Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/eacf42194b1fe14dd8f358b2a3f4595d83b35f12.roa
File:                     eacf42194b1fe14dd8f358b2a3f4595d83b35f12.roa (raw, json)
Hash identifier:          Ln4SLxvYILJPCmjBuiYiYiVSOjeRlHB07shj7nHcbTM=
Subject key identifier:   D5:2F:89:C4:24:7C:E0:AD:FC:82:C0:2D:9E:59:9A:C3:C0:A7:BE:D9
Certificate issuer:       /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial:       242135
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/eacf42194b1fe14dd8f358b2a3f4595d83b35f12.roa
Signing time:             Mon 02 Oct 2023 20:18:30 +0000
ROA not before:           Sun 01 Oct 2023 20:18:30 +0000
ROA not after:            Thu 02 Oct 2025 21:18:30 +0000
asID:                     265780
IP address blocks:        2803:fd40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367797 (0x242135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
        Validity
            Not Before: Oct  1 20:18:30 2023 GMT
            Not After : Oct  2 21:18:30 2025 GMT
        Subject: CN=eacf42194b1fe14dd8f358b2a3f4595d83b35f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:28:1e:2c:0c:eb:5d:86:1c:7c:64:02:f6:
                    3e:c9:d0:37:0b:10:0a:c8:10:f6:5a:ac:e8:56:a9:
                    d0:d7:e8:27:5b:25:8f:bf:06:61:d6:93:08:44:17:
                    3a:11:92:c0:f1:7a:96:4e:ff:28:79:b2:b4:c9:91:
                    9b:b9:e4:60:5a:26:48:44:cf:57:a3:c2:c7:48:ca:
                    94:a9:9a:74:0c:64:a6:79:cb:22:96:75:50:c4:14:
                    3a:e6:f3:44:25:40:37:19:c6:71:b5:00:d8:d5:f2:
                    05:08:93:7e:e4:36:f0:b5:a6:ac:0e:ef:e5:48:d5:
                    24:94:55:64:d3:95:64:f5:ef:84:97:7e:09:28:63:
                    82:51:61:3b:04:57:e4:6c:2f:6d:1f:d7:ab:c0:db:
                    e3:27:36:bc:b7:8a:f8:90:1a:e5:a3:0b:70:cd:66:
                    64:7f:5d:ae:56:8d:0c:bc:4e:6d:38:bc:29:cf:3f:
                    66:65:e1:27:5f:77:19:d3:ae:6a:97:73:e1:f0:19:
                    2a:30:83:e3:ef:55:f1:94:82:a5:2f:79:62:16:b4:
                    87:ab:ab:01:66:42:e2:74:7d:10:dd:03:18:16:a4:
                    e4:64:48:45:19:30:0b:a7:6a:2a:b0:ad:fd:48:48:
                    5e:f0:82:d9:8a:73:94:01:a6:10:bc:8e:00:8b:53:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:89:C4:24:7C:E0:AD:FC:82:C0:2D:9E:59:9A:C3:C0:A7:BE:D9
            X509v3 Authority Key Identifier:
                keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/eacf42194b1fe14dd8f358b2a3f4595d83b35f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:e1:b4:7e:9d:7d:81:75:34:92:66:c1:8d:4f:52:52:cd:
         3a:53:01:ba:42:9f:50:91:1b:57:b0:24:73:bd:7f:68:7a:3d:
         3e:30:8e:13:19:a3:fc:cf:79:ba:6c:3e:02:58:f1:71:aa:03:
         3e:99:8e:1d:38:c8:31:6f:64:37:30:ca:fb:36:fb:fc:df:7b:
         f8:73:5d:ba:6d:84:1a:f8:0b:c5:5b:70:78:b6:d2:ff:e7:75:
         41:39:8e:38:ac:f5:5c:bb:fb:9f:3f:78:87:1b:cd:1d:c0:1c:
         f2:3f:c2:63:0c:ee:5f:82:b5:fe:20:f5:92:29:8c:b6:9d:36:
         e7:5c:95:db:5c:93:ed:05:67:cb:20:f9:8e:8b:cf:b1:7a:8e:
         e4:4e:39:5a:3f:9f:f5:24:f9:b1:03:7c:e6:3a:6c:0f:04:4a:
         fc:64:69:da:c4:91:91:cf:11:88:79:fa:02:d1:dc:9a:3c:e8:
         c3:be:ec:c6:82:3d:a3:11:12:c1:ae:18:cf:8f:4b:c1:91:5b:
         35:32:d0:57:cd:71:e6:56:41:c9:9d:c8:c5:80:31:79:99:1a:
         44:3f:59:5b:ce:64:e7:f3:2b:bd:8f:f3:ce:5b:67:fb:e4:32:
         e0:88:4b:f3:6b:27:4c:2d:d0:aa:c9:bd:67:0e:39:fb:34:37:
         d4:f0:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----