Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/c2aef6e58d30870e2b1964c8accc46c49db71a0a.roa
File:                     c2aef6e58d30870e2b1964c8accc46c49db71a0a.roa (raw, json)
Hash identifier:          iGqiWGwQPaU6K32vjEQrTCYnDDKwv7m/ZicN9+CK3O0=
Subject key identifier:   70:A1:53:0F:52:37:9F:E7:6D:2A:1B:F1:73:5A:E6:4B:7D:53:FA:03
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       23C4F6
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/c2aef6e58d30870e2b1964c8accc46c49db71a0a.roa
Signing time:             Sat 07 Oct 2023 08:30:07 +0000
ROA not before:           Fri 06 Oct 2023 08:30:07 +0000
ROA not after:            Sun 05 Oct 2025 08:30:07 +0000
asID:                     263781
IP address blocks:        2803:1440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2344182 (0x23c4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  6 08:30:07 2023 GMT
            Not After : Oct  5 08:30:07 2025 GMT
        Subject: CN=c2aef6e58d30870e2b1964c8accc46c49db71a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:3f:e0:69:1f:0f:61:ae:4c:60:1d:6c:e9:
                    93:42:6c:83:fd:5a:75:47:74:2b:6a:8b:99:c4:35:
                    6e:3e:a8:c1:21:37:42:66:09:8c:d7:35:44:6a:ac:
                    9b:94:93:d8:10:eb:64:ca:33:08:e1:13:4f:7d:a4:
                    41:2b:d5:cf:9c:f0:64:06:49:5d:d3:34:24:eb:83:
                    06:3b:d1:cd:b0:39:2b:79:6c:d2:c3:18:12:ac:76:
                    6a:a6:52:6d:3b:0e:3c:9b:77:4e:c4:0a:64:94:c7:
                    6f:c0:59:b1:29:8b:4c:34:a5:96:24:79:fa:bd:0e:
                    b7:15:e5:88:27:9b:7c:bb:5a:68:65:ab:d1:4b:82:
                    52:67:52:5f:f4:87:52:d2:87:33:03:23:7c:73:96:
                    49:14:01:71:1d:99:d7:16:e8:2c:ef:af:3d:19:87:
                    81:d9:3f:01:c5:ef:97:84:33:7f:2e:a6:38:41:ca:
                    ae:1f:50:56:c1:d6:7b:2f:ee:70:96:cf:d3:93:d3:
                    3e:d9:53:c6:37:93:c0:82:7c:ce:09:9e:c3:98:0e:
                    bd:2b:4f:8d:b0:8a:ba:6c:1e:40:ad:8b:65:7e:23:
                    60:dd:43:f7:6c:da:25:fa:f3:d4:4b:3b:6b:b4:9f:
                    b9:7d:22:40:3b:0d:d3:8c:3d:e5:15:44:ab:e8:85:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:53:0F:52:37:9F:E7:6D:2A:1B:F1:73:5A:E6:4B:7D:53:FA:03
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/c2aef6e58d30870e2b1964c8accc46c49db71a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:f6:a6:9d:bb:93:24:86:b3:ed:0d:6c:65:24:28:fd:4c:
         08:64:b5:74:b0:f5:4b:94:da:75:c3:ce:82:7f:b2:e8:ff:2d:
         80:14:0e:85:1c:82:ce:c9:69:d7:27:58:af:31:b8:6f:b1:a6:
         c4:62:6a:a5:70:f4:1e:12:af:f1:e6:42:a5:6e:8a:77:6d:1c:
         2a:20:49:42:0d:94:1c:bc:77:29:c1:de:fa:0b:2e:44:72:06:
         5b:85:8b:fb:34:6d:9c:c5:b0:ec:a3:ba:e2:3a:7b:a2:92:f8:
         7e:fc:31:a5:da:c3:ff:ab:04:7c:04:bb:8e:2a:28:fa:92:8c:
         27:00:5f:7d:bc:6d:db:da:27:ef:e4:02:80:9e:9e:ae:70:36:
         c1:45:6a:10:a5:b9:a3:d5:bb:d4:6d:15:49:5c:58:37:9b:a9:
         9a:ba:2a:d2:c5:ab:f0:be:65:0c:c5:ec:c7:3e:30:23:28:bc:
         58:06:41:28:b2:9a:ed:35:3c:78:65:5b:8d:b4:fa:dc:32:23:
         75:8c:20:5f:fd:b7:5b:d1:2c:9b:55:e9:47:ea:cc:e7:c2:78:
         d1:7f:aa:9d:b7:8c:2b:ab:38:9e:fa:fc:18:f6:30:b7:ba:32:
         72:76:eb:70:b2:62:1f:64:a5:6d:56:41:1a:c7:3f:d2:96:51:
         88:ef:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----