Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/313bc40f20cbc72e37b0757d131ae8fa09135769.roa
File:                     313bc40f20cbc72e37b0757d131ae8fa09135769.roa (raw, json)
Hash identifier:          EqMaZy1E7BNSGm3djXb4VnV4FsjF9JwX5kR7e/l9aGE=
Subject key identifier:   14:A1:A8:11:CF:79:8D:A5:08:AF:02:B8:4E:E3:70:95:67:1D:F2:2E
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1A3606
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/313bc40f20cbc72e37b0757d131ae8fa09135769.roa
Signing time:             Sat 05 Aug 2023 13:16:50 +0000
ROA not before:           Fri 04 Aug 2023 13:16:50 +0000
ROA not after:            Tue 05 Aug 2025 13:16:50 +0000
asID:                     10753
IP address blocks:        2803:ee60:d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717766 (0x1a3606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Aug  4 13:16:50 2023 GMT
            Not After : Aug  5 13:16:50 2025 GMT
        Subject: CN=313bc40f20cbc72e37b0757d131ae8fa09135769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:04:e5:14:6d:61:dc:f5:55:98:0f:5d:c0:
                    a3:d8:23:16:ca:5e:6b:56:db:d3:ea:24:77:60:c5:
                    0d:3d:cd:d4:84:f2:58:95:8e:6f:84:f7:d4:68:3d:
                    24:ac:f3:c7:b3:d1:a6:8f:05:a3:c1:64:9c:77:1a:
                    91:5b:d9:83:13:f6:08:9a:bf:bd:a8:76:a0:de:8d:
                    e2:ea:5d:4d:5e:26:3a:09:8d:de:21:86:ec:7a:65:
                    9e:e2:32:6d:83:55:82:fa:90:c7:14:60:c6:05:b2:
                    d6:96:ba:dc:1c:47:b4:39:a1:2a:97:f1:32:cc:d6:
                    99:57:86:1c:8b:e2:ea:ba:a7:99:a4:25:7e:e1:44:
                    ee:b5:e2:62:a6:c7:9f:10:79:ec:45:47:e7:ae:4f:
                    e5:44:5f:bc:1f:48:8c:a3:02:1e:d2:b3:b2:03:e1:
                    e3:c9:60:3b:fc:53:73:2c:08:d8:31:0d:33:c8:90:
                    f8:d1:c8:39:5f:6d:79:b4:41:24:37:55:ea:87:1d:
                    05:fa:81:03:c2:ff:66:b5:d4:30:40:de:a8:02:fb:
                    62:73:4b:58:4c:7c:cb:1c:6c:14:6d:19:8f:6a:19:
                    bb:69:a1:7c:4b:db:33:c0:04:61:3c:ec:03:74:d2:
                    ff:e7:82:f4:1c:95:7a:7b:6d:f6:e6:dd:42:01:46:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:A8:11:CF:79:8D:A5:08:AF:02:B8:4E:E3:70:95:67:1D:F2:2E
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/313bc40f20cbc72e37b0757d131ae8fa09135769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:1b:42:c2:f3:5f:29:5f:39:3b:6f:09:1d:98:21:2a:2d:
         66:f6:12:78:c1:a2:1d:9a:b6:15:74:30:ff:76:51:1d:2d:80:
         2d:38:e4:02:8a:73:bf:ed:1b:87:2c:7d:64:ad:d1:d8:ee:6f:
         b9:6b:71:21:2a:d6:98:7b:8e:bb:d7:8c:fc:54:b0:23:be:10:
         8a:92:ad:e2:43:42:94:ab:43:58:26:9a:54:3d:42:76:f7:9c:
         4e:0f:75:c5:a4:95:d8:ac:11:c2:dc:6e:2d:69:12:a2:99:f8:
         29:39:85:e4:51:4e:45:86:b8:4b:cc:34:27:1b:80:73:6d:5c:
         9d:01:b9:af:50:0a:2e:89:43:0a:96:66:ac:e8:9b:ab:17:10:
         6e:a8:26:fc:7c:17:4e:6f:07:0e:b1:e4:20:d7:e1:9a:df:0d:
         9b:11:31:a6:bf:07:9d:4b:b4:8f:33:6b:23:b8:2a:af:d9:78:
         bb:83:65:06:82:01:37:44:b9:f5:b4:6c:79:11:c6:3a:b5:59:
         0c:cc:67:d9:56:c9:57:ec:1d:71:15:ce:fa:c6:e3:20:5a:b1:
         b0:65:2d:e3:68:d5:0b:38:f8:10:6b:bb:1e:c1:88:67:6c:b6:
         d6:ce:23:34:e2:66:73:80:d3:c2:d9:30:03:1b:d8:46:c4:d0:
         2b:c8:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----