Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/e161a7efbab4926c2a47e4e9f96f0d568d8e5503.roa
File:                     e161a7efbab4926c2a47e4e9f96f0d568d8e5503.roa (raw, json)
Hash identifier:          6/tSp7nCZMEyW9buLotydYn97EqhUJU0jlkQD/zhelM=
Subject key identifier:   91:B0:A1:ED:40:E7:CD:EF:15:A0:2D:B2:1C:D7:09:BE:51:74:63:E3
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       232388
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/e161a7efbab4926c2a47e4e9f96f0d568d8e5503.roa
Signing time:             Mon 28 Aug 2023 13:02:04 +0000
ROA not before:           Sun 27 Aug 2023 13:02:03 +0000
ROA not after:            Thu 28 Aug 2025 13:02:03 +0000
asID:                     27818
IP address blocks:        2803:3380:1100::/40 maxlen: 40
                          2803:3380:1200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302856 (0x232388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Aug 27 13:02:03 2023 GMT
            Not After : Aug 28 13:02:03 2025 GMT
        Subject: CN=e161a7efbab4926c2a47e4e9f96f0d568d8e5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:5d:ca:8b:8f:cf:ae:d6:f6:3c:bd:2e:63:
                    62:52:1f:68:0a:93:c8:96:8a:ee:a8:e8:d2:c5:7d:
                    85:57:02:4d:be:b4:1b:ea:da:bc:25:83:ee:4c:e8:
                    16:86:54:a1:73:10:dd:be:27:d7:c5:d0:ba:17:49:
                    b2:98:26:97:1a:7b:1f:ae:e1:23:f2:91:1b:13:ca:
                    6d:37:17:19:fb:86:34:f8:46:d4:ac:e3:5f:03:79:
                    94:9f:9e:a2:e8:65:42:ca:2c:fd:f7:43:0f:d6:77:
                    f0:0a:3b:23:af:1e:1b:39:0a:22:c4:33:3b:3c:c7:
                    0b:e7:9a:c4:c9:77:7f:07:83:b0:69:65:bb:02:89:
                    7d:02:b3:59:b9:4a:f8:63:ce:ce:c4:97:cc:3d:67:
                    44:0b:4f:d5:78:41:04:73:e7:fb:d5:bf:96:11:62:
                    d2:9d:00:53:2f:52:13:5c:af:46:5e:8a:ba:cc:b0:
                    80:4b:96:22:fb:0f:4e:7f:cd:9e:b3:15:2e:50:b0:
                    d8:5b:a0:5b:9e:23:a0:1c:83:d5:5d:c0:37:b8:07:
                    7d:58:4e:cc:46:20:d0:0e:33:06:c6:8e:bb:73:07:
                    7c:98:d9:82:a0:54:d5:3e:20:f1:14:1e:8f:b0:06:
                    c6:19:11:61:28:31:ca:a6:b6:86:cc:e3:8e:66:75:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:A1:ED:40:E7:CD:EF:15:A0:2D:B2:1C:D7:09:BE:51:74:63:E3
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/e161a7efbab4926c2a47e4e9f96f0d568d8e5503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:1100::-2803:3380:12ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         d3:0d:a4:29:91:07:0b:ca:41:d8:e4:cc:16:4d:fc:72:91:b0:
         48:a8:91:d1:98:01:aa:fa:76:4d:54:52:b1:33:e5:68:72:a1:
         41:83:e7:e8:6e:ea:bb:6f:71:96:cb:7b:d9:43:bb:97:67:62:
         ee:1e:c6:6b:5c:e6:52:ae:6a:3a:72:34:73:54:39:f1:9d:79:
         f5:74:a6:b3:3d:6d:3d:90:da:6f:ff:8b:d7:57:cc:a9:d4:6d:
         5d:3a:dd:3a:38:c0:74:9e:80:8a:f9:4e:7b:96:4c:ff:fa:2f:
         7c:a3:23:ed:5a:95:af:1b:cb:93:d6:69:98:5c:36:a8:7e:d9:
         d9:36:6d:db:40:1b:ab:11:b9:b1:10:fb:b1:c8:68:23:34:05:
         f9:b4:70:08:29:a3:4a:60:f7:6f:cc:b0:48:d9:70:02:b3:a4:
         64:8a:9b:ec:cf:b8:57:e5:e1:21:96:94:ce:44:e6:b9:2b:0d:
         e3:d1:b1:bd:4a:ec:98:26:43:47:06:de:1c:53:74:52:6d:cd:
         71:34:34:a9:76:68:cf:9a:d8:43:7e:7a:ca:de:b9:3f:f8:6c:
         9e:a7:2c:1e:5d:37:0a:37:15:41:4e:2c:ce:f3:ee:ca:07:70:
         80:e6:1f:5f:b9:85:70:73:fb:4e:f0:38:08:bd:b6:4c:08:62:
         aa:28:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----