Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/fca078de653e59eefc573f84fea187031e87de9b.roa
File:                     fca078de653e59eefc573f84fea187031e87de9b.roa (raw, json)
Hash identifier:          uSBbTIE2NPJWldwOpzth9HzEDIfhY5CHIpqW4bJLF98=
Subject key identifier:   C4:89:60:FF:2D:7D:25:2C:48:C7:1A:78:3E:55:C2:22:68:5D:56:1B
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       22803E
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/fca078de653e59eefc573f84fea187031e87de9b.roa
Signing time:             Mon 31 Jul 2023 21:24:11 +0000
ROA not before:           Sun 30 Jul 2023 21:24:11 +0000
ROA not after:            Thu 31 Jul 2025 21:24:11 +0000
asID:                     263185
IP address blocks:        2803:2480::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261054 (0x22803e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Jul 30 21:24:11 2023 GMT
            Not After : Jul 31 21:24:11 2025 GMT
        Subject: CN=fca078de653e59eefc573f84fea187031e87de9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:2e:ec:46:e2:cc:97:cb:6a:34:6c:06:71:
                    c1:01:5e:c6:e2:3e:ee:ec:96:0f:27:46:15:e9:53:
                    c1:d8:01:54:c0:14:10:d0:5e:13:7d:e6:ab:d1:fa:
                    83:8e:2b:5e:20:90:33:d4:68:3d:de:b4:14:ca:86:
                    94:5c:d0:a3:e5:94:58:31:38:be:e6:75:f3:7c:93:
                    56:16:3d:4c:11:b2:40:80:91:9f:90:67:ec:e5:c1:
                    a4:2d:db:73:f2:a8:58:e9:4a:59:d3:a3:15:55:0c:
                    11:8d:2e:c3:65:9c:d2:bc:22:e9:05:eb:eb:25:3a:
                    d5:d3:c9:23:a0:36:6b:83:04:d0:49:c9:69:61:e1:
                    ae:8e:a1:c4:87:06:ae:fd:68:70:13:94:d9:48:fd:
                    25:cf:58:43:20:0b:30:18:93:5d:80:21:40:44:43:
                    4c:9f:7b:2d:92:4c:83:ef:df:bb:1b:a0:cd:ef:3d:
                    02:2c:02:2c:3d:36:cf:5c:a9:ce:5e:1a:ab:cf:60:
                    ac:1e:8c:27:13:32:6c:c7:a3:d4:88:d6:08:8d:18:
                    e6:4f:97:08:f1:0b:3c:9a:33:bb:1c:5a:e1:9c:68:
                    b3:e1:69:37:6a:64:2f:bc:c9:d7:ae:a3:a3:98:6d:
                    96:17:29:02:82:14:f6:6e:db:42:0b:7a:d2:40:b8:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:60:FF:2D:7D:25:2C:48:C7:1A:78:3E:55:C2:22:68:5D:56:1B
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/fca078de653e59eefc573f84fea187031e87de9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:0d:28:bc:c0:6d:bd:d9:50:26:64:d1:22:63:00:cb:cb:
         77:d9:74:26:4c:e5:71:eb:a4:12:27:73:58:e9:b5:fa:38:5b:
         3c:b7:a9:40:ff:96:52:3e:bd:84:25:55:04:06:67:c6:05:c0:
         c0:54:dd:ed:ca:b3:0d:26:82:98:4f:ae:16:f7:58:bc:c0:a2:
         32:f4:49:bc:17:38:10:ea:7c:ff:d1:c2:c6:81:0e:cf:13:4c:
         e0:40:46:fe:7b:6d:6f:ef:8d:a4:e1:cc:a2:7e:db:b3:59:a3:
         f4:9a:87:97:2b:6f:23:ef:ce:20:c0:d1:e6:2f:1b:36:9f:7e:
         fd:63:d2:98:5a:de:2e:83:15:bf:8c:26:2c:a3:11:61:eb:74:
         75:3d:3b:d9:82:59:35:e5:90:af:3d:68:47:81:66:bc:cc:43:
         3f:7b:d7:b4:40:7b:0e:f9:a0:d1:8a:18:48:4b:de:50:94:ab:
         68:0a:35:c7:83:1d:c1:1f:ee:df:ec:14:47:7e:df:1e:7a:37:
         79:02:c3:45:2a:3e:f9:b8:7f:60:cb:b4:a0:d3:13:76:00:95:
         df:ce:66:a3:4c:c6:5f:96:d1:44:4a:95:53:73:69:8c:b4:f5:
         f9:41:0f:b6:60:2e:7a:ac:c4:83:1b:fd:9a:b0:92:b6:31:a4:
         d6:3d:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----