Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dd16ca7313189e5542491ea0d87a345bc38e2f62.roa
File:                     dd16ca7313189e5542491ea0d87a345bc38e2f62.roa (raw, json)
Hash identifier:          qyC3dkCOp+uBscLXLPY7Da91FoOnBaVqRJXwLrXZc6I=
Subject key identifier:   EB:F4:34:7C:5F:3C:DA:CD:2F:B2:DA:C7:06:B6:6C:6E:14:61:A1:16
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C1BAE
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dd16ca7313189e5542491ea0d87a345bc38e2f62.roa
Signing time:             Thu 05 Oct 2023 10:10:19 +0000
ROA not before:           Wed 04 Oct 2023 10:10:19 +0000
ROA not after:            Sun 05 Oct 2025 10:10:19 +0000
asID:                     272150
IP address blocks:        2803:6020::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793518 (0xc1bae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 10:10:19 2023 GMT
            Not After : Oct  5 10:10:19 2025 GMT
        Subject: CN=dd16ca7313189e5542491ea0d87a345bc38e2f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:b0:16:85:2f:57:db:86:1f:2f:89:5f:13:
                    5c:8a:97:43:36:5c:83:74:0f:ee:83:e2:2f:31:f9:
                    81:b9:7f:92:8f:5d:f4:c9:ee:3c:94:d7:ee:d6:94:
                    73:07:93:99:a1:dc:ab:85:af:da:6d:71:98:10:3c:
                    53:00:5a:06:3e:b2:3d:98:91:6a:ec:42:8c:38:aa:
                    32:c0:d1:76:23:d1:70:71:16:0f:a1:6f:a9:bc:d2:
                    72:43:0e:c8:07:20:df:1c:aa:74:fb:00:28:83:c3:
                    6f:6b:9f:e9:a3:5d:07:ac:df:8a:9d:23:60:7c:5d:
                    f4:fa:52:67:03:3e:ab:27:70:b6:1f:b5:72:d8:89:
                    18:f4:4d:b1:71:e5:45:e0:11:e1:9b:94:1f:7a:4e:
                    67:9a:a7:cc:aa:39:5b:5f:50:65:8a:68:ca:ff:de:
                    81:d6:ac:9d:4f:fe:85:a7:f3:9e:6c:30:06:4e:34:
                    1d:38:88:cb:b2:83:98:b2:5e:66:78:16:fc:2b:40:
                    2a:a3:b2:2b:03:7c:d0:ff:f6:97:1f:55:69:38:63:
                    ec:6f:87:28:f7:61:fd:6c:27:af:94:80:b1:f1:42:
                    57:73:7b:4c:c1:fd:eb:58:c2:07:e0:74:ea:32:cf:
                    49:cd:40:b0:0f:e8:f0:bc:8e:69:b5:2e:00:7e:e3:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:34:7C:5F:3C:DA:CD:2F:B2:DA:C7:06:B6:6C:6E:14:61:A1:16
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dd16ca7313189e5542491ea0d87a345bc38e2f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:94:b0:d6:2c:53:be:90:28:85:6b:04:9d:9f:f1:ec:ac:0c:
         12:ff:14:ac:91:af:01:84:59:dc:3a:17:81:30:f4:ad:03:64:
         70:ec:64:99:c4:56:64:1a:26:1b:b4:50:28:65:ba:a7:80:46:
         b0:3b:df:d7:58:35:27:51:4a:e4:1d:27:05:97:c7:7f:9a:f0:
         78:00:91:07:56:41:6c:5c:5d:52:b4:27:93:99:cd:61:05:d4:
         62:11:3d:c2:f4:dd:59:65:a0:5d:e5:a4:fe:68:7e:22:15:61:
         db:f2:37:71:74:a9:c7:77:66:ec:58:af:f9:66:6f:bc:9b:5b:
         54:0b:51:c7:66:85:46:2f:bb:75:ec:4d:57:da:f9:ed:a9:07:
         2a:30:67:5d:c3:f9:ae:de:52:e9:49:ea:e4:2c:ea:8f:b3:d6:
         fe:ca:90:f9:68:e3:64:6e:e3:de:5a:9b:ca:93:3e:cb:98:d2:
         f7:93:9d:da:ad:d9:ff:0b:b7:b8:17:5d:84:6c:a5:2a:a7:da:
         90:92:25:c0:16:8c:f9:0d:f5:76:95:ec:9d:76:2e:56:93:d6:
         15:0e:c5:31:fd:17:7e:37:f6:a4:b4:78:92:ba:c9:9c:4c:59:
         b4:6c:2c:da:b0:a4:be:e1:ca:f6:ac:20:c7:b9:2e:7c:72:6e:
         c5:2c:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----