Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/4fbc23ab1aaba7b017f3008781216a257c7cb7a2.roa
File:                     4fbc23ab1aaba7b017f3008781216a257c7cb7a2.roa (raw, json)
Hash identifier:          fAYqECmfcnS//6ASiqbXhlurskfqxyzBVQ7dv1eXFk8=
Subject key identifier:   F6:86:35:37:7C:A6:B6:4B:54:68:C1:F0:AB:DB:F3:0F:45:CA:2B:70
Certificate issuer:       /CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
Certificate serial:       01101E
Authority key identifier: F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/4fbc23ab1aaba7b017f3008781216a257c7cb7a2.roa
Signing time:             Mon 22 May 2023 15:49:50 +0000
ROA not before:           Sun 21 May 2023 15:49:49 +0000
ROA not after:            Thu 22 May 2025 15:49:49 +0000
asID:                     266791
IP address blocks:        2803:e0a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69662 (0x1101e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
        Validity
            Not Before: May 21 15:49:49 2023 GMT
            Not After : May 22 15:49:49 2025 GMT
        Subject: CN=4fbc23ab1aaba7b017f3008781216a257c7cb7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ec:55:28:aa:43:90:50:a6:c3:f8:cc:4c:42:
                    01:f6:c8:ef:67:92:ff:c1:dc:8d:f7:b2:e1:58:0e:
                    3e:68:82:90:b5:22:08:91:8d:b8:60:67:d4:27:1e:
                    4a:fa:13:51:96:43:0d:99:08:c8:79:e2:40:64:7a:
                    f7:76:3f:24:7b:72:43:a7:11:73:b5:e0:a5:39:cd:
                    75:4c:06:f0:6e:75:39:0b:6b:ec:f2:ec:1c:3b:18:
                    93:ac:c5:4e:f8:28:25:be:39:ca:77:34:02:02:f5:
                    98:c9:24:3c:ea:50:1e:a8:9b:1f:82:2b:16:e5:bf:
                    7d:f2:16:fe:7b:c5:d3:06:fc:f4:90:0e:6e:f0:fc:
                    00:1d:c7:3b:cd:75:f1:50:bf:d3:aa:29:03:cb:2d:
                    28:86:b6:a0:42:65:80:64:e7:74:e5:47:aa:b9:af:
                    f1:56:c6:d1:d5:6a:05:a5:93:b5:6c:22:6c:f6:c8:
                    a7:f1:e5:9e:b4:00:c0:e4:fe:73:94:96:cd:7c:81:
                    6b:9f:cd:07:9a:fa:75:34:48:a7:de:11:4a:96:d2:
                    e4:52:64:83:b4:d1:14:9e:cb:bc:f6:db:a6:e8:95:
                    42:3c:bf:fa:54:8d:8d:bd:15:67:c6:ff:55:cc:da:
                    6e:4d:6e:84:bc:c8:db:b3:e8:31:6f:8c:ba:8c:a5:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:35:37:7C:A6:B6:4B:54:68:C1:F0:AB:DB:F3:0F:45:CA:2B:70
            X509v3 Authority Key Identifier:
                keyid:F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/4fbc23ab1aaba7b017f3008781216a257c7cb7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/45261c30c618b29a3cce23bac23ee2522bfc9f5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:ce:1a:b2:f0:16:c3:a8:1e:b8:34:ee:89:ec:f1:5e:26:3f:
         43:be:5b:00:5f:e4:8c:3c:dc:1b:33:27:2c:94:c3:76:32:15:
         a9:45:e4:9a:fb:0b:21:8d:ad:0a:4f:c5:7a:74:a1:8f:23:03:
         fc:72:b2:04:fe:2a:ac:24:08:3a:1d:0d:74:f8:bd:54:54:af:
         e1:74:96:b9:5d:67:fa:f0:85:7f:a2:98:3f:0d:6e:48:22:37:
         b7:17:d0:20:53:c3:d5:af:1a:2a:d0:c4:48:69:87:d8:17:5c:
         87:32:06:f7:c6:3f:4b:19:c0:cc:ae:1d:cb:e5:e3:60:65:eb:
         75:b7:1e:6d:32:a6:0f:10:0d:6f:ce:48:95:37:6b:3c:37:51:
         82:11:bf:35:28:0c:3e:59:9b:3e:1d:ce:de:8f:54:b8:6b:f9:
         c9:97:d0:ce:67:64:a1:61:7c:f3:dc:ee:60:7e:23:5c:a5:8d:
         a8:ec:f9:a6:e1:07:4d:ca:29:49:17:f3:31:88:f1:84:cd:4e:
         ae:81:13:98:0f:47:d6:7f:5b:df:dc:f9:e1:68:9d:7d:31:37:
         c9:da:7d:75:8f:e6:aa:af:02:05:98:d3:3c:e7:ac:80:64:63:
         3a:89:95:46:fb:fc:3d:6e:e2:55:12:10:bf:84:b0:92:e0:18:
         b9:ca:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----