Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/4ab74ed50bf4db38a610ca6cf743acc3f58ee67a.roa
File:                     4ab74ed50bf4db38a610ca6cf743acc3f58ee67a.roa (raw, json)
Hash identifier:          VbQjeBJOZ+ia7aEfUejaYndJqitpZ7UG66gBGlq/NM4=
Subject key identifier:   04:85:AF:C3:B4:33:30:C1:51:7A:01:76:15:C0:07:B8:47:FE:FA:EE
Certificate issuer:       /CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
Certificate serial:       1B2904
Authority key identifier: 22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/4ab74ed50bf4db38a610ca6cf743acc3f58ee67a.roa
Signing time:             Wed 28 Jun 2023 19:34:52 +0000
ROA not before:           Tue 27 Jun 2023 19:34:51 +0000
ROA not after:            Sat 28 Jun 2025 19:34:51 +0000
asID:                     270051
IP address blocks:        2803:4de0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779972 (0x1b2904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6
        Validity
            Not Before: Jun 27 19:34:51 2023 GMT
            Not After : Jun 28 19:34:51 2025 GMT
        Subject: CN=4ab74ed50bf4db38a610ca6cf743acc3f58ee67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:d7:17:cf:70:88:6d:a4:78:6f:c2:a6:68:
                    95:ef:a3:1d:66:1c:aa:d3:e8:63:f9:82:b3:45:4b:
                    18:1e:95:45:7a:54:da:ac:ec:14:96:46:9b:62:26:
                    fd:f6:5b:21:37:bd:98:15:85:50:9b:fd:5f:4f:62:
                    2e:74:7b:48:b9:05:f3:2c:82:8b:ae:a5:08:ec:ca:
                    b0:3a:f5:57:44:e2:60:22:df:94:ae:c0:9e:b6:65:
                    0d:4b:13:92:54:21:09:7b:d7:2f:f4:ab:67:f4:48:
                    ec:e9:9c:b5:14:93:46:11:58:d8:32:13:10:f9:e5:
                    f7:ac:93:57:cb:b9:9f:8d:44:dd:fa:75:7f:19:32:
                    21:cc:6a:3e:2a:f9:19:f6:15:da:f4:1e:87:db:f9:
                    fb:d4:92:09:d8:2c:c9:b6:12:4f:22:e9:ba:8a:6d:
                    db:a4:d5:30:16:9a:be:a2:40:23:7b:9a:99:f7:ce:
                    bf:c2:b0:0f:45:0a:86:5b:ad:8e:0c:66:39:e8:31:
                    15:23:03:57:f4:da:4a:4a:c2:60:5c:f3:df:44:80:
                    55:00:6b:8b:80:fb:45:fc:44:21:4f:2d:19:b4:66:
                    6f:b5:fc:e8:22:60:c0:ab:e3:4f:47:61:05:64:e3:
                    e1:b9:ff:02:63:e2:14:23:4b:31:a7:a4:a9:82:0b:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:85:AF:C3:B4:33:30:C1:51:7A:01:76:15:C0:07:B8:47:FE:FA:EE
            X509v3 Authority Key Identifier:
                keyid:22:50:E4:A6:69:36:41:5B:4C:FC:C1:F1:75:8D:DA:B9:44:09:99:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/4ab74ed50bf4db38a610ca6cf743acc3f58ee67a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/d32e82f3d3920cb1b0b5b4d9f5fc044b5b0145c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:1f:d1:81:00:bb:5a:c3:c6:90:ca:ab:f2:ff:84:e4:89:
         7e:7b:50:a5:7d:f0:6d:0a:d5:f2:30:6b:8f:13:c0:bc:1c:f1:
         3f:55:3c:8e:ce:96:37:4e:42:d0:57:89:aa:ae:d0:51:f1:9b:
         36:40:7c:17:65:3b:f2:5c:4d:c9:05:ae:67:c7:9f:25:e5:35:
         2f:41:87:d0:09:09:89:6b:0f:b3:8b:dd:47:f5:e4:28:91:62:
         c9:77:f4:13:97:af:76:d0:57:fd:99:7c:7e:05:87:be:2c:24:
         46:06:cc:b0:1c:a2:5c:4e:26:c9:85:f1:99:b2:8d:cc:a2:a6:
         75:61:c5:8c:c3:ef:53:61:54:61:e7:d2:e7:71:e2:30:18:15:
         3d:77:ec:c3:d1:c8:17:1c:17:c3:d3:13:c5:69:01:74:5e:fe:
         64:09:7b:a5:ae:83:b8:7a:8a:bd:6a:55:d3:3b:89:e3:c0:dc:
         04:06:52:84:2f:4c:b9:4b:b4:5c:42:3e:c2:8d:e5:f4:24:d7:
         81:f2:e5:aa:3d:5b:cc:44:db:b2:69:87:e1:b7:ed:2a:43:bd:
         d8:e3:f1:f0:cd:4b:31:c7:f1:f4:e3:c4:a2:60:84:2e:33:85:
         84:20:e5:29:3a:b3:03:02:78:28:40:ec:dc:b6:c4:ca:cf:be:
         2c:ea:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----