Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/782b371bcb91ab634ca5b6a15625f12dccdba62d.roa
File:                     782b371bcb91ab634ca5b6a15625f12dccdba62d.roa (raw, json)
Hash identifier:          k/xwCTRcap5YwC1UNJidoD8TnSRmaj6nNjf9H5QYzuM=
Subject key identifier:   CA:E8:BE:9F:8F:E8:55:92:92:73:B6:6D:C3:18:98:8B:A5:40:EC:C7
Certificate issuer:       /CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Certificate serial:       2538A4
Authority key identifier: 05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/782b371bcb91ab634ca5b6a15625f12dccdba62d.roa
Signing time:             Fri 23 Feb 2024 08:01:00 +0000
ROA not before:           Fri 23 Feb 2024 08:01:00 +0000
ROA not after:            Mon 23 Feb 2026 08:01:00 +0000
asID:                     269842
IP address blocks:        2803:ff60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439332 (0x2538a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
        Validity
            Not Before: Feb 23 08:01:00 2024 GMT
            Not After : Feb 23 08:01:00 2026 GMT
        Subject: CN=782b371bcb91ab634ca5b6a15625f12dccdba62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:01:98:9b:62:b7:17:17:17:16:a3:05:27:2d:
                    2e:f4:64:4e:0b:06:e1:91:ab:e4:dd:31:14:00:a2:
                    75:1d:79:a4:e5:41:bd:bc:d8:f7:a9:96:a3:63:d1:
                    e2:b2:b9:ee:d1:45:48:e2:3e:50:39:ae:06:5e:81:
                    05:bd:3d:fc:cc:5f:ea:bf:8c:49:e9:be:d9:d7:84:
                    d3:fd:43:a8:17:f5:dc:10:74:20:57:31:b6:cc:eb:
                    c0:67:6c:72:ad:f6:e5:86:3e:e2:7e:be:39:1c:ee:
                    4a:0e:ab:00:f2:59:96:89:4d:64:23:ae:a8:a1:5c:
                    42:1c:13:0e:4a:43:be:5a:5d:88:17:b1:cd:10:3e:
                    7d:3d:43:89:d0:c6:41:40:bd:ec:5b:c1:d6:e3:04:
                    aa:c2:76:57:f6:d0:45:5d:5a:ac:0c:1b:77:a3:68:
                    d9:a6:09:f1:3f:82:cf:fd:2f:48:55:6b:08:53:c5:
                    79:62:9a:23:98:9d:63:71:ac:8b:87:36:f4:60:2c:
                    e7:b1:d0:44:53:1c:82:f2:6e:4d:46:6d:25:be:3a:
                    ef:2f:8d:f8:19:c4:44:80:82:b4:44:e7:f5:bf:38:
                    96:20:27:5a:b2:f4:db:88:db:12:b3:f3:cd:e7:ff:
                    22:c5:f7:4b:f3:93:4a:de:f7:95:60:45:90:a9:c6:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E8:BE:9F:8F:E8:55:92:92:73:B6:6D:C3:18:98:8B:A5:40:EC:C7
            X509v3 Authority Key Identifier:
                keyid:05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/782b371bcb91ab634ca5b6a15625f12dccdba62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff60::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:99:3a:e3:a3:3e:e1:47:ed:28:f7:55:11:2f:5c:c9:7b:
         1a:a1:b0:64:4e:0f:94:fb:9d:65:34:54:79:9a:87:63:da:84:
         c1:e2:4d:f3:91:ca:02:20:ae:11:d8:d8:2e:ad:0b:b5:3a:69:
         3e:ce:9b:b9:c9:0c:ff:ef:cf:7f:42:9f:11:07:94:6f:18:2a:
         bd:31:2c:4e:20:06:9e:50:fe:89:2c:62:4e:8d:f9:a7:26:9b:
         a0:62:c7:a2:32:a2:59:bd:6c:b8:d9:75:34:2d:36:61:8a:b6:
         f6:ae:a7:1b:78:6e:31:00:4a:10:d1:b0:12:7c:f0:91:49:28:
         9e:e9:22:49:eb:05:24:e5:04:d2:ad:28:43:8b:a9:10:06:dc:
         fd:c9:2b:71:84:9d:00:08:fa:95:08:81:04:c7:03:e4:a3:c4:
         7c:07:ce:ce:6f:5e:05:31:d1:f6:81:10:99:9e:63:ae:05:8f:
         f8:ad:d9:06:f8:e4:9e:22:2e:c4:20:9a:ff:c5:f6:6c:df:c4:
         f5:c2:fd:a8:83:d1:02:55:8e:2f:d5:e2:55:a0:ca:c5:82:2e:
         f4:88:48:d3:34:3f:a9:17:12:72:26:8a:aa:e5:cd:a3:27:db:
         7a:eb:86:84:72:f3:1a:24:d8:94:3d:e2:76:a1:dd:dc:f1:c4:
         00:28:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----