Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/ed451e3a5a0e977e6c7c08fbb063b786609c3411.roa
File:                     ed451e3a5a0e977e6c7c08fbb063b786609c3411.roa (raw, json)
Hash identifier:          9swZFernuWTunqT6fDjhJlix+PocXSR4AUv9RbxM+sA=
Subject key identifier:   5C:26:38:19:35:39:C0:F3:71:B3:C6:C6:8E:0F:AB:00:4B:BF:7F:B3
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0F607E
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/ed451e3a5a0e977e6c7c08fbb063b786609c3411.roa
Signing time:             Sun 31 Mar 2024 16:10:16 +0000
ROA not before:           Sun 31 Mar 2024 16:10:16 +0000
ROA not after:            Tue 31 Mar 2026 16:10:16 +0000
asID:                     272812
IP address blocks:        2803:f890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007742 (0xf607e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Mar 31 16:10:16 2024 GMT
            Not After : Mar 31 16:10:16 2026 GMT
        Subject: CN=ed451e3a5a0e977e6c7c08fbb063b786609c3411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:30:44:8d:f1:7a:eb:8a:80:1f:fb:6b:32:
                    cd:02:6e:d5:3b:33:4b:e2:fb:c4:9e:ea:28:46:76:
                    88:6e:9e:8f:2b:a2:15:bd:fb:34:d0:5c:a3:00:bb:
                    8a:17:a0:6f:70:56:67:d6:14:99:19:ac:a0:a2:eb:
                    1a:46:ca:c3:90:9c:35:dd:f5:76:c9:0e:dc:c4:08:
                    eb:8c:73:05:01:df:67:08:9e:5a:43:ab:03:dd:a9:
                    81:a1:11:de:b9:24:9a:04:f1:0e:b4:bc:3a:67:d9:
                    22:10:e6:01:64:36:75:5a:b3:a2:21:2b:82:aa:d9:
                    5b:40:4b:83:e4:f0:f9:49:51:fd:b7:2c:2f:2e:e8:
                    31:87:5a:72:80:21:59:2f:e4:99:ef:0d:61:20:53:
                    b3:35:2d:fc:01:a5:11:5c:c7:1b:bc:03:e4:bb:b8:
                    0d:df:4e:0e:e8:6a:d7:5f:d8:a3:6b:7f:9d:c0:91:
                    81:38:fe:41:c1:36:ed:e3:3a:af:41:98:de:20:1f:
                    f1:2a:60:15:f3:e4:53:88:68:12:50:b4:a0:03:e6:
                    a4:e0:de:2a:fb:7b:74:a7:c8:f2:64:97:d3:08:ce:
                    00:94:ff:48:88:7c:60:29:17:07:4f:8b:e6:5e:0a:
                    bf:74:38:56:54:81:c3:e7:6d:0e:b4:c8:0b:e4:27:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:26:38:19:35:39:C0:F3:71:B3:C6:C6:8E:0F:AB:00:4B:BF:7F:B3
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/ed451e3a5a0e977e6c7c08fbb063b786609c3411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:28:31:35:f6:12:96:b6:14:67:0c:88:14:a5:86:72:a7:
         1b:3f:66:ec:95:de:b3:f0:b9:00:d6:2c:2a:41:ec:76:60:c3:
         71:1b:74:7a:4b:4c:38:60:53:aa:1f:43:2b:59:3b:f8:88:a9:
         e0:78:09:65:41:23:b9:91:1a:2d:ad:79:f6:21:02:43:36:68:
         a6:51:06:03:f0:9b:3f:db:6d:1d:cb:29:99:7d:41:f1:c4:73:
         71:85:77:cc:0d:df:01:8b:a6:e5:8a:4e:0c:51:cc:84:5c:86:
         d3:08:d2:70:24:b2:1e:d4:95:b2:08:73:32:76:50:75:ac:87:
         1b:31:fe:b2:c6:8b:1d:8b:2d:8e:37:c2:03:dd:75:2d:37:b3:
         ee:9e:ec:29:5b:c1:7d:e0:be:b2:df:0c:3e:d7:79:19:63:d4:
         10:5f:a0:5d:e5:fd:f3:e1:ae:aa:3b:90:d2:17:3a:cd:44:58:
         30:8d:9c:14:b1:77:88:f3:b7:51:b7:a8:ab:92:9b:6e:c8:e9:
         74:cd:ff:d2:6c:37:29:0d:8e:25:c9:61:a0:f9:bc:68:69:c9:
         a6:7a:95:d6:c7:9b:30:b8:28:e6:6b:2b:f3:2f:ea:18:e9:02:
         79:7a:95:cc:b1:16:1f:08:dd:db:33:95:aa:aa:89:04:35:2c:
         38:44:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----