Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da662810-518e-43ac-8583-8379ff9173ac/62697986e0c9b90259293100209549c6b444da5f.roa
File:                     62697986e0c9b90259293100209549c6b444da5f.roa (raw, json)
Hash identifier:          WOxXevB/nu5Cl09+gD3U4DCTmifQ1E6OLTLRRfuuhz8=
Subject key identifier:   48:EC:80:CC:F6:5A:BB:6A:11:CC:19:33:B5:07:9C:69:2A:10:1D:E0
Certificate issuer:       /CN=b049203bff216ee42af34a6f1ffbb579e1f4b84c
Certificate serial:       09AD
Authority key identifier: 24:10:DC:50:50:17:70:7F:44:55:55:2C:A5:1B:C0:62:A1:27:FE:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b049203bff216ee42af34a6f1ffbb579e1f4b84c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/da662810-518e-43ac-8583-8379ff9173ac/62697986e0c9b90259293100209549c6b444da5f.roa
Signing time:             Thu 29 Jun 2023 09:47:48 +0000
ROA not before:           Wed 28 Jun 2023 09:47:48 +0000
ROA not after:            Sun 29 Jun 2025 09:47:48 +0000
asID:                     800
IP address blocks:        2803:b90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b049203bff216ee42af34a6f1ffbb579e1f4b84c
        Validity
            Not Before: Jun 28 09:47:48 2023 GMT
            Not After : Jun 29 09:47:48 2025 GMT
        Subject: CN=62697986e0c9b90259293100209549c6b444da5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:be:c0:2e:39:8c:d1:41:0a:c6:81:95:9f:74:
                    fa:66:d0:2b:88:8d:7b:df:98:4c:79:d1:b8:ed:15:
                    39:ec:24:b8:11:4b:33:ee:19:9b:03:e5:31:22:36:
                    37:5b:94:7c:d1:88:d1:b2:16:c5:54:d0:00:68:1e:
                    d5:f1:bd:3a:6b:e6:f1:54:86:d7:bc:b3:87:5e:d7:
                    4f:94:ec:e6:11:b7:d9:da:ca:45:d7:52:e2:e2:c2:
                    4c:05:dd:e0:a0:9d:9f:a4:8d:59:08:57:8b:3d:d5:
                    f0:19:4d:82:39:a5:c2:1b:f9:5e:fe:e1:3a:34:7f:
                    37:0d:88:4d:64:96:df:f5:24:3e:2d:78:88:2e:d0:
                    7f:92:c5:43:72:d6:74:98:3b:d9:c9:1c:de:6b:73:
                    54:e8:16:21:74:9b:4a:b2:0f:ab:e3:af:40:df:2c:
                    95:87:bd:26:ee:0f:7b:dc:57:25:e7:97:c8:31:7e:
                    4b:c1:14:8b:25:38:7b:f8:2d:63:a9:6b:10:b2:c2:
                    0c:87:b4:cb:65:08:9c:83:7c:27:8f:bd:84:2f:8e:
                    1a:00:0b:2c:a9:ed:30:7c:36:20:76:26:27:e6:58:
                    11:1d:2d:f2:95:55:85:54:94:fc:d4:9c:9c:bd:87:
                    b9:51:12:7f:8c:74:c2:f5:a4:cb:60:f8:4b:af:a8:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:80:CC:F6:5A:BB:6A:11:CC:19:33:B5:07:9C:69:2A:10:1D:E0
            X509v3 Authority Key Identifier:
                keyid:24:10:DC:50:50:17:70:7F:44:55:55:2C:A5:1B:C0:62:A1:27:FE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b049203bff216ee42af34a6f1ffbb579e1f4b84c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da662810-518e-43ac-8583-8379ff9173ac/62697986e0c9b90259293100209549c6b444da5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/da662810-518e-43ac-8583-8379ff9173ac/b049203bff216ee42af34a6f1ffbb579e1f4b84c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:76:4d:0e:97:35:0b:1a:8f:8f:d0:04:71:2f:bc:79:ec:
         89:35:10:a6:6b:db:9c:10:2a:5b:cb:b4:12:83:05:a4:8b:f1:
         89:93:6a:66:db:91:60:23:8d:6b:76:1e:e7:97:d1:8b:cc:52:
         c3:28:78:ef:73:a0:99:1d:e4:e4:14:23:d6:36:c0:af:73:4a:
         c1:b9:ae:3b:aa:c8:a7:c3:20:05:44:4a:ea:47:1f:b6:d4:e9:
         48:44:9c:43:b4:de:61:e0:e6:0e:3f:3e:f8:3d:73:99:55:b3:
         80:16:8b:62:e0:48:5e:8d:b4:e8:18:ae:ad:6b:60:fa:04:6e:
         de:95:d5:eb:09:44:02:9a:4e:41:8f:89:e9:0b:cb:7a:9a:a0:
         56:d7:66:29:82:0e:1c:16:bf:c9:a7:8f:5a:6f:1f:d3:d2:4e:
         14:6a:07:d2:a9:40:0e:b0:16:69:c8:e2:76:10:ad:6a:d9:de:
         e4:cc:fe:6e:c1:31:22:58:6a:6b:21:71:ef:69:08:52:5b:5a:
         fb:bb:ac:72:51:17:63:bf:33:32:e3:16:11:5c:60:90:c3:66:
         e8:96:40:21:0e:47:eb:1b:02:8a:58:f3:8a:63:38:f3:38:eb:
         fa:e1:4f:ee:2e:c5:34:5c:ae:9f:b7:9b:14:e8:71:3b:3b:99:
         3b:3e:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----