Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2e65e59aa5bea6453539940ff4e8197301acf7b2.roa
File:                     2e65e59aa5bea6453539940ff4e8197301acf7b2.roa (raw, json)
Hash identifier:          6Uq5EkEkl2X6N69MxAn3WJX0QiBpC+4e+J7CwH+BCy8=
Subject key identifier:   B7:38:65:D6:10:6E:47:AF:F1:72:91:7B:47:15:78:39:91:85:BB:35
Certificate issuer:       /CN=5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc
Certificate serial:       10981E
Authority key identifier: 59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2e65e59aa5bea6453539940ff4e8197301acf7b2.roa
Signing time:             Thu 05 Oct 2023 20:03:45 +0000
ROA not before:           Wed 04 Oct 2023 20:03:45 +0000
ROA not after:            Sun 05 Oct 2025 20:03:45 +0000
asID:                     271942
IP address blocks:        2803:2610:1::/48 maxlen: 48
                          2803:2610:2::/47 maxlen: 48
                          2803:2610:4::/46 maxlen: 48
                          2803:2610:8::/47 maxlen: 48
                          2803:2610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087518 (0x10981e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc
        Validity
            Not Before: Oct  4 20:03:45 2023 GMT
            Not After : Oct  5 20:03:45 2025 GMT
        Subject: CN=2e65e59aa5bea6453539940ff4e8197301acf7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:c1:93:47:ac:fd:af:8c:15:4d:6b:5c:c8:
                    cb:0b:b5:bf:24:4c:9e:b9:76:eb:39:c7:2d:5b:41:
                    fd:d8:82:cc:79:81:7b:bd:3e:10:23:09:b6:8e:85:
                    1a:10:f2:bc:65:3a:cd:64:7d:27:f9:ad:49:f6:d0:
                    d0:de:43:8f:b4:b7:df:8f:86:e9:5f:c9:d8:b3:3e:
                    53:b4:05:a4:51:b6:bd:d8:5b:1d:c4:ef:f1:25:8b:
                    a9:4f:f0:9f:eb:86:6c:d0:71:3d:ef:c1:5d:be:c5:
                    25:84:70:57:a9:01:3d:36:59:3f:f1:a4:8e:37:37:
                    58:68:8a:7f:44:df:c1:f8:b4:04:71:a1:44:a8:75:
                    11:2b:72:7c:39:40:fc:81:2f:74:33:94:d5:e7:73:
                    1d:3d:dd:b2:1d:fe:24:06:46:dd:c8:0d:7a:92:49:
                    18:72:2c:1d:93:45:39:78:75:66:d3:9c:15:2e:6f:
                    c8:ad:7d:49:75:de:59:65:42:de:f9:11:b5:7c:67:
                    d6:47:6d:cb:f4:fd:cd:7c:19:a9:af:d0:57:e4:d0:
                    fd:ce:9b:77:ca:72:8e:65:01:34:37:d7:87:fb:6a:
                    1b:98:f9:2d:38:21:1c:7d:aa:8a:50:18:d7:e2:e3:
                    37:8f:26:c5:27:69:4b:d4:8a:e4:f9:4b:95:28:9e:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:65:D6:10:6E:47:AF:F1:72:91:7B:47:15:78:39:91:85:BB:35
            X509v3 Authority Key Identifier:
                keyid:59:E8:32:23:A7:50:DD:19:83:C3:4A:0A:FE:10:B3:74:57:9A:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/2e65e59aa5bea6453539940ff4e8197301acf7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb0770c-8ffb-4439-a93c-b54afe4aa523/5b892695940fa2fcdfcc7c7ecc23aaa09052bfcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:db:49:65:e8:39:e8:70:22:c9:60:29:2b:f0:b0:14:3f:cc:
         28:ff:ae:c0:d5:53:2f:6e:da:24:1a:ca:43:3c:1f:fd:e9:4a:
         e0:ed:27:84:b8:ae:09:b4:8c:5c:96:0a:6a:23:60:65:a7:be:
         13:77:7f:43:cb:83:ad:81:6e:63:04:1b:c9:a6:88:e6:ec:92:
         66:49:de:7c:ec:0e:70:de:76:62:cc:05:68:49:d6:56:87:fb:
         6f:ec:6b:43:a6:88:cf:b5:a9:32:ac:eb:32:a6:0f:6f:0e:b5:
         ef:d4:c2:c3:7f:50:ac:c5:83:9c:be:13:85:ed:df:0c:c6:54:
         12:3f:a4:ce:50:fe:e0:21:50:20:b2:58:ca:13:0d:77:b0:27:
         05:9f:f1:09:81:32:b1:5e:0a:22:bf:c9:fc:a6:e4:f1:fb:a1:
         44:34:37:a5:2b:e7:ef:e7:9f:6b:5d:87:48:99:bf:9c:92:a9:
         b2:e4:20:81:be:3a:96:09:b4:63:c6:3e:db:6e:a6:56:ac:99:
         81:21:3a:dd:91:e0:77:d5:17:69:0a:70:e5:45:39:cb:45:fb:
         aa:1f:26:e7:91:4b:67:da:07:56:57:c6:6b:15:c3:83:ad:9f:
         1e:28:66:cc:7a:76:4f:d2:f8:79:85:7d:04:16:58:a2:6a:1a:
         64:29:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----