Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/5593f819a6f0ef350de32ff1cddd921247447e5a.roa
File:                     5593f819a6f0ef350de32ff1cddd921247447e5a.roa (raw, json)
Hash identifier:          A6P6TmNzTN1MUwXG25qq4AUXGkT79APMml9QaCw7//o=
Subject key identifier:   04:E8:A0:6F:84:E3:DA:9A:01:FE:D9:C5:F9:B7:91:DF:6D:E3:DF:02
Certificate issuer:       /CN=de0d914e3acec8ecbafe212675f0227f286f21e8
Certificate serial:       24C968
Authority key identifier: E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/5593f819a6f0ef350de32ff1cddd921247447e5a.roa
Signing time:             Mon 11 Dec 2023 18:06:37 +0000
ROA not before:           Mon 11 Dec 2023 18:06:37 +0000
ROA not after:            Thu 11 Dec 2025 18:06:37 +0000
asID:                     267787
IP address blocks:        2803:4fa0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410856 (0x24c968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d914e3acec8ecbafe212675f0227f286f21e8
        Validity
            Not Before: Dec 11 18:06:37 2023 GMT
            Not After : Dec 11 18:06:37 2025 GMT
        Subject: CN=5593f819a6f0ef350de32ff1cddd921247447e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:06:19:15:a7:a5:e7:06:b7:59:51:64:77:
                    83:d6:75:e2:d4:7a:9a:70:b9:3e:91:5b:70:65:bd:
                    12:f8:2e:94:b5:68:65:84:c1:05:0c:7f:48:44:7c:
                    45:0f:da:67:4b:04:b4:c5:30:05:c5:2b:5b:e4:d4:
                    da:5a:20:c1:ce:43:8c:04:dd:0c:0c:76:20:b4:42:
                    dc:74:0a:f3:9c:61:96:c2:13:03:12:4e:df:e1:02:
                    e2:dc:f2:f1:1e:50:3f:7c:2a:64:71:b9:88:e7:d4:
                    a5:23:25:82:30:53:4c:7c:0e:c5:60:c7:bc:d6:22:
                    46:29:dd:0b:5d:d8:5d:73:df:9c:f2:f1:c3:d2:08:
                    18:62:93:12:99:2b:e3:08:86:9d:88:b5:ea:60:ef:
                    b3:5c:d2:66:01:4a:6e:9a:38:c6:5a:75:92:a6:f0:
                    9d:06:56:81:66:a9:86:0e:bf:9c:c2:7f:3a:cb:b4:
                    13:da:95:16:61:0c:3e:0b:91:e7:d9:f4:b1:74:d5:
                    f8:c6:ff:1b:7f:3c:2a:5e:12:8a:c7:eb:56:e7:85:
                    be:48:cc:10:e5:8c:35:d0:9c:61:cd:fc:d1:6c:82:
                    dc:66:a1:d1:4b:ee:b2:4a:23:b9:4b:f6:3d:cd:79:
                    28:14:28:6a:7f:d9:be:7b:b5:c9:b0:25:50:0a:bf:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:A0:6F:84:E3:DA:9A:01:FE:D9:C5:F9:B7:91:DF:6D:E3:DF:02
            X509v3 Authority Key Identifier:
                keyid:E5:FF:64:CE:04:BD:9D:11:03:FA:72:6B:C2:CE:F0:93:C2:73:07:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de0d914e3acec8ecbafe212675f0227f286f21e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/5593f819a6f0ef350de32ff1cddd921247447e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5330f14-0e1f-4134-9869-4be92de8e05e/de0d914e3acec8ecbafe212675f0227f286f21e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:35:d4:33:f0:29:d2:b6:77:69:37:3e:0a:3b:37:8f:d4:
         44:7c:1a:8e:c6:56:60:c1:9e:ca:42:97:a2:6e:e2:9c:c6:87:
         f6:ae:e4:9f:b8:bd:26:54:d8:51:da:d1:b6:1d:1f:5f:59:70:
         38:78:67:ef:60:8d:72:f7:d5:ca:08:92:51:57:e7:6a:76:2d:
         43:6c:7f:5d:77:ac:cd:55:6e:c8:f6:76:db:e2:21:39:08:44:
         5a:05:d7:22:91:e1:88:b8:fb:80:f8:b2:67:c8:7d:d1:7b:04:
         6e:39:ab:06:45:46:b9:52:4f:dc:93:10:4d:40:ed:4c:00:f0:
         cc:ba:4a:cf:a5:00:5d:7b:6f:f4:f8:22:22:8f:d0:49:21:34:
         f9:1c:37:86:eb:ec:08:b3:ba:6e:14:18:5a:12:e5:12:d3:fd:
         d4:09:99:ab:0b:5a:c8:6c:0d:ad:b3:63:2b:c7:46:fa:fb:77:
         ce:da:ed:2d:c2:a5:60:10:e4:6a:65:f4:31:4a:70:ef:e4:49:
         f7:28:ed:3d:92:b9:a3:9b:c2:9f:1a:26:fc:eb:53:03:17:ad:
         a3:eb:ba:6d:c5:c2:dd:5f:60:0c:fa:58:f0:72:ac:01:36:a0:
         31:eb:a8:1b:08:e5:62:a6:34:9b:0b:4d:be:48:04:63:59:c7:
         60:67:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----