Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/88a51c6978ea5c4def43baa53ec3e832fcb9e76d.roa
File:                     88a51c6978ea5c4def43baa53ec3e832fcb9e76d.roa (raw, json)
Hash identifier:          mHylkXXT3nRCPb6wUHEO2sAFUf934qZbrZmZdBScs3E=
Subject key identifier:   15:11:C1:5F:7A:34:07:3F:12:09:33:97:5E:BB:F9:26:95:A6:6D:55
Certificate issuer:       /CN=7a068db25ad0760f0ab8468cec596ea08c267143
Certificate serial:       0B10DE
Authority key identifier: E4:1E:CD:FF:26:C7:9B:08:D0:76:87:E3:6D:83:38:63:BE:8B:1C:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a068db25ad0760f0ab8468cec596ea08c267143.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/88a51c6978ea5c4def43baa53ec3e832fcb9e76d.roa
Signing time:             Thu 03 Aug 2023 18:58:28 +0000
ROA not before:           Wed 02 Aug 2023 18:58:28 +0000
ROA not after:            Sun 03 Aug 2025 18:58:28 +0000
asID:                     272097
IP address blocks:        2803:c710::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725214 (0xb10de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a068db25ad0760f0ab8468cec596ea08c267143
        Validity
            Not Before: Aug  2 18:58:28 2023 GMT
            Not After : Aug  3 18:58:28 2025 GMT
        Subject: CN=88a51c6978ea5c4def43baa53ec3e832fcb9e76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:5c:cd:e0:e2:35:0b:87:c0:ec:8d:35:73:
                    a7:90:e2:25:19:bf:2a:cc:70:05:0e:61:0c:09:29:
                    29:46:e9:ab:8e:ac:96:97:e5:c3:d6:58:62:ff:17:
                    92:83:7b:17:bb:ea:c5:da:5c:0b:95:d5:e4:60:11:
                    dd:a8:6c:bd:cb:17:fb:34:fe:db:01:0f:b3:d4:b0:
                    cd:a9:f8:df:1e:38:fa:4c:f1:91:f3:8b:57:ce:ff:
                    db:e6:3c:51:14:75:6b:64:e6:5f:0a:46:81:60:fd:
                    d1:2f:7b:05:57:f4:be:50:f8:48:be:bb:30:77:bc:
                    44:4d:ed:f0:88:fc:61:29:fa:5b:d6:f1:b2:79:75:
                    c0:34:c6:a8:30:b7:8e:93:96:d1:31:5a:49:e6:5d:
                    ae:71:2c:3f:f8:ce:c1:38:83:b2:a7:fd:1a:6b:12:
                    a3:ef:f8:91:0e:38:4f:2d:1d:b4:70:79:04:0f:dc:
                    62:39:21:9b:17:cf:b0:3a:8a:b3:8c:d4:e9:9b:1f:
                    ae:b9:61:8d:39:f2:fb:53:1a:fd:67:54:25:e0:ff:
                    3e:b1:17:bf:85:78:41:70:63:7f:a9:e2:c3:16:64:
                    96:80:78:15:f2:bf:f7:be:a8:58:a0:84:88:a7:ff:
                    c7:b8:f1:b6:9f:d8:88:e9:86:1f:d7:10:f3:e9:ff:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:C1:5F:7A:34:07:3F:12:09:33:97:5E:BB:F9:26:95:A6:6D:55
            X509v3 Authority Key Identifier:
                keyid:E4:1E:CD:FF:26:C7:9B:08:D0:76:87:E3:6D:83:38:63:BE:8B:1C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a068db25ad0760f0ab8468cec596ea08c267143.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/88a51c6978ea5c4def43baa53ec3e832fcb9e76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/421b460d-886c-4209-a352-22efa3fdbbc1/7a068db25ad0760f0ab8468cec596ea08c267143.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c710::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:a0:fa:92:f0:f1:f1:80:d8:c3:31:17:83:e1:60:b0:54:
         76:b7:a5:4f:e5:ba:91:3d:35:bf:30:ee:a3:d6:61:5a:26:83:
         84:b2:e2:9d:1f:6d:f2:cf:3a:bc:b8:39:d9:7b:1a:1b:9e:4b:
         bc:e0:6d:a2:02:2a:44:fa:e3:0f:f6:30:37:02:b5:66:88:8b:
         06:eb:e0:3d:39:3f:b6:9d:7e:fe:0c:ac:1a:23:0c:33:4a:7a:
         d0:4e:d9:c1:d3:e1:c4:61:9b:2c:d7:e8:96:00:84:39:33:74:
         cc:83:86:f8:0c:06:08:47:a7:31:60:1c:e9:1c:76:d5:4a:6b:
         d0:e4:51:cc:0c:c1:0d:58:06:c4:26:29:33:de:48:e0:a0:9b:
         c0:9f:85:ce:5f:d0:d5:88:c4:fb:e1:5b:90:70:c2:39:fd:59:
         d8:f4:3d:54:10:d3:3f:c2:5e:30:36:29:6a:92:0c:26:6f:29:
         8a:0e:0c:37:94:75:12:c0:d7:9d:ae:16:f9:55:bc:e4:fe:27:
         eb:e6:f0:c5:77:66:61:42:35:8b:a1:40:68:1e:f7:68:4b:2d:
         e9:96:a4:40:95:e4:3d:d1:bc:30:cb:f5:91:f9:35:3d:52:33:
         2e:02:d6:92:61:06:32:53:f5:21:aa:00:02:57:44:fe:ec:b3:
         1a:fe:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----