Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/fe513804ab94099de2ae70b7498bffcea85e636e.roa
File:                     fe513804ab94099de2ae70b7498bffcea85e636e.roa (raw, json)
Hash identifier:          misZZbYtr46NlCnrMBPOBru/1zIlVgmRvLyLXKOaQQI=
Subject key identifier:   48:FA:A2:2D:F4:6C:18:50:87:F8:24:5B:2B:39:59:92:AE:DE:6A:EA
Certificate issuer:       /CN=24c7728922714ea904047c39751b560db2631b8f
Certificate serial:       3149
Authority key identifier: 6A:AC:52:20:B5:F3:09:28:E4:F8:B2:EA:E6:6A:AD:E0:2F:3A:53:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c7728922714ea904047c39751b560db2631b8f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/fe513804ab94099de2ae70b7498bffcea85e636e.roa
Signing time:             Thu 20 Jul 2023 21:36:31 +0000
ROA not before:           Wed 19 Jul 2023 21:36:30 +0000
ROA not after:            Sun 20 Jul 2025 21:36:30 +0000
asID:                     273034
IP address blocks:        2803:cb90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12617 (0x3149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c7728922714ea904047c39751b560db2631b8f
        Validity
            Not Before: Jul 19 21:36:30 2023 GMT
            Not After : Jul 20 21:36:30 2025 GMT
        Subject: CN=fe513804ab94099de2ae70b7498bffcea85e636e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:91:a6:64:e9:74:1b:f9:20:65:be:66:46:
                    74:3b:ff:ee:c5:02:e9:6b:28:fa:11:e4:14:99:a0:
                    32:25:c0:0e:08:7f:04:02:65:5e:aa:5d:6a:58:24:
                    ac:31:0a:9c:b3:c5:51:c2:4c:c5:98:b4:cc:c9:82:
                    2b:bf:5f:ca:46:5a:18:81:00:92:7b:e3:5c:94:a2:
                    0b:4f:7d:c4:c6:9f:03:40:94:5f:24:a8:91:d2:1d:
                    ca:5b:61:f3:47:86:42:c6:24:48:f6:8b:82:27:99:
                    d8:f0:b0:de:8e:21:74:ec:f0:09:73:b1:69:aa:67:
                    fc:c1:36:ff:2a:e3:4f:9b:dd:01:4d:8a:2f:63:54:
                    a4:d9:26:4e:f1:c9:a0:af:b5:c4:04:f8:5d:2f:5e:
                    91:be:5d:9f:e1:4e:a1:33:38:ea:36:58:4e:8b:ea:
                    27:bc:f2:06:f9:4e:23:a2:c6:f5:2e:2c:cd:e3:10:
                    17:ae:6a:b7:31:19:df:27:1d:5d:2a:6f:4c:73:93:
                    00:45:4a:1f:a9:b2:46:84:a9:93:da:ee:e9:b1:2d:
                    66:fc:4c:0e:f6:7e:e0:2c:92:3a:34:f3:33:7d:27:
                    6d:1a:3a:b9:ac:4d:ac:e2:94:a2:da:05:95:16:a3:
                    80:05:f3:62:ac:7f:c7:6d:a8:10:fc:e7:04:3a:4a:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FA:A2:2D:F4:6C:18:50:87:F8:24:5B:2B:39:59:92:AE:DE:6A:EA
            X509v3 Authority Key Identifier:
                keyid:6A:AC:52:20:B5:F3:09:28:E4:F8:B2:EA:E6:6A:AD:E0:2F:3A:53:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c7728922714ea904047c39751b560db2631b8f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/fe513804ab94099de2ae70b7498bffcea85e636e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/24c7728922714ea904047c39751b560db2631b8f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:22:75:d3:38:1f:c3:fb:e2:75:0f:d7:cd:91:9a:e5:67:94:
         b1:88:62:46:7f:36:bb:e2:c1:e0:68:8d:31:d3:de:e5:53:06:
         95:d2:f5:2e:53:2a:6a:5f:db:08:b0:6d:86:69:ce:51:17:34:
         37:dc:4d:b1:fd:fd:39:7c:ad:5f:df:8e:52:ce:4c:fa:81:92:
         88:82:cd:13:fa:0c:7c:2d:cd:07:83:3f:15:29:db:0c:27:a0:
         0f:33:ef:31:99:a3:10:27:1d:67:7c:d4:84:01:78:63:0c:50:
         37:a0:b2:5a:df:76:22:cc:82:eb:b4:ee:d9:ff:1b:65:9c:22:
         4f:1a:0a:cb:03:48:aa:05:4d:96:03:74:9f:10:2d:0c:66:36:
         67:2a:b8:16:0a:a7:be:74:4c:63:2e:5b:30:60:3b:f6:e9:be:
         7a:69:18:7f:3d:c7:a2:08:fd:b2:73:fa:61:a2:64:39:d9:86:
         5e:2f:cd:be:8d:bc:17:7f:4a:b0:38:63:2f:03:26:9e:6d:a6:
         20:b8:42:87:ec:98:cc:ea:03:2f:16:d5:ad:36:e7:24:81:a1:
         c1:1b:07:61:b9:47:16:16:73:8c:c7:6d:36:07:26:ca:5e:f8:
         2f:f9:92:d6:92:cd:12:51:db:44:00:6b:93:68:ff:20:97:ae:
         33:ad:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----