Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/9da21ca6bb310b0681e86481f35daae87df6b1a6.roa
File:                     9da21ca6bb310b0681e86481f35daae87df6b1a6.roa (raw, json)
Hash identifier:          V30ihhSYFfFRrEhO9F2KAh9c1EC3ZpmdtpPQWEMPdBE=
Subject key identifier:   47:80:AE:46:02:D9:EB:B8:46:B5:76:96:70:3D:02:25:26:84:D0:85
Certificate issuer:       /CN=96b6385dac5d112ac08ad68e528602afddcc7d04
Certificate serial:       2528DA
Authority key identifier: 05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/9da21ca6bb310b0681e86481f35daae87df6b1a6.roa
Signing time:             Fri 23 Feb 2024 07:56:40 +0000
ROA not before:           Fri 23 Feb 2024 07:56:40 +0000
ROA not after:            Mon 23 Feb 2026 07:56:40 +0000
asID:                     266783
IP address blocks:        2803:ff60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2435290 (0x2528da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b6385dac5d112ac08ad68e528602afddcc7d04
        Validity
            Not Before: Feb 23 07:56:40 2024 GMT
            Not After : Feb 23 07:56:40 2026 GMT
        Subject: CN=9da21ca6bb310b0681e86481f35daae87df6b1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:92:ec:ea:0c:f6:dd:98:b0:27:90:ac:02:61:
                    ca:8f:01:31:49:1d:68:7b:31:b8:43:38:a3:69:a4:
                    71:05:a1:c8:1b:7e:60:25:1e:ae:f7:78:ce:a3:df:
                    46:d0:ea:16:4c:4e:32:52:2e:7c:25:eb:3c:6c:78:
                    f0:ee:fc:29:ce:37:7f:d2:79:19:d6:9b:a0:5b:7f:
                    eb:c0:fa:c9:0d:71:f4:77:6e:27:10:9d:23:40:50:
                    f3:bc:ee:1a:dd:40:6e:17:70:14:e4:0f:86:da:5d:
                    9c:d7:2a:4f:9c:49:18:7a:05:f4:86:70:a7:f4:d8:
                    cf:98:8b:af:76:d4:37:56:5c:fd:14:fa:2c:75:27:
                    2b:0b:e2:17:fb:bd:ed:7a:a2:30:56:fb:26:1a:4c:
                    1e:92:2d:ae:b7:a1:13:31:8a:6a:34:30:cb:45:a4:
                    e6:be:15:d0:9c:75:aa:57:4c:b3:5d:5c:ae:3c:09:
                    a7:0c:7b:62:a7:99:84:c3:ca:d6:27:69:e4:c9:67:
                    47:29:fd:b4:a8:0b:0f:c8:f6:be:be:b4:be:07:c9:
                    7e:39:e4:65:0d:18:14:8e:c9:78:3e:77:54:7f:c2:
                    68:f0:c9:5a:0e:08:ea:11:a9:e3:b9:e8:60:e3:8d:
                    01:96:eb:0e:66:71:06:ac:06:6f:ec:d4:9b:d5:a8:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:AE:46:02:D9:EB:B8:46:B5:76:96:70:3D:02:25:26:84:D0:85
            X509v3 Authority Key Identifier:
                keyid:05:0C:07:7C:9B:CC:2C:E2:AF:AB:41:60:26:63:87:F7:AE:CC:01:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96b6385dac5d112ac08ad68e528602afddcc7d04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/9da21ca6bb310b0681e86481f35daae87df6b1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7cbb791-0118-44a2-942e-8264f6f91496/96b6385dac5d112ac08ad68e528602afddcc7d04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff60::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:08:de:b1:c9:73:d4:bb:82:72:ea:d8:89:61:05:b5:41:f7:
         e3:68:ba:d2:7c:4c:ae:a7:02:e6:36:0c:ce:be:a2:01:63:71:
         96:db:91:fb:4e:8e:4d:64:2e:a3:38:cb:f1:51:56:13:c8:bd:
         0e:25:4e:5d:9d:ac:ed:ef:dd:42:62:9c:66:c1:fb:fe:5f:e7:
         bb:2f:ff:cd:de:0a:e9:31:a8:b3:dd:a9:26:21:db:5d:25:5b:
         af:23:e5:8c:c2:f3:c4:e3:11:4b:1b:f2:c3:b5:a4:2d:35:98:
         69:dc:d8:70:8a:fb:ca:38:90:b6:b4:83:64:49:9c:f9:de:10:
         27:22:d7:97:32:c1:0d:07:af:f1:ff:62:ff:0d:c2:5e:a7:a2:
         fe:f9:a6:a5:92:e3:a5:9c:f3:86:ca:c2:4f:c0:03:04:8d:19:
         1f:e2:53:c0:b2:95:0c:7e:cb:27:ac:7d:3f:f0:0a:62:d3:dc:
         e9:74:e7:1f:3a:44:a9:7b:f8:1c:01:b2:9a:ea:dc:88:1b:71:
         f3:4a:5c:58:d2:a7:3d:98:e1:b4:cc:41:39:f9:b0:68:67:f4:
         29:32:de:74:48:9a:49:06:12:21:2d:6b:55:49:53:31:0f:18:
         d6:c9:e9:da:36:27:89:e5:c2:ae:2b:45:2f:7f:d8:96:35:db:
         3a:2c:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----