Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/86e90ff40c19d41530b0e90bcfc95cb007d89f2f.roa
File:                     86e90ff40c19d41530b0e90bcfc95cb007d89f2f.roa (raw, json)
Hash identifier:          /GlYxe0dAHba9ODVWseDm8Ym+rQiw0nCUUfyfvsu27k=
Subject key identifier:   F9:54:62:BF:10:67:EC:E5:1C:7B:FB:3E:E8:18:71:82:AB:94:77:AB
Certificate issuer:       /CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
Certificate serial:       03B7EE
Authority key identifier: 19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/86e90ff40c19d41530b0e90bcfc95cb007d89f2f.roa
Signing time:             Fri 27 Jan 2023 08:16:55 +0000
ROA not before:           Thu 26 Jan 2023 08:16:15 +0000
ROA not after:            Mon 27 Jan 2025 08:16:15 +0000
asID:                     14080
IP address blocks:        2803:a810:404::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243694 (0x3b7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
        Validity
            Not Before: Jan 26 08:16:15 2023 GMT
            Not After : Jan 27 08:16:15 2025 GMT
        Subject: CN=86e90ff40c19d41530b0e90bcfc95cb007d89f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:e8:0e:61:97:36:3e:10:f6:18:82:14:86:
                    21:b6:75:9f:1e:b0:42:e4:3d:4a:44:80:f6:84:b9:
                    8e:a3:c2:5e:13:ff:25:db:ef:46:a4:0e:36:5f:a8:
                    a0:6f:c5:a3:94:bd:0e:a5:f0:a0:08:8c:67:07:13:
                    b2:92:0e:b6:d2:fa:15:39:32:27:83:ba:d8:0a:9f:
                    85:61:67:c9:f6:cd:86:41:89:6b:bf:3a:f6:bf:d2:
                    94:e5:d9:32:49:38:95:24:b2:ae:ce:54:25:0f:03:
                    1a:8d:2a:0c:b8:4c:ea:09:26:14:6f:22:29:65:70:
                    c8:33:31:f8:19:0f:1f:de:3b:98:76:b9:3c:55:a7:
                    fc:12:aa:d8:b8:10:b5:35:03:84:18:ec:56:6e:e6:
                    91:7d:07:26:5b:52:09:08:c1:cd:8a:29:fa:41:f9:
                    c6:f7:dd:e1:09:a8:1c:52:73:ac:b3:74:46:25:c6:
                    9e:16:12:47:74:3a:36:ec:aa:54:26:72:35:57:d7:
                    fa:16:72:9d:57:b4:16:7c:68:da:bc:ef:da:36:31:
                    5b:34:72:b3:54:cb:3e:da:1f:ed:55:de:78:89:c1:
                    5f:06:2f:aa:19:1a:d9:f2:8f:97:15:17:f4:44:0c:
                    7f:50:85:87:54:24:96:68:2a:b8:89:4e:13:65:40:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:62:BF:10:67:EC:E5:1C:7B:FB:3E:E8:18:71:82:AB:94:77:AB
            X509v3 Authority Key Identifier:
                keyid:19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/86e90ff40c19d41530b0e90bcfc95cb007d89f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:404::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:52:34:48:2f:93:6e:27:fc:17:3e:fa:db:9d:eb:44:79:a9:
         0b:ab:ea:56:c9:b6:e9:55:9f:52:26:07:49:fe:8e:06:88:7e:
         70:9c:30:d4:87:2c:c3:5e:d4:56:30:ee:ed:17:55:0f:04:92:
         a8:0f:00:21:92:62:ba:78:b0:51:2a:5a:a4:e1:5f:50:12:22:
         5e:9e:29:32:d4:9a:04:01:b5:8c:3a:e5:a9:bb:3a:96:27:0e:
         ec:55:2a:97:c6:4d:12:bf:76:38:5b:09:be:f5:dc:0d:e1:49:
         ef:0e:fb:0a:1d:07:37:5e:5c:29:46:a6:56:ad:c2:db:bc:d4:
         ca:4b:08:66:c1:79:21:f6:86:16:c4:6e:63:d2:a3:e5:3e:2c:
         a3:a8:f5:3b:4d:cf:ab:70:af:01:1d:07:7a:a6:8f:a0:e9:82:
         64:1a:6a:39:0d:fd:71:45:eb:82:d3:0a:14:0b:e9:ba:a1:cd:
         a4:e2:52:69:48:22:0e:c5:42:36:b1:fb:2b:1a:d9:d2:7b:b1:
         70:e9:e5:6a:59:80:06:99:e6:4e:70:38:4d:b4:bb:67:4f:7b:
         8f:30:e6:b2:c9:d3:c6:95:a2:e3:36:90:f8:04:05:ad:14:32:
         0f:93:c4:83:91:04:91:8f:ba:63:3d:fd:c2:b8:84:de:b7:40:
         df:87:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----