41f81cec9a0c658bea62a73a88d046
        Validity
            Not Before: Apr 13 08:30:00 2024 GMT
            Not After : Apr 13 08:30:00 2026 GMT
        Subject: CN=f5e01d0d267125a0097484d2dbfc3c4a8747718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:6b:bf:d1:04:de:70:2f:6d:dc:f1:63:7d:
                    15:e1:fa:78:be:54:9f:f1:b3:7b:88:7b:d7:21:6f:
                    5d:7e:62:94:14:67:87:ca:a5:68:4e:ee:19:3b:21:
                    cb:99:fd:f8:55:f9:16:2b:8d:ff:18:b8:6a:72:46:
                    9e:a1:3b:d0:d3:0e:7a:1a:0f:79:a9:e0:7a:80:16:
                    67:69:36:70:3a:82:30:bb:d3:8f:4f:72:53:65:2d:
                    d1:ca:c7:67:aa:83:16:c3:5e:62:55:c3:d0:27:27:
                    da:63:ec:21:0e:21:04:ab:99:49:c5:f6:6f:7e:cc:
                    38:9e:00:67:f6:0e:d1:de:f2:e6:bd:d5:cf:9e:be:
                    09:48:86:a4:3c:1f:0b:49:b8:ba:b9:05:07:2d:2f:
                    86:85:fc:3c:85:d6:43:9d:a5:bd:92:ba:fd:2d:62:
                    00:74:5f:01:e7:22:a5:e0:b7:dd:12:59:c5:1f:a7:
                    67:0e:d3:09:ad:d9:45:43:b7:d5:31:72:2b:2d:da:
                    43:d3:e6:37:c5:4b:61:ea:63:e7:f4:38:90:24:33:
                    f4:68:0c:42:1c:34:9d:ce:c9:72:29:35:1f:13:36:
                    c2:7a:91:ca:51:b4:96:c9:cf:65:ce:eb:da:80:80:
                    49:6b:28:d2:c7:0f:dd:b4:06:52:97:17:8b:22:1d:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:03:65:FA:BE:A3:B9:49:9E:BC:61:C3:D7:28:3A:F6:C6:09:A9
            X509v3 Authority Key Identifier:
                keyid:16:03:D1:19:AC:15:68:FA:C4:55:92:9F:B6:91:37:09:21:59:D2:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c363ae69fd41f81cec9a0c658bea62a73a88d046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/f5e01d0d267125a0097484d2dbfc3c4a8747718c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e08707a7-ad2c-4d3a-9e42-7764775b9640/c363ae69fd41f81cec9a0c658bea62a73a88d046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef10::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:61:31:e9:d0:09:1e:cf:52:a5:e9:c7:a2:58:68:d2:81:6d:
         36:f5:5e:a5:b1:ee:2c:9f:4a:d7:0d:65:ec:d5:14:e9:aa:df:
         a3:0a:81:ce:88:ea:eb:c9:28:ec:d3:95:95:c2:a7:14:00:f6:
         e9:97:c1:d1:85:34:e6:b9:59:f6:b7:d0:b3:f8:58:da:ac:2f:
         9e:6d:c4:84:f2:98:bd:ca:ea:c7:64:78:6e:4a:4a:c2:93:9b:
         a0:54:93:8c:10:c0:2f:69:73:e9:16:9d:c1:65:ec:3d:92:eb:
         9b:c9:f6:9a:d6:60:11:09:98:55:7a:0a:43:e9:92:a2:d6:fb:
         49:2b:7b:91:82:93:c1:46:f7:97:0b:91:c5:56:f0:8b:46:b5:
         56:52:15:b4:42:53:67:4e:f7:2a:67:b6:6e:41:61:77:9f:fc:
         e8:cd:eb:6d:dd:c0:3e:d5:a8:b3:40:71:d3:da:bb:4a:d9:b4:
         0c:73:0f:60:23:67:b2:df:5d:26:26:ce:3b:32:ab:af:5f:bc:
         87:db:04:fd:c3:4e:de:9c:5f:b3:3c:87:f3:6e:43:9a:7b:3f:
         cd:9c:ec:56:2e:93:91:31:d4:af:dc:ef:19:2b:74:9b:64:5b:
         ac:37:25:24:0f:56:db:ec:57:54:ae:ec:54:2f:5c:5e:62:bc:
         49:a1:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----