Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/7cbc38dbdade7938a9df3f1f5578b4d277c1b634.roa
File:                     7cbc38dbdade7938a9df3f1f5578b4d277c1b634.roa (raw, json)
Hash identifier:          IXO9mZZQHQEIJ5UzBm4FaZE3Is5/LCbMx51fPLlZhxc=
Subject key identifier:   33:93:4B:7D:C1:E9:3D:F0:98:1A:57:F6:1D:D1:1C:1B:DD:5A:45:F5
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       22604A
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/7cbc38dbdade7938a9df3f1f5578b4d277c1b634.roa
Signing time:             Wed 05 Jul 2023 02:05:25 +0000
ROA not before:           Tue 04 Jul 2023 02:05:25 +0000
ROA not after:            Sat 05 Jul 2025 02:05:25 +0000
asID:                     52468
IP address blocks:        2803:a820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252874 (0x22604a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Jul  4 02:05:25 2023 GMT
            Not After : Jul  5 02:05:25 2025 GMT
        Subject: CN=7cbc38dbdade7938a9df3f1f5578b4d277c1b634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:2f:12:fb:49:e3:7a:60:bf:51:a1:56:e9:
                    d0:74:02:6e:72:5f:51:b0:64:5a:c5:ca:3e:e4:1b:
                    3e:58:c7:67:e0:af:87:4c:e1:bd:f1:54:38:cf:c6:
                    b7:77:6a:56:ea:26:27:bc:31:62:5d:44:2f:f5:47:
                    64:a0:56:28:87:ae:a4:96:60:b9:54:c3:f9:c8:33:
                    eb:5b:33:94:92:a2:a5:72:87:89:b8:4f:95:8c:a5:
                    8c:4b:8f:e3:5a:0b:b4:b0:a6:66:21:de:07:3c:1a:
                    0c:7d:e8:fe:ae:ee:0d:27:4b:d9:52:f1:d4:ae:90:
                    f2:df:03:9c:7d:57:9d:e0:67:a5:7d:54:24:1b:eb:
                    e3:22:c7:af:0a:8d:9b:35:8f:b2:b5:86:19:99:17:
                    f3:1a:d3:fb:35:2a:5d:cc:82:de:0e:7d:21:ad:71:
                    aa:ef:c6:16:c4:b8:20:38:fc:28:28:bc:72:32:8b:
                    70:da:e0:43:28:2a:0a:cf:cb:a4:2f:52:06:9a:a9:
                    98:86:01:06:3d:27:96:b3:cd:43:af:e4:44:f9:89:
                    14:8f:e8:99:93:bb:c6:13:c3:8c:fc:db:93:57:c4:
                    42:d3:26:74:fd:ee:18:34:f0:40:4d:e0:5c:97:4b:
                    49:79:c5:10:b7:72:21:7d:8e:f6:62:af:0e:03:6d:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:4B:7D:C1:E9:3D:F0:98:1A:57:F6:1D:D1:1C:1B:DD:5A:45:F5
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/7cbc38dbdade7938a9df3f1f5578b4d277c1b634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:42:e4:b9:b3:9d:fe:f5:a7:e5:17:8a:ce:5a:da:db:69:
         77:f0:2f:bf:2e:73:b4:80:95:71:dd:97:02:17:7f:4f:07:fa:
         82:f1:4c:03:b0:49:cd:ec:e7:90:a4:f9:26:c6:46:f0:80:32:
         57:54:3f:d0:0c:a9:e1:5c:77:10:9e:47:69:22:a5:97:83:e5:
         c3:39:73:8b:0f:0b:73:a9:16:1f:74:7a:bb:f9:43:a1:8a:85:
         48:5b:ac:17:50:5a:2e:ea:6b:08:18:25:4f:21:2b:60:1e:a1:
         b3:8b:95:41:7c:5d:84:35:94:63:8d:8d:90:84:f8:ba:0f:8c:
         25:42:d2:00:b3:7e:97:45:25:02:d1:2e:86:b2:a0:32:1b:fe:
         dd:6e:74:da:e3:0e:f5:21:91:d7:15:39:9e:c4:40:15:1b:d5:
         13:48:47:b6:0f:4f:ce:6b:c5:57:4c:a8:4d:49:9b:59:2e:46:
         54:f7:b9:53:22:62:9a:08:c3:3b:1c:5f:ac:bd:db:f0:9e:6c:
         dc:7e:88:2b:39:ce:25:2d:ff:51:b6:61:3a:c3:81:6c:6e:ae:
         2f:88:3b:3a:c6:71:52:40:14:1f:a5:33:b8:24:74:bb:96:58:
         e2:bb:bb:84:bf:31:9f:36:43:8d:c1:b1:c0:f2:2b:9e:66:35:
         40:a2:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----