Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a31ab9bb73ec21839a74fe487bb06c37336467c2.roa
File:                     a31ab9bb73ec21839a74fe487bb06c37336467c2.roa (raw, json)
Hash identifier:          DfYwz0Wn8HHuX9pzb19yk8zJlSS7YhbJX8RVr/ox/fY=
Subject key identifier:   6A:E2:08:74:39:70:08:F7:9F:81:36:90:84:75:93:B6:04:C9:9A:3C
Certificate issuer:       /CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
Certificate serial:       2252F3
Authority key identifier: 19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a31ab9bb73ec21839a74fe487bb06c37336467c2.roa
Signing time:             Wed 05 Jul 2023 02:05:27 +0000
ROA not before:           Tue 04 Jul 2023 02:05:27 +0000
ROA not after:            Sat 05 Jul 2025 02:05:27 +0000
asID:                     52468
IP address blocks:        2803:c220::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249459 (0x2252f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
        Validity
            Not Before: Jul  4 02:05:27 2023 GMT
            Not After : Jul  5 02:05:27 2025 GMT
        Subject: CN=a31ab9bb73ec21839a74fe487bb06c37336467c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:44:25:f1:24:be:ee:8c:c5:8d:1c:68:02:
                    08:22:cc:b6:fb:76:65:f6:36:4c:dc:42:a9:8f:75:
                    eb:c4:44:b9:e8:09:22:11:48:03:51:05:d5:c5:b5:
                    59:0a:a7:7c:ab:1d:18:20:12:da:34:e0:55:51:a3:
                    6f:27:db:71:01:d0:0b:74:41:e1:51:d6:cc:dd:1c:
                    a9:8c:69:ab:52:5e:b1:4f:4d:f2:50:27:6d:34:a4:
                    e1:3f:7a:f9:06:6c:cf:57:31:61:5a:91:de:b0:68:
                    73:30:cc:88:81:aa:7d:69:4f:bc:95:b5:ca:82:03:
                    06:34:04:18:c2:7b:e3:7a:35:4a:06:41:63:84:31:
                    75:55:17:ba:92:e2:a5:49:a6:cd:3a:32:ce:45:2b:
                    98:70:78:00:c8:a2:6d:e4:9e:de:be:79:03:4f:96:
                    17:53:74:76:06:93:c4:18:46:97:06:0a:05:42:3c:
                    5a:74:77:08:09:f3:54:1e:52:c1:8d:0a:4e:d1:41:
                    b1:4c:22:ba:4f:60:e5:36:57:65:5d:30:94:69:f4:
                    92:64:2e:86:36:cd:3d:62:0b:ca:cd:a2:fa:8b:9f:
                    e9:00:4d:a1:54:e3:5c:ec:f0:9d:6c:81:9c:42:27:
                    cd:b5:45:86:5b:7c:dd:ff:66:50:69:44:9c:e3:84:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E2:08:74:39:70:08:F7:9F:81:36:90:84:75:93:B6:04:C9:9A:3C
            X509v3 Authority Key Identifier:
                keyid:19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/a31ab9bb73ec21839a74fe487bb06c37336467c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c220::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:9e:2b:5e:32:52:93:27:97:54:b4:34:37:1c:34:0c:5e:
         5c:ae:4b:b9:5a:1c:53:22:f2:b7:3b:c6:0c:06:7c:82:f4:f4:
         91:0b:2e:0b:eb:a6:8f:c5:77:28:1f:17:ff:f4:8a:e1:b5:af:
         1c:c5:9d:1e:f7:59:b4:01:1c:de:00:8d:78:52:3d:9a:8b:6c:
         7f:f2:54:64:f4:c4:da:74:26:56:05:93:f8:62:cb:5c:2a:f2:
         4f:cd:ef:55:b3:8c:17:72:e6:f8:9c:88:3f:08:2a:27:15:1a:
         0d:73:10:69:b8:0b:0b:b0:d8:d2:a0:bc:06:d9:45:59:e2:d6:
         04:76:39:68:c0:ae:9b:64:9b:16:c8:4d:da:c6:ff:10:1a:b8:
         5e:9f:37:78:18:47:14:b9:20:26:67:5b:b2:16:1f:e8:a1:c8:
         86:c2:96:e5:79:58:32:3c:24:cd:1d:3e:ae:af:ed:0a:2d:fa:
         e7:76:af:6c:93:e7:10:13:81:48:67:4f:7d:ea:95:7b:56:15:
         55:40:7d:95:9c:5b:f7:c2:0b:94:ac:5d:c0:36:d9:3b:98:54:
         57:b8:0c:3d:5f:e6:9d:ad:b8:04:bc:bd:4d:3e:14:a7:57:f0:
         1d:4c:5d:cd:d8:44:4e:2f:cb:60:34:5a:6e:f2:1a:68:eb:ce:
         8c:f6:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----