Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/81099d52cfa9867e7e3a5689212f733578fbd19b.roa
File:                     81099d52cfa9867e7e3a5689212f733578fbd19b.roa (raw, json)
Hash identifier:          zpGE5v4NH1UHD7NUSNbAGT0LdbGOOduyR82GQnAlCPM=
Subject key identifier:   3E:AE:48:32:9A:28:2D:99:89:77:02:3F:0E:BD:97:DA:3E:69:7E:99
Certificate issuer:       /CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Certificate serial:       0CF75F
Authority key identifier: BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/81099d52cfa9867e7e3a5689212f733578fbd19b.roa
Signing time:             Mon 04 Sep 2023 17:38:11 +0000
ROA not before:           Sun 03 Sep 2023 17:38:11 +0000
ROA not after:            Thu 04 Sep 2025 17:38:11 +0000
asID:                     272026
IP address blocks:        2803:6510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849759 (0xcf75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
        Validity
            Not Before: Sep  3 17:38:11 2023 GMT
            Not After : Sep  4 17:38:11 2025 GMT
        Subject: CN=81099d52cfa9867e7e3a5689212f733578fbd19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:dc:f7:dc:a4:1f:c8:8e:f6:c6:b9:db:a2:
                    37:79:4e:29:48:99:aa:43:86:9b:6b:13:f6:f1:97:
                    30:8a:85:72:66:24:f8:b5:fd:b3:0f:cf:b1:03:9e:
                    36:df:e6:e6:2c:37:c6:cd:3d:5a:75:bf:60:8d:ff:
                    b0:d7:69:9c:99:ac:54:49:0d:5f:55:22:2e:e8:d0:
                    c1:87:33:2b:fc:39:eb:e9:38:6b:0f:f5:fe:75:f5:
                    15:19:bc:28:b9:7e:bd:9f:6f:3e:ad:47:4c:06:3f:
                    59:5e:b7:48:27:7f:a7:4f:95:1f:d5:c7:ef:d8:84:
                    be:ff:51:1c:33:9c:e4:08:65:9f:e6:04:7a:ae:3a:
                    0c:20:3c:4c:24:7a:8b:0f:bb:bd:c4:20:31:c9:f7:
                    f9:00:7e:a7:88:8a:2f:1d:96:07:d7:3f:3d:28:c3:
                    0c:c0:fc:cc:d6:fd:bd:94:55:5a:65:85:9c:24:0b:
                    2c:ff:34:48:61:8a:f3:5f:ab:cd:2e:20:b5:03:1b:
                    1f:83:d8:f5:1d:d3:41:c1:b3:a4:8b:71:15:87:d9:
                    f1:0d:a6:84:e0:c6:3f:3e:b6:2d:6d:62:04:97:ad:
                    14:f2:54:f6:05:30:b8:c6:1d:b2:e9:46:71:04:21:
                    66:5c:72:cb:20:b9:8d:0f:fb:5f:9c:de:de:5c:ff:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:48:32:9A:28:2D:99:89:77:02:3F:0E:BD:97:DA:3E:69:7E:99
            X509v3 Authority Key Identifier:
                keyid:BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/81099d52cfa9867e7e3a5689212f733578fbd19b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:27:e7:f0:4d:63:aa:b6:90:84:1c:11:83:96:05:c1:e6:18:
         3f:e9:36:b3:0f:f7:1b:38:96:2f:82:78:97:ee:9a:e9:6c:5e:
         54:93:85:5a:63:69:bb:5c:cb:d8:aa:ab:9c:28:63:b4:2e:86:
         d2:7d:95:b4:a5:a9:bd:02:8e:42:72:a5:9e:86:2f:f6:55:0a:
         8c:14:b8:8f:d8:58:bb:8d:9a:df:a6:5a:a1:ca:7b:f2:cb:be:
         83:5b:a8:b1:37:ee:47:06:b0:f9:53:98:f3:ad:d0:cc:8b:df:
         df:0b:df:3a:d6:52:42:74:f5:04:88:59:35:70:5e:cd:ad:e7:
         f5:b2:85:92:ab:00:cc:0d:a0:75:61:9f:c5:0f:38:af:49:82:
         5d:82:e9:30:10:19:20:db:5e:e2:cb:68:c2:e1:0d:6f:f4:9a:
         a8:fd:af:73:12:00:df:5d:4b:c7:22:36:5b:39:9c:be:a7:d9:
         3d:da:41:85:77:ad:b1:29:e1:80:65:ea:8a:8b:1f:33:52:f0:
         08:12:9c:78:83:67:1f:f4:6e:05:18:97:e6:49:93:46:39:20:
         01:90:3d:cd:e1:38:77:05:89:68:29:d7:8b:24:ef:9a:80:0d:
         84:6e:96:74:9f:51:46:c2:46:6a:ef:11:10:6a:84:a2:46:ce:
         59:72:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----