Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/9c30585b0e6c21f05d62e1a8e902a1b4fdbf6dd5.roa
File:                     9c30585b0e6c21f05d62e1a8e902a1b4fdbf6dd5.roa (raw, json)
Hash identifier:          IKbx1+qhisTJE36FYtaNyJFjQXl09hNsyCnIrnKYq80=
Subject key identifier:   10:13:17:A8:DE:13:8A:49:C7:67:AE:AB:27:44:3C:ED:76:34:1E:EC
Certificate issuer:       /CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
Certificate serial:       09E8E5
Authority key identifier: 27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/9c30585b0e6c21f05d62e1a8e902a1b4fdbf6dd5.roa
Signing time:             Sun 17 Sep 2023 16:13:00 +0000
ROA not before:           Sat 16 Sep 2023 16:13:00 +0000
ROA not after:            Wed 17 Sep 2025 16:13:00 +0000
asID:                     272822
IP address blocks:        2803:1490::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649445 (0x9e8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
        Validity
            Not Before: Sep 16 16:13:00 2023 GMT
            Not After : Sep 17 16:13:00 2025 GMT
        Subject: CN=9c30585b0e6c21f05d62e1a8e902a1b4fdbf6dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:32:ec:6e:0a:c3:f7:59:25:de:47:68:d4:
                    9f:84:c8:29:7b:8d:71:64:92:65:3b:58:44:a4:b0:
                    28:b6:f8:35:07:3a:79:da:99:0e:a5:87:f2:d4:08:
                    27:27:8e:5e:cf:b4:d2:bf:ed:68:de:e9:cb:50:0f:
                    f7:af:44:01:9f:1a:62:49:97:1b:7c:96:e4:64:91:
                    60:10:34:c1:49:e4:84:91:fa:65:45:a2:dd:59:3d:
                    a4:d6:0c:63:84:f3:d6:93:bb:f7:45:45:19:18:54:
                    b9:c5:35:af:8e:40:a0:01:d0:d3:48:f7:7e:dd:4e:
                    71:41:d9:34:6c:97:35:d2:95:a6:f0:18:d1:ef:7e:
                    6d:be:bd:83:ff:a3:81:52:b6:69:5d:23:dc:f9:3a:
                    14:f2:56:10:ce:4c:5c:2e:73:01:c3:20:f5:47:bd:
                    52:2a:8b:e7:d2:14:2e:62:a0:47:29:98:c7:07:7c:
                    8b:9c:a7:09:5b:31:a7:b6:03:33:78:69:73:1a:b8:
                    6c:4c:d0:f7:88:cb:fd:81:1a:08:75:38:d5:5d:35:
                    15:30:f0:2c:97:e3:7d:76:a4:bf:ad:38:69:14:f6:
                    81:34:7f:75:31:0f:5a:91:b2:57:68:79:09:7c:6c:
                    c7:0e:16:9b:bd:8f:c7:0a:c8:69:c7:3e:51:e0:d2:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:17:A8:DE:13:8A:49:C7:67:AE:AB:27:44:3C:ED:76:34:1E:EC
            X509v3 Authority Key Identifier:
                keyid:27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/9c30585b0e6c21f05d62e1a8e902a1b4fdbf6dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:48:5f:d4:54:45:8d:57:15:d2:65:3c:fb:a8:dc:9d:fb:
         ae:5a:3b:c6:ac:87:0f:c7:ed:aa:88:cd:9c:99:c0:ab:50:ca:
         f0:99:24:7a:ff:78:5e:28:99:33:4f:9f:25:03:5c:64:a0:1c:
         18:43:1c:6b:35:2c:c3:57:4d:59:18:2a:85:f2:49:6a:88:b0:
         c5:56:33:49:24:9c:f7:ea:fe:a6:34:b3:89:09:ba:70:2d:af:
         76:fc:48:54:4c:96:30:d7:0e:4a:d1:e6:9c:3d:19:6b:67:c2:
         f6:6d:5f:90:f9:7a:4d:1a:3c:18:4f:7b:a5:cb:7f:9d:9c:06:
         09:1c:c8:ef:9c:6b:3a:88:cf:9e:2b:b1:76:79:0b:b4:0f:8d:
         98:b4:3a:1c:88:1d:84:e1:0a:aa:15:9a:fe:98:1b:56:24:3a:
         f6:9b:d5:59:6c:2f:de:ab:a5:5d:4c:04:d8:a6:48:8f:03:12:
         1b:ae:d8:65:6e:3a:b2:c0:24:12:7a:c6:87:0b:a8:2b:4d:23:
         f6:1d:b7:f3:98:77:3d:94:a4:0a:be:72:15:34:6a:99:88:e2:
         ae:06:72:ab:49:b3:a6:95:72:fe:ab:b9:44:15:14:fb:d4:c7:
         15:60:38:97:5d:9b:90:8a:31:62:31:99:f9:5c:8a:b5:e6:8c:
         d2:15:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----