Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/0b72ff1c69c0b511a35d9feeba0f28b51a3564d7.roa
File:                     0b72ff1c69c0b511a35d9feeba0f28b51a3564d7.roa (raw, json)
Hash identifier:          90x+BalqouOr4bzHBXWGNtFDRlH8/gd6aeEz5zAHNEI=
Subject key identifier:   C8:A7:89:88:CF:9B:F1:FF:F4:8B:7E:53:A8:B2:09:29:8E:41:D4:6C
Certificate issuer:       /CN=7d023573ee3a0783b026e6880294e091aed01196
Certificate serial:       271920
Authority key identifier: 58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d023573ee3a0783b026e6880294e091aed01196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/0b72ff1c69c0b511a35d9feeba0f28b51a3564d7.roa
Signing time:             Thu 08 Feb 2024 07:41:01 +0000
ROA not before:           Thu 08 Feb 2024 07:41:01 +0000
ROA not after:            Sun 08 Feb 2026 07:41:01 +0000
asID:                     266886
IP address blocks:        2803:f120::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562336 (0x271920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d023573ee3a0783b026e6880294e091aed01196
        Validity
            Not Before: Feb  8 07:41:01 2024 GMT
            Not After : Feb  8 07:41:01 2026 GMT
        Subject: CN=0b72ff1c69c0b511a35d9feeba0f28b51a3564d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:36:4e:cb:23:c2:2d:8c:a6:fd:30:d5:9d:
                    8f:65:d5:d2:71:94:16:41:66:42:d6:58:15:e3:bb:
                    06:fb:94:55:c2:86:6e:f9:58:98:a9:60:88:45:dc:
                    eb:0b:a4:11:69:05:00:98:9a:75:2c:c8:4a:fc:4d:
                    b5:8b:85:65:bf:69:11:a2:44:c0:35:83:e8:fa:c4:
                    4a:e5:77:6c:94:25:79:a4:b7:fc:51:10:8b:39:82:
                    60:74:a4:20:0a:f5:b6:26:6d:9f:44:26:64:2f:b1:
                    6d:ee:90:e6:9a:fe:1d:c4:47:7b:7b:d1:45:7d:b9:
                    72:81:4f:07:e3:3f:68:76:1d:83:4c:69:34:17:8b:
                    0d:5d:19:6f:6c:10:61:c8:c1:ae:d1:a3:78:54:e7:
                    08:0f:f8:95:66:3e:00:9f:91:60:d5:c1:4a:45:51:
                    00:0a:65:7d:1d:70:fb:72:f9:36:36:e6:44:20:57:
                    3b:b0:59:b1:23:f6:e5:ba:47:61:dd:99:fb:cd:45:
                    e9:64:73:d4:ea:18:0a:48:6f:36:d1:37:07:af:7b:
                    84:55:06:4b:30:ea:68:e2:f3:42:f4:94:5e:03:71:
                    78:28:d7:5c:a9:ba:59:dd:76:4a:d0:aa:c0:46:72:
                    32:9b:4a:9d:21:71:91:81:8f:7d:37:85:e7:7c:2e:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A7:89:88:CF:9B:F1:FF:F4:8B:7E:53:A8:B2:09:29:8E:41:D4:6C
            X509v3 Authority Key Identifier:
                keyid:58:9B:8B:11:2E:BB:2C:46:27:64:4F:17:5A:C5:70:33:39:D0:69:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d023573ee3a0783b026e6880294e091aed01196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/0b72ff1c69c0b511a35d9feeba0f28b51a3564d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/7d023573ee3a0783b026e6880294e091aed01196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f120::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:2e:fe:8e:20:5a:7e:ab:48:f8:0e:fc:65:cc:92:07:6b:
         56:1c:cd:d2:d9:7d:d1:9d:d4:97:27:19:4b:59:1f:37:ec:55:
         b2:76:b0:00:9d:ef:1c:b4:2b:b9:75:88:f6:dc:ff:0a:99:e4:
         ab:ce:5a:d4:d9:d6:10:b8:88:9f:c7:88:da:9d:f1:b5:53:9b:
         07:5e:e4:49:cc:e4:73:9e:64:96:eb:0e:d9:2d:61:fb:0b:65:
         ff:6d:be:be:c0:18:14:07:40:2b:27:b9:7b:c5:c9:59:da:5e:
         a1:9a:08:00:d9:37:6f:93:ed:db:b2:b6:fb:2f:b1:aa:5c:9a:
         6b:f5:04:82:6c:d6:4d:1c:d4:4e:b1:fa:a0:75:db:c4:8c:f7:
         6c:37:70:44:7d:d9:25:47:4e:ea:a0:e4:df:d4:19:0e:db:1f:
         2d:84:be:d0:9f:cc:d5:82:93:40:fb:ee:d2:ae:18:22:91:bf:
         e9:bc:e0:d8:a6:a9:ca:11:0d:37:fa:ce:be:c6:8a:36:b6:76:
         38:2c:12:9c:5a:97:d9:d7:01:3d:d5:4f:c3:84:eb:5a:83:20:
         55:d5:e7:74:61:81:af:f0:5e:e4:10:46:3e:6c:27:d1:31:9f:
         52:94:3b:44:3c:fd:a2:07:1d:6e:bc:74:41:cf:1f:84:25:24:
         fb:20:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----