Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/688094e657861d641de8c057b6e76a9192fbcd59.roa
File:                     688094e657861d641de8c057b6e76a9192fbcd59.roa (raw, json)
Hash identifier:          TjZ53FZib8QsSWXw4PdWMa43WFKPysLdDc9HzOZjH/Y=
Subject key identifier:   6A:9C:97:7F:B7:FB:B4:3C:F4:6F:84:BA:DD:CF:52:6D:4E:54:C3:17
Certificate issuer:       /CN=237b14c3e0cd93edb6d382d8d841d328cb304992
Certificate serial:       051CC0
Authority key identifier: 99:73:21:47:31:01:2C:D6:6E:9C:FE:08:FC:4D:F0:01:1C:7E:B4:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/237b14c3e0cd93edb6d382d8d841d328cb304992.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/688094e657861d641de8c057b6e76a9192fbcd59.roa
Signing time:             Mon 09 Oct 2023 23:12:21 +0000
ROA not before:           Sun 08 Oct 2023 23:12:20 +0000
ROA not after:            Thu 09 Oct 2025 23:12:20 +0000
asID:                     272962
IP address blocks:        2803:f990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335040 (0x51cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237b14c3e0cd93edb6d382d8d841d328cb304992
        Validity
            Not Before: Oct  8 23:12:20 2023 GMT
            Not After : Oct  9 23:12:20 2025 GMT
        Subject: CN=688094e657861d641de8c057b6e76a9192fbcd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:de:6d:6c:d0:66:09:85:c1:4f:01:8c:8b:
                    33:18:c5:38:76:60:4d:54:72:fd:22:f3:89:ad:b4:
                    4f:ac:05:05:a9:16:1e:6f:0a:77:8f:bb:c6:b5:cd:
                    64:8d:03:4e:5c:1e:dd:23:e6:1f:88:c3:e3:c5:ab:
                    62:da:bc:63:97:0e:c1:fa:0d:af:ba:ae:c2:69:39:
                    10:23:2b:3b:05:da:f3:6e:b5:7d:b7:b1:77:54:b2:
                    c4:5e:88:07:03:73:cd:4a:3a:3c:fc:df:8a:a5:04:
                    e5:77:3e:0c:b0:da:26:1e:e8:25:36:44:7f:c8:e5:
                    a5:13:32:79:fc:90:11:ff:64:b2:cb:9a:1a:79:f5:
                    7f:0f:97:6c:14:27:7e:03:9a:8f:c2:af:a8:b7:76:
                    2e:5f:39:8c:09:df:e6:a9:cc:76:72:9a:d3:ef:69:
                    be:3f:6d:e5:02:cd:17:a4:b2:04:d4:12:d4:32:49:
                    b8:5f:ae:d7:ff:dd:76:d4:eb:7d:6b:8b:ad:12:c0:
                    93:1f:d3:c0:0e:64:da:ec:f6:05:24:0a:d7:dd:3f:
                    96:da:1e:4e:72:3a:2f:e7:78:27:ad:62:53:cf:ec:
                    a0:ba:46:2f:3b:1b:21:1f:1e:e5:fd:be:5a:a7:91:
                    47:4f:de:c3:e8:96:2f:db:2d:86:5d:1c:a4:fd:4b:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:97:7F:B7:FB:B4:3C:F4:6F:84:BA:DD:CF:52:6D:4E:54:C3:17
            X509v3 Authority Key Identifier:
                keyid:99:73:21:47:31:01:2C:D6:6E:9C:FE:08:FC:4D:F0:01:1C:7E:B4:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/237b14c3e0cd93edb6d382d8d841d328cb304992.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/688094e657861d641de8c057b6e76a9192fbcd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/237b14c3e0cd93edb6d382d8d841d328cb304992.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:4f:48:16:27:4b:57:a0:6b:59:57:78:e9:52:bc:60:7f:
         c5:a4:76:22:72:9a:f6:22:35:28:28:7b:c1:70:20:44:0c:ec:
         74:b9:20:ba:26:2e:ad:1d:63:38:29:d8:83:9f:e5:3b:61:ab:
         6a:f3:0f:7c:a1:c8:c3:1d:e4:9e:51:16:44:7f:cb:8b:92:0d:
         6e:e8:e1:be:dc:45:0f:78:ce:3d:91:0c:31:83:65:3d:42:48:
         ea:e1:29:f7:ec:7a:11:21:99:e2:b7:1c:50:f4:08:52:52:f8:
         26:ed:2f:40:a7:9e:a2:f2:16:a2:ed:bc:80:11:a8:10:48:75:
         62:3a:74:1d:4a:ce:e0:50:b6:ba:1b:3f:86:da:12:ce:fb:5f:
         bd:1c:60:70:3b:5a:5b:87:ce:d4:b5:3e:84:1e:86:62:79:e1:
         d5:66:77:35:11:f9:50:d7:40:e6:7e:e5:e6:c9:ab:14:9e:d5:
         54:7f:cb:79:2d:0e:89:d2:ee:ed:25:72:28:5e:9b:0d:59:bf:
         76:1b:7a:68:38:ea:08:5e:20:c9:ca:24:c5:36:02:2e:29:96:
         30:2e:b5:61:b4:48:fe:0c:86:f1:46:92:ca:c1:b4:5f:94:cb:
         da:1a:af:dd:3c:e0:b7:3d:0c:7d:52:fe:db:e1:4e:c2:07:bd:
         45:8b:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----