Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4a48828bb79b45beb8fbc5c89290bbe50000b3b4.roa
File:                     4a48828bb79b45beb8fbc5c89290bbe50000b3b4.roa (raw, json)
Hash identifier:          /SGETWgIv3REmcXUsbyPCDkP0blDCVUv1HG2Hoa7Oy0=
Subject key identifier:   EF:AD:15:13:62:29:79:E7:9F:9D:4D:97:2A:4C:5F:40:6C:08:0F:7C
Certificate issuer:       /CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
Certificate serial:       192767
Authority key identifier: 37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4a48828bb79b45beb8fbc5c89290bbe50000b3b4.roa
Signing time:             Fri 24 Mar 2023 08:31:32 +0000
ROA not before:           Thu 23 Mar 2023 08:31:32 +0000
ROA not after:            Sat 22 Mar 2025 08:31:32 +0000
asID:                     52438
IP address blocks:        2803:bc00:100::/40 maxlen: 128
                          2803:bc00:200::/40 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648487 (0x192767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f17752f3d0b4b3bb5cf630e65f8e199604e5f75
        Validity
            Not Before: Mar 23 08:31:32 2023 GMT
            Not After : Mar 22 08:31:32 2025 GMT
        Subject: CN=4a48828bb79b45beb8fbc5c89290bbe50000b3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:4e:da:b7:c5:7f:2e:d7:ad:da:55:5d:62:
                    fc:93:df:2a:dc:e5:ba:4e:b2:f6:c5:f7:76:f1:30:
                    e4:17:1b:6c:37:5f:6d:35:9f:63:d0:ce:bd:f0:d8:
                    a7:81:2f:c1:94:f7:91:bb:4f:91:a7:28:33:54:55:
                    d9:14:60:a0:24:2d:c2:80:9e:1c:e8:be:8c:d1:d4:
                    95:68:f0:c5:e6:87:68:85:da:69:07:be:6c:ca:6a:
                    09:cb:55:54:09:33:56:2c:c0:98:f4:f5:bb:d2:f6:
                    f9:ea:05:00:d4:d4:58:f4:05:88:d7:a8:c2:ca:42:
                    c0:dd:24:47:47:eb:ff:0d:1d:6b:3f:9f:c2:d1:55:
                    1b:9f:81:18:35:48:0a:98:43:d0:46:f1:2d:24:71:
                    f7:03:3b:34:12:61:52:0f:32:b8:25:8a:f3:1b:3f:
                    7c:74:51:b8:5a:f9:0f:cb:a0:4b:a4:64:20:6d:21:
                    db:04:28:60:46:a8:6f:93:b3:b0:35:f6:98:0a:b6:
                    82:f5:58:d1:ed:19:ed:55:e0:b5:00:14:b2:19:32:
                    85:29:f9:5f:35:fd:5e:51:2d:d2:e8:e4:b7:c8:2c:
                    45:a9:02:b4:f4:34:a8:5d:f7:b1:fc:52:6d:fa:0f:
                    b2:4c:c8:8f:15:ea:f1:c5:c0:e1:d6:1e:1f:0f:ab:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:15:13:62:29:79:E7:9F:9D:4D:97:2A:4C:5F:40:6C:08:0F:7C
            X509v3 Authority Key Identifier:
                keyid:37:F3:58:E7:A7:C1:E7:AC:EA:05:0A:F6:8E:17:FB:3C:2E:57:85:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4a48828bb79b45beb8fbc5c89290bbe50000b3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02687a4b-2ac2-4d3f-9d0b-96286a0b6a4b/4f17752f3d0b4b3bb5cf630e65f8e199604e5f75.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00:100::-2803:bc00:2ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         02:85:1c:f9:9b:0d:b0:07:a5:51:db:b0:c9:b0:75:85:ff:d5:
         64:9c:71:78:9c:99:2c:5b:16:27:a1:d1:88:e4:06:4a:d1:6d:
         e6:8e:a6:4a:69:6c:b6:bc:d0:33:72:ab:d6:ac:12:7a:0b:b5:
         37:35:ee:a2:5c:93:c8:03:87:94:06:af:8c:b4:f2:9a:75:8e:
         f8:5d:ed:8b:86:cb:ff:3c:ed:fe:7f:6c:09:63:37:a4:43:b8:
         f9:a2:8e:25:8c:df:c7:02:95:48:7c:98:22:89:e4:3b:1c:cf:
         b6:7d:13:cc:4c:d5:88:eb:05:ec:76:d3:cd:d1:36:5e:15:dd:
         ee:44:6f:ee:3a:08:6b:92:1d:33:0e:2d:43:05:57:78:4c:04:
         cc:6f:13:68:66:6e:97:23:96:47:66:5f:bc:46:1c:10:38:83:
         51:72:f1:79:1c:a1:ee:ee:50:2c:24:99:3d:e0:29:55:fb:cd:
         63:d7:05:94:68:a6:1f:e7:f4:44:39:26:67:87:7a:e0:99:d3:
         2b:09:dc:31:c7:77:f9:5c:66:be:97:0a:93:8f:00:35:63:30:
         d5:b1:2f:ea:d0:5d:43:f1:cc:1e:5c:3f:98:18:40:a3:e8:5b:
         6e:ba:87:6e:76:97:47:8f:49:3b:a3:f3:5a:0a:3d:ae:e9:90:
         88:8e:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----