Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/d328cfb1ec7ae9eadf712dfd53066a82b1b9d199.roa
File:                     d328cfb1ec7ae9eadf712dfd53066a82b1b9d199.roa (raw, json)
Hash identifier:          ZoL6dT4P/GeJ2kJ4Zq1dO53Mn7cynRfzr7bXSueDgfs=
Subject key identifier:   86:D6:92:BC:6A:11:DA:78:07:75:31:C6:8A:BD:D2:A7:78:0D:A6:DA
Certificate issuer:       /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial:       1C080C
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/d328cfb1ec7ae9eadf712dfd53066a82b1b9d199.roa
Signing time:             Mon 12 Jun 2023 21:47:23 +0000
ROA not before:           Sun 11 Jun 2023 21:47:23 +0000
ROA not after:            Thu 12 Jun 2025 21:47:23 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837068 (0x1c080c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
        Validity
            Not Before: Jun 11 21:47:23 2023 GMT
            Not After : Jun 12 21:47:23 2025 GMT
        Subject: CN=d328cfb1ec7ae9eadf712dfd53066a82b1b9d199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:a1:a7:36:71:d7:2c:27:ad:a6:bf:9c:74:
                    d3:a5:e8:a4:23:58:5e:5c:c0:be:e8:e5:dd:d7:71:
                    4b:79:6f:19:f3:ed:ec:4e:cb:35:b1:71:e7:7f:0d:
                    d6:d5:37:b6:15:56:17:c8:f5:21:66:da:9a:ff:1e:
                    05:47:a1:08:02:ac:54:25:49:bc:56:a7:9c:7b:45:
                    aa:61:78:4b:3d:24:d2:87:82:f5:a5:7d:3f:94:0d:
                    c4:08:cc:fa:35:02:f5:b9:67:48:0e:10:e0:de:72:
                    07:e6:ac:de:0f:bd:94:0f:5c:b8:04:36:b1:cf:c7:
                    dd:ba:2d:2f:fc:c0:61:23:1f:3d:aa:70:c9:c7:80:
                    3a:4a:c9:10:fb:33:87:d2:60:07:7c:77:b9:20:c8:
                    9f:a5:45:cc:a9:fb:3d:4e:cd:41:7b:4d:22:3f:06:
                    fc:4b:70:de:73:7e:5f:30:5c:58:18:09:41:84:f9:
                    60:73:cf:46:df:e1:17:9a:4a:7e:75:85:cb:69:9a:
                    10:f4:c5:89:f4:7c:7c:31:fe:49:54:fe:6c:da:f8:
                    38:f0:3d:d7:62:3b:38:dc:d9:ed:99:4a:1b:77:05:
                    68:c9:fe:9f:cd:eb:7e:cf:8a:77:2a:3c:df:90:d3:
                    e1:74:6e:8b:4e:6f:3c:11:28:27:55:af:71:24:09:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:92:BC:6A:11:DA:78:07:75:31:C6:8A:BD:D2:A7:78:0D:A6:DA
            X509v3 Authority Key Identifier:
                keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/d328cfb1ec7ae9eadf712dfd53066a82b1b9d199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:3d:92:74:ba:b2:54:6c:52:04:31:39:95:0b:7c:b9:d4:
         bf:e9:01:dd:88:e2:6e:4c:fe:15:86:ce:7f:93:4f:fc:60:19:
         57:ab:b9:0e:95:d9:89:bb:42:96:15:62:e3:f0:bd:f9:0c:69:
         d1:63:dc:95:d2:7a:20:08:7e:ae:00:83:77:6a:cb:c9:e0:b4:
         fc:08:e0:46:64:e6:c9:d7:78:48:e1:33:aa:86:0d:50:08:07:
         02:23:53:c9:92:88:84:2f:f1:5d:e1:57:0c:bd:d8:ad:cd:59:
         ca:13:d1:4c:c0:17:bb:b2:32:f5:f3:9f:cd:60:cb:b6:62:eb:
         e0:6a:91:ee:dc:e0:35:64:af:94:04:fe:32:bc:e3:15:97:27:
         4d:f3:e4:01:f3:dc:06:2d:4e:fb:57:52:c0:d2:ff:79:af:ad:
         56:95:f3:86:87:ea:a5:6a:f6:0f:16:91:af:70:26:37:03:df:
         48:bc:a9:0b:ae:da:8f:e9:07:0b:11:6d:be:01:af:29:1d:ac:
         b2:1a:16:f1:d1:eb:15:c5:d5:6a:82:6d:93:ff:6d:9e:14:5c:
         03:da:c4:06:82:f4:b7:46:d2:a3:78:8a:b0:44:a4:a2:52:08:
         eb:4a:a1:23:33:49:7c:c7:9d:5c:a0:d9:e9:d7:e0:16:d9:9a:
         d1:c4:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----