Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4bcb2ecd0fa4af84950b8b320a7d7e2123d41b5c.roa
File:                     4bcb2ecd0fa4af84950b8b320a7d7e2123d41b5c.roa (raw, json)
Hash identifier:          YbZq2lWNzl46igDNxkLGdbw2kPTIwcsoWucQvuOfY5I=
Subject key identifier:   5E:16:4C:64:0D:1E:29:E4:DC:5E:DC:30:BE:AC:EE:DB:62:6F:7D:47
Certificate issuer:       /CN=4400957bdc3ae7b6df0217c92317e7b5033daee4
Certificate serial:       04562B
Authority key identifier: AC:04:9B:D8:70:09:31:D8:81:6D:F3:64:21:1B:F0:76:E9:DF:0C:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4400957bdc3ae7b6df0217c92317e7b5033daee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4bcb2ecd0fa4af84950b8b320a7d7e2123d41b5c.roa
Signing time:             Thu 21 Mar 2024 01:00:26 +0000
ROA not before:           Thu 21 Mar 2024 01:00:26 +0000
ROA not after:            Sat 21 Mar 2026 01:00:26 +0000
asID:                     273084
IP address blocks:        2803:5f90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284203 (0x4562b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4400957bdc3ae7b6df0217c92317e7b5033daee4
        Validity
            Not Before: Mar 21 01:00:26 2024 GMT
            Not After : Mar 21 01:00:26 2026 GMT
        Subject: CN=4bcb2ecd0fa4af84950b8b320a7d7e2123d41b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:22:63:04:be:bf:1d:f4:e3:b1:51:92:11:
                    53:d1:91:b4:91:b7:95:f0:de:a7:15:92:9b:8e:8a:
                    3b:7b:30:e1:42:1b:74:09:07:26:38:7e:eb:e9:0d:
                    d7:0d:b1:ae:6b:fa:fd:da:2b:6d:e3:09:d5:4f:9d:
                    b9:08:77:cb:f8:49:35:89:8c:30:7e:16:cc:f2:8e:
                    57:f4:12:f7:63:0c:99:85:27:e3:6d:df:fe:c8:bb:
                    ef:83:86:63:70:71:6d:d0:38:c0:79:06:1b:57:98:
                    87:79:e3:f3:46:33:00:d1:e8:9b:74:7d:da:c4:dc:
                    73:86:60:4e:cb:8e:f8:31:3f:f9:ab:e2:ea:a0:d2:
                    32:0d:08:ee:de:42:0b:c9:62:99:c5:01:33:3a:66:
                    7c:6d:cb:41:2d:2b:51:fc:27:fa:3f:66:84:9d:a9:
                    ea:9b:fc:9a:cf:cd:55:2d:22:b3:39:d7:f9:f1:42:
                    73:41:0c:d0:d0:69:69:7a:8d:18:ad:ac:e2:51:8c:
                    e5:29:b9:99:9f:75:4b:49:ce:f3:d0:19:1c:7e:b0:
                    82:a4:e2:57:dd:4e:4b:c1:00:67:64:16:ef:0f:95:
                    ef:ba:8e:a7:d8:fe:c2:92:5d:ee:13:69:85:a1:be:
                    7e:82:35:78:99:27:6c:68:ab:57:0a:49:d0:44:64:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:16:4C:64:0D:1E:29:E4:DC:5E:DC:30:BE:AC:EE:DB:62:6F:7D:47
            X509v3 Authority Key Identifier:
                keyid:AC:04:9B:D8:70:09:31:D8:81:6D:F3:64:21:1B:F0:76:E9:DF:0C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4400957bdc3ae7b6df0217c92317e7b5033daee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4bcb2ecd0fa4af84950b8b320a7d7e2123d41b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4512004-8974-444d-b8b0-8a81fa0e2d30/4400957bdc3ae7b6df0217c92317e7b5033daee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:88:67:59:94:79:77:cf:05:63:77:68:45:d0:2a:1a:25:2b:
         b4:7e:f0:40:1a:0f:a2:85:f5:45:1a:aa:1f:52:96:0f:a2:7f:
         2a:1d:35:57:ee:6d:0f:81:9b:82:e0:a7:6f:b7:c9:7d:bd:17:
         e4:75:69:b8:0e:4b:f5:dd:26:fd:35:3b:92:93:51:c1:36:28:
         33:ce:c9:bd:1e:e8:cd:81:3f:89:28:a0:f6:f6:be:7a:1e:29:
         65:f2:93:7a:0d:05:38:e5:78:7c:a8:f5:88:e7:90:71:68:7b:
         bf:1b:5e:9b:80:12:7a:27:df:46:93:c9:94:69:1c:f5:8a:5d:
         61:83:64:97:2e:fe:13:b8:74:84:0a:a6:be:ea:e9:3f:d7:89:
         9a:93:4e:6a:91:42:ff:47:5f:f5:00:6e:87:e6:81:3c:0b:3e:
         f9:42:b3:e1:48:dd:3e:16:e1:1b:66:23:85:17:22:3b:92:5c:
         18:2c:59:be:de:54:bf:dd:7d:f3:4a:7a:4a:e8:6b:5b:79:05:
         3c:45:4e:d6:1f:32:fe:37:82:ee:9b:59:ec:23:db:1b:43:43:
         df:8d:56:bb:7f:cb:9f:40:38:09:30:39:09:4d:0b:94:43:69:
         45:dd:d7:a8:4b:50:7d:80:88:ca:ea:bf:cb:fc:9a:45:f4:64:
         6b:79:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----