Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/41d994b5dce27b0ce47de492a9a93aad2012b03b.roa
File:                     41d994b5dce27b0ce47de492a9a93aad2012b03b.roa (raw, json)
Hash identifier:          dxHcgP5YejP52cdREe9gzWdnsbQpPksqWIrobFFtvSs=
Subject key identifier:   DF:2B:5E:F9:6B:E6:06:6E:AE:83:F2:AC:6A:92:7F:AD:13:AC:C9:B3
Certificate issuer:       /CN=f212dc622881566bdfae962b6246371233dfcd20
Certificate serial:       11B31C
Authority key identifier: 39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/41d994b5dce27b0ce47de492a9a93aad2012b03b.roa
Signing time:             Tue 31 Oct 2023 07:30:01 +0000
ROA not before:           Tue 31 Oct 2023 07:30:01 +0000
ROA not after:            Thu 30 Oct 2025 07:30:01 +0000
asID:                     271996
IP address blocks:        2803:3110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159964 (0x11b31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f212dc622881566bdfae962b6246371233dfcd20
        Validity
            Not Before: Oct 31 07:30:01 2023 GMT
            Not After : Oct 30 07:30:01 2025 GMT
        Subject: CN=41d994b5dce27b0ce47de492a9a93aad2012b03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:30:16:e5:a1:11:c4:4b:6f:41:11:ac:e1:
                    1e:2b:06:ef:56:63:50:af:f1:b1:48:66:2f:96:55:
                    3f:d7:1a:74:c9:1f:08:2a:13:b6:99:a8:c6:c7:18:
                    e6:48:9f:5a:e6:b5:cd:cf:40:63:78:09:ff:98:71:
                    47:cc:4b:08:d6:df:6e:18:e2:ac:09:73:73:86:76:
                    35:ea:27:57:79:f8:72:6a:8a:c1:0f:a2:94:1a:39:
                    73:2a:1f:41:d4:6e:96:04:be:ab:28:22:7f:fa:65:
                    57:a6:6d:1b:d8:97:7b:e7:f5:5c:06:18:cb:b1:29:
                    5f:8e:36:27:c1:34:5a:9d:da:a4:e8:60:d5:59:c7:
                    6c:2e:41:f7:23:b9:2d:65:6c:f8:94:7e:95:4d:ed:
                    66:f0:1e:3f:25:db:66:10:b0:c8:93:98:bb:36:bb:
                    f7:7f:87:41:b3:94:07:50:10:6d:96:17:fc:10:4f:
                    0e:2b:2e:9f:9d:22:b4:69:0a:99:a3:a7:d9:08:26:
                    fb:6c:7d:e6:1d:fa:8a:f6:38:44:27:fe:84:18:b0:
                    a9:29:02:3b:7c:c2:21:40:e0:cd:aa:74:f6:0d:18:
                    f0:43:81:f2:c2:7d:03:6e:6a:80:73:a7:30:33:b0:
                    a0:63:2e:f9:62:df:41:85:4f:dd:9a:55:15:3f:27:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2B:5E:F9:6B:E6:06:6E:AE:83:F2:AC:6A:92:7F:AD:13:AC:C9:B3
            X509v3 Authority Key Identifier:
                keyid:39:4A:E1:0A:B0:2D:99:26:70:DF:4E:9B:77:76:31:4F:0E:E0:A4:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f212dc622881566bdfae962b6246371233dfcd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/41d994b5dce27b0ce47de492a9a93aad2012b03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9639caa-8534-4804-85e1-57993d8b1050/f212dc622881566bdfae962b6246371233dfcd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3110::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:65:23:bb:f4:ef:ad:33:29:68:9d:b1:ef:39:58:9e:aa:33:
         55:7d:a0:b8:75:05:a0:cc:8d:0f:3e:67:30:70:e2:43:1a:ef:
         c1:16:6b:6c:52:b6:68:9d:98:0d:25:cc:21:57:8a:24:f1:f7:
         82:fd:66:eb:06:0f:ef:1a:f3:5b:cb:77:d8:b8:d7:91:19:2d:
         a1:98:5a:79:62:f2:20:74:5e:27:24:bb:63:9f:08:45:05:3a:
         52:c1:7a:28:e0:52:d3:ad:ed:45:62:bf:fa:47:6f:7e:df:2f:
         ee:d3:3b:31:ce:2d:e9:93:79:80:12:4e:5a:19:5e:e8:00:44:
         35:39:14:60:95:f3:01:a0:9c:7e:3b:f9:3c:8a:84:27:86:9f:
         81:29:20:a0:49:de:df:31:50:34:81:cc:81:9e:4f:02:a3:e4:
         18:be:ea:6d:2a:91:e7:7e:50:fb:2c:e6:ae:2a:99:ac:83:08:
         f9:04:4f:9e:f4:3a:0d:60:bc:f4:1e:1b:cb:d4:0a:f9:b4:05:
         24:09:73:e4:8e:0a:e3:10:d5:27:76:02:33:88:ec:90:51:19:
         8e:91:23:5a:a7:ed:cf:9b:12:92:c1:c5:94:62:25:b8:5b:30:
         18:bb:73:07:fb:8c:61:7e:c0:5e:47:dc:e7:fd:42:ae:5a:ee:
         2c:38:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----