Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ec4f602a3a4626e1e3e9e35884f319c9d9379abd.roa
File:                     ec4f602a3a4626e1e3e9e35884f319c9d9379abd.roa (raw, json)
Hash identifier:          3b9/No4aL0veBGZBJ2PIguQemvp4Y4EcIj9gN6961BU=
Subject key identifier:   F0:3F:C6:70:16:9D:DB:60:AF:86:C9:C5:CD:2B:01:A2:B6:84:A1:D1
Certificate issuer:       /CN=5fda6ad2528a266efa963c472a945b45114d0ccf
Certificate serial:       0C2F5F
Authority key identifier: 0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ec4f602a3a4626e1e3e9e35884f319c9d9379abd.roa
Signing time:             Tue 16 May 2023 23:52:22 +0000
ROA not before:           Mon 15 May 2023 23:52:16 +0000
ROA not after:            Fri 16 May 2025 23:52:16 +0000
asID:                     23246
IP address blocks:        2803:c310:fe00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798559 (0xc2f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Validity
            Not Before: May 15 23:52:16 2023 GMT
            Not After : May 16 23:52:16 2025 GMT
        Subject: CN=ec4f602a3a4626e1e3e9e35884f319c9d9379abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:ed:2e:22:41:26:24:b6:29:37:f6:19:5e:
                    03:eb:12:d1:7b:a4:49:a2:08:b8:3d:63:78:76:e2:
                    11:05:45:ca:31:b9:f8:3c:c0:12:e0:3f:12:97:f9:
                    9a:9e:20:f2:63:e9:24:05:5c:42:83:b6:d7:c2:c2:
                    3a:0d:1c:9a:58:a7:a9:39:d9:af:9e:0c:3b:67:85:
                    6f:b0:bb:ef:64:2f:57:ef:f0:64:73:99:ea:87:06:
                    33:6f:3a:28:d3:5a:d5:00:01:60:7d:52:7e:ca:4b:
                    d8:f6:f5:c1:8d:5d:8e:54:71:b1:49:2b:b0:cc:2f:
                    33:80:e2:4b:8f:34:3f:69:ef:2d:43:11:5a:1f:87:
                    50:8d:2b:9b:cf:e3:2a:40:16:b8:6f:8e:48:63:48:
                    62:9e:56:59:9e:b8:ed:43:ae:50:cb:f0:3d:1a:ec:
                    fc:19:3f:eb:94:f1:28:ab:a8:c3:8b:2d:0b:19:76:
                    c3:d0:e1:bf:f0:05:5b:31:61:ee:ad:78:30:5f:45:
                    ae:31:b7:9b:32:6e:a4:9c:c7:25:de:fc:ab:0d:cc:
                    3d:7f:9f:12:36:45:60:a1:74:3b:ae:2f:99:fb:00:
                    ab:f8:0c:ea:43:d7:20:56:4c:fd:80:88:2f:75:0a:
                    fa:1b:4f:13:cc:72:50:65:0a:97:e7:39:3b:82:6c:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3F:C6:70:16:9D:DB:60:AF:86:C9:C5:CD:2B:01:A2:B6:84:A1:D1
            X509v3 Authority Key Identifier:
                keyid:0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/ec4f602a3a4626e1e3e9e35884f319c9d9379abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:67:d1:65:12:b2:bd:2e:cd:9d:e6:d8:2e:7c:2c:6a:f5:
         e5:d7:e7:d6:59:4d:a6:59:04:0c:92:f2:f7:93:77:63:a6:99:
         4d:ef:2d:5c:9a:20:1b:d9:05:49:96:e8:97:7a:13:4b:8e:f9:
         4b:2a:26:18:f9:fc:37:b8:b8:a3:1b:bd:49:58:56:b2:6a:8e:
         6c:45:67:e3:69:82:b7:24:50:49:5b:58:2b:a9:70:0d:99:d2:
         58:84:52:91:e2:d7:69:97:f2:6f:c6:00:21:be:97:22:0d:c0:
         73:b2:54:72:13:4d:eb:5a:8a:14:00:58:7b:9b:9e:9d:7a:12:
         e6:bc:de:ef:a2:5f:0c:ec:38:61:f7:5d:49:39:34:8b:47:90:
         52:a9:cd:8b:f3:9a:78:7b:21:cd:6a:e5:0b:06:e4:3e:a8:ed:
         93:73:af:70:bc:f0:25:93:e4:1f:ae:fc:68:99:97:2c:93:4e:
         03:9e:85:ca:7b:08:c5:6f:73:76:90:a1:3e:ae:da:9b:14:33:
         69:a1:d3:d6:40:05:75:67:3d:88:e5:81:d6:a0:9e:e5:0b:d6:
         0b:b0:31:67:b3:8c:85:63:65:ae:e5:d9:a9:3c:95:a4:61:e9:
         cb:88:23:3f:43:7b:ca:32:51:c3:fd:d0:b8:ec:78:1b:48:62:
         1b:49:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----