Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/dc8d3d0089148a85bd95fbb58385f7761db03cf2.roa
File:                     dc8d3d0089148a85bd95fbb58385f7761db03cf2.roa (raw, json)
Hash identifier:          C6Ym4wk+D7/6rof50ZPhQi4Lekt/yoDrOCMwC3qioDY=
Subject key identifier:   12:30:61:B5:09:33:38:16:AA:D4:EC:8D:B4:3A:BB:31:45:FA:6E:56
Certificate issuer:       /CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
Certificate serial:       17DB49
Authority key identifier: 6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/dc8d3d0089148a85bd95fbb58385f7761db03cf2.roa
Signing time:             Tue 14 Nov 2023 21:34:23 +0000
ROA not before:           Tue 14 Nov 2023 21:34:23 +0000
ROA not after:            Fri 14 Nov 2025 21:34:23 +0000
asID:                     269986
IP address blocks:        2803:5ee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563465 (0x17db49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
        Validity
            Not Before: Nov 14 21:34:23 2023 GMT
            Not After : Nov 14 21:34:23 2025 GMT
        Subject: CN=dc8d3d0089148a85bd95fbb58385f7761db03cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:da:35:ab:05:ed:9e:1a:b2:b7:36:e1:fe:
                    26:d3:f6:03:e0:ce:c0:04:75:fc:56:10:cf:cb:76:
                    eb:4e:54:21:d1:a9:7b:ca:99:dc:82:20:7c:17:2a:
                    de:06:1c:fc:f3:e0:59:21:6e:f2:b3:b8:bb:96:d1:
                    b7:4d:61:47:68:a1:e3:d6:ac:1b:1d:f9:0c:7d:fa:
                    22:ee:85:22:8b:d3:f3:7c:4a:05:89:62:87:26:72:
                    07:2b:fa:08:3a:9c:c8:ad:04:af:6e:7c:a4:f5:21:
                    8b:66:c9:c4:95:1e:f9:a2:eb:bf:8e:69:8a:9f:08:
                    d5:b8:9e:02:e1:a7:0f:75:d6:1c:a7:3a:ca:6d:6c:
                    7a:f5:b6:02:62:71:0d:69:d9:69:e8:85:03:08:7f:
                    3c:b4:03:73:8d:6d:c3:d1:7f:2b:e7:a6:eb:f1:06:
                    69:3a:ab:bb:84:60:3f:57:3f:78:0e:77:fd:14:14:
                    c1:2f:b9:23:84:5d:cb:27:4e:fe:36:41:8d:07:89:
                    2d:3d:ed:37:f0:3e:ca:cb:7f:9a:ee:98:b0:ed:57:
                    51:ba:21:c1:56:f8:4d:21:9b:fc:a3:5b:2d:9f:5d:
                    0e:b4:73:92:48:26:17:aa:85:a2:9f:4d:a5:09:b6:
                    e2:83:c0:5c:fb:c8:42:54:96:e6:76:46:d9:79:c8:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:30:61:B5:09:33:38:16:AA:D4:EC:8D:B4:3A:BB:31:45:FA:6E:56
            X509v3 Authority Key Identifier:
                keyid:6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/dc8d3d0089148a85bd95fbb58385f7761db03cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:cc:64:6a:14:36:24:a1:13:74:5a:d6:6b:55:33:44:f3:
         a0:d8:c0:5f:79:b8:ea:37:e3:a2:16:9d:30:f3:c3:40:b1:1b:
         53:4a:aa:05:25:8d:09:18:18:e0:e2:d8:a9:29:79:3b:d8:bb:
         14:5e:9a:d4:74:c9:13:ef:5c:01:68:23:70:d6:8a:95:15:99:
         28:cd:2e:92:a9:73:65:f6:d8:20:10:19:f2:36:86:07:f1:3e:
         89:fa:6d:32:9e:e6:e8:62:81:0a:7b:32:6d:ac:89:cf:a2:a5:
         0a:b9:95:ec:a5:77:d3:cb:11:9f:6f:cd:11:67:be:37:e2:9d:
         cf:4c:b6:e2:e0:3f:cb:60:1f:30:72:35:f3:36:94:b0:b8:9e:
         48:a8:4e:1b:8e:80:64:43:5b:fa:3f:66:0a:cf:97:31:90:f9:
         2c:f9:7f:52:ec:b6:55:8c:48:01:11:dd:74:4f:62:d3:c4:f1:
         39:ee:22:9d:b0:a8:fb:ea:a7:0d:63:c0:5c:2b:81:08:f6:d5:
         64:b0:7c:c8:8e:48:6a:da:83:c4:21:ac:0f:10:a9:39:3d:e2:
         70:f4:84:d0:7c:30:60:e2:4b:ee:58:14:96:29:26:c3:61:d3:
         a6:92:0d:7c:10:e6:d9:8f:6b:37:5b:4c:55:f5:cc:03:13:ae:
         5d:e9:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----