Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/cd341f4badf056003a53cd1bfc65d860fe5eee3b.roa
File:                     cd341f4badf056003a53cd1bfc65d860fe5eee3b.roa (raw, json)
Hash identifier:          OCK5VmLWqMYrwlDcZfxUytwavfRsqa1HqrRZVtF1Yrc=
Subject key identifier:   E9:8B:7B:75:27:1C:DF:B9:63:96:E7:11:80:6B:B8:4B:2C:45:88:0D
Certificate issuer:       /CN=a211ad66380c58a060721d36f5085e947905759f
Certificate serial:       176A28
Authority key identifier: 83:38:45:E5:06:A0:6F:1C:A0:10:C1:24:CD:E5:9F:BB:BE:57:12:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a211ad66380c58a060721d36f5085e947905759f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/cd341f4badf056003a53cd1bfc65d860fe5eee3b.roa
Signing time:             Mon 30 Jan 2023 15:46:17 +0000
ROA not before:           Sun 29 Jan 2023 15:44:31 +0000
ROA not after:            Thu 30 Jan 2025 15:44:31 +0000
asID:                     270051
IP address blocks:        2803:4de0:1::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534504 (0x176a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a211ad66380c58a060721d36f5085e947905759f
        Validity
            Not Before: Jan 29 15:44:31 2023 GMT
            Not After : Jan 30 15:44:31 2025 GMT
        Subject: CN=cd341f4badf056003a53cd1bfc65d860fe5eee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:c0:ce:cb:bb:2a:1b:d2:e6:96:e8:ad:56:
                    3d:7e:81:a9:d1:ed:da:10:34:fb:19:ca:01:58:28:
                    9c:9d:76:43:cd:1c:3f:05:dc:9e:02:0d:c8:e8:11:
                    4a:9a:73:8e:29:d1:24:5a:c0:c0:4c:f2:69:3a:a3:
                    5d:82:a2:bc:e4:7d:90:8b:1a:a0:ab:88:76:05:00:
                    20:a9:cc:cc:2e:60:2f:d7:12:25:23:8e:a2:ce:f6:
                    3d:1d:24:55:b5:33:69:1a:e0:c7:20:17:aa:c0:d0:
                    80:c0:32:83:42:ec:f2:30:46:1c:b0:99:ba:a1:fb:
                    84:33:aa:20:d6:95:d3:20:26:40:23:f6:d2:29:cf:
                    04:87:86:07:f7:6f:75:6e:6a:dd:42:44:5e:a0:16:
                    f5:dd:02:c5:42:ee:4a:63:a9:f3:81:1a:25:3d:64:
                    0c:3b:03:c0:58:88:7b:6c:ec:3f:f5:c8:38:d0:cf:
                    a8:88:b4:a4:bd:d8:e6:12:79:f5:b8:4a:f5:29:84:
                    0c:3b:46:59:82:24:3e:d4:93:b1:66:4a:5a:6f:13:
                    fd:52:2a:63:da:94:e2:ae:31:e6:fe:64:34:e9:02:
                    d2:62:c5:93:1d:c0:b5:38:07:3e:ce:8c:9c:ef:8c:
                    9e:c5:1e:d7:72:4d:bc:62:14:b2:b6:a0:98:1c:d9:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:7B:75:27:1C:DF:B9:63:96:E7:11:80:6B:B8:4B:2C:45:88:0D
            X509v3 Authority Key Identifier:
                keyid:83:38:45:E5:06:A0:6F:1C:A0:10:C1:24:CD:E5:9F:BB:BE:57:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a211ad66380c58a060721d36f5085e947905759f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/cd341f4badf056003a53cd1bfc65d860fe5eee3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb9797b8-4bb8-4a32-a95c-3db15920e79a/a211ad66380c58a060721d36f5085e947905759f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:87:81:43:57:4f:c6:64:d4:ab:45:30:9a:6e:92:a7:25:
         a2:7e:41:a1:73:be:9c:6f:0f:aa:41:35:73:ab:75:63:c3:81:
         14:2e:32:5e:2b:29:00:3c:dc:32:c9:e6:eb:d2:6d:5b:eb:4e:
         bf:a7:9d:c6:af:cf:16:4d:a1:04:75:aa:9e:ca:d1:58:23:e9:
         85:13:11:57:56:b9:b1:d4:1d:5b:31:d9:1d:67:ce:74:18:2d:
         17:f3:85:d2:7b:d6:37:26:68:98:15:74:99:1d:44:d1:a6:23:
         71:3b:f2:61:84:77:b4:ba:65:b8:da:19:eb:4b:de:25:28:61:
         e8:8a:a6:16:0f:bc:38:64:fb:86:3c:99:26:b9:5b:12:18:4e:
         67:43:da:63:1a:6d:3c:64:31:54:f8:3d:45:74:50:94:83:80:
         22:39:48:f2:71:f2:36:a2:ed:35:90:a6:52:1c:8b:30:13:24:
         f6:28:da:77:4a:23:e5:be:da:21:39:a1:2c:ba:4f:13:38:7f:
         f0:b6:04:ed:cb:fe:fe:2b:53:f7:c2:f5:bf:d2:db:e8:73:a2:
         4e:ec:f5:2d:14:14:98:22:44:8d:70:89:80:b4:9f:c3:ca:d4:
         46:b1:51:eb:18:96:89:5f:98:59:9b:18:db:c5:f1:21:93:a5:
         9b:7d:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----