Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/64b84bb714b7843507cea73766505540c3026c53.roa
File:                     64b84bb714b7843507cea73766505540c3026c53.roa (raw, json)
Hash identifier:          Xdkc0mgLKer3CBgYZafCtqnbgnVOj8teRx6K4IebheA=
Subject key identifier:   12:83:ED:0F:4D:76:2E:02:A2:FD:AD:BF:BD:3E:93:20:AB:D1:94:CE
Certificate issuer:       /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial:       282DF0
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/64b84bb714b7843507cea73766505540c3026c53.roa
Signing time:             Fri 12 Apr 2024 16:17:18 +0000
ROA not before:           Fri 12 Apr 2024 16:17:17 +0000
ROA not after:            Sun 12 Apr 2026 16:17:17 +0000
asID:                     262589
IP address blocks:        2803:2640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633200 (0x282df0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
        Validity
            Not Before: Apr 12 16:17:17 2024 GMT
            Not After : Apr 12 16:17:17 2026 GMT
        Subject: CN=64b84bb714b7843507cea73766505540c3026c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:92:b1:e2:19:7a:ef:53:01:78:d0:45:67:
                    24:06:76:a0:b2:65:78:57:09:73:32:85:81:ff:08:
                    71:30:f0:fe:96:07:5e:8a:3b:21:2b:05:7b:5a:3c:
                    40:bd:91:86:f3:54:eb:00:28:5f:ad:93:05:8b:34:
                    50:04:f3:73:81:af:42:1a:0f:07:bb:e8:19:20:50:
                    7c:ef:b8:9b:47:ee:66:67:e5:37:4d:c0:ac:0e:d1:
                    ae:e0:42:3a:25:c9:af:ef:13:95:b9:10:20:71:d6:
                    e2:a3:e3:f0:46:5b:57:a3:9e:a0:23:cb:22:3d:72:
                    5f:61:1c:c6:d8:9d:48:58:d2:4e:a1:65:db:8a:ed:
                    32:c2:52:a6:be:f3:ff:6f:0b:68:05:f5:de:5f:66:
                    8d:d2:c2:da:a8:af:61:ec:ba:4f:98:4d:7d:14:2f:
                    04:cc:9f:0e:a4:19:f9:a7:31:7d:b2:a1:f3:76:94:
                    1f:10:38:a3:dd:5a:e4:03:06:58:30:15:26:39:44:
                    d4:9d:55:0f:2a:ad:32:5a:da:97:82:af:7c:b9:84:
                    e6:b6:f3:7f:5a:65:67:fb:63:4a:6b:3e:87:73:29:
                    9b:b6:4c:10:40:3b:1a:fb:94:85:68:a4:d3:b9:69:
                    38:75:89:f1:63:32:85:43:af:f3:9e:d7:83:79:a9:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:ED:0F:4D:76:2E:02:A2:FD:AD:BF:BD:3E:93:20:AB:D1:94:CE
            X509v3 Authority Key Identifier:
                keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/64b84bb714b7843507cea73766505540c3026c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:20:ff:d0:26:61:14:db:69:60:f2:25:f6:b0:0c:c2:ce:
         d7:81:79:c0:38:34:c7:a6:6d:2f:04:de:50:74:a9:a0:9d:e9:
         21:4e:e1:c6:77:d3:e8:92:e8:26:95:3d:de:05:8a:2d:2e:67:
         a7:0e:7d:86:4d:27:bb:1e:c8:d7:49:29:93:ef:31:b5:f2:e8:
         32:45:be:dd:75:08:db:79:d3:bb:b1:74:c9:90:8a:48:db:e3:
         dc:6c:c7:a5:b3:d3:85:ff:96:8d:90:ec:57:c9:da:9d:2a:65:
         06:bf:a9:8a:38:83:27:28:e2:8e:9a:3b:c8:51:44:cc:a8:34:
         0c:2c:b8:b2:18:17:e9:73:4e:51:8c:cb:d8:70:da:b8:7f:fa:
         67:3c:e6:7b:6b:6f:17:59:8a:86:ea:cf:4d:e6:29:82:e3:61:
         b5:12:de:3b:7c:5f:f4:16:1e:27:54:09:de:7f:60:81:37:08:
         08:65:fa:4a:3f:90:4f:5a:37:b4:24:24:94:e4:96:aa:96:a5:
         2d:7e:88:11:7d:de:74:12:39:9f:5f:56:1f:ab:0f:d5:85:f3:
         9b:b3:ea:34:ba:17:f2:a7:b8:51:ac:7d:d0:84:78:eb:fa:f3:
         0f:a2:4d:fe:9c:98:fe:9b:91:1b:b7:4e:bb:bb:48:53:ff:86:
         84:26:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----