Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/9fd0429eb44097867feeaffef000e05b17ed5c7d.roa
File:                     9fd0429eb44097867feeaffef000e05b17ed5c7d.roa (raw, json)
Hash identifier:          gUDMkYynbFXQbBN8i/YHdKNIoLDGJu4uII1jNbINhs8=
Subject key identifier:   FC:BB:08:B3:6D:E1:34:BB:AB:1E:AD:02:0E:7C:24:78:32:28:B7:EF
Certificate issuer:       /CN=c3d85f03580e6350cae3b1665689b40bfef21165
Certificate serial:       205885
Authority key identifier: 1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/9fd0429eb44097867feeaffef000e05b17ed5c7d.roa
Signing time:             Sat 08 Jul 2023 15:13:22 +0000
ROA not before:           Fri 07 Jul 2023 15:13:21 +0000
ROA not after:            Tue 08 Jul 2025 15:13:21 +0000
asID:                     267778
IP address blocks:        2803:97a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119813 (0x205885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3d85f03580e6350cae3b1665689b40bfef21165
        Validity
            Not Before: Jul  7 15:13:21 2023 GMT
            Not After : Jul  8 15:13:21 2025 GMT
        Subject: CN=9fd0429eb44097867feeaffef000e05b17ed5c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:05:81:0d:de:9b:0a:08:4b:41:f8:c3:fb:
                    13:07:07:9f:33:c9:29:d3:79:d0:00:71:79:cd:7b:
                    06:49:f7:1b:2a:83:52:25:82:03:ab:12:65:18:cb:
                    9f:2b:3f:b8:2f:b6:8b:ca:13:4a:71:c9:10:c0:bb:
                    6b:e0:7c:a2:89:d6:c1:82:83:40:5c:11:d1:b8:03:
                    b6:5a:05:dd:3c:bf:d7:79:af:63:7d:8d:ba:6c:57:
                    53:a0:96:a1:f7:4f:a8:a6:cc:76:07:b6:b6:4b:6a:
                    a5:49:7e:82:a9:74:a6:ad:eb:b7:f7:ca:6c:30:0c:
                    9b:ef:b0:27:fe:59:53:a0:35:82:84:1d:43:5c:5f:
                    ea:97:5d:11:a8:65:d1:c5:52:77:fc:94:76:d5:d3:
                    5c:57:33:60:fd:68:65:64:49:7d:99:b7:b4:fc:27:
                    51:4a:81:a2:50:4c:a4:4b:c9:8c:2d:ca:7a:f5:c9:
                    e8:22:63:4c:1f:78:b4:75:1d:33:17:4e:35:cf:8c:
                    7a:2a:15:c7:57:fe:2f:46:e0:36:2b:aa:08:68:09:
                    f5:e6:51:61:9b:9b:4f:c2:73:a6:88:8e:1b:7b:ef:
                    e6:7b:21:03:c8:1b:93:e1:84:f9:69:c2:ec:bd:d1:
                    e8:ef:10:d2:3d:de:8a:ee:44:2c:1e:d6:e0:8f:93:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:08:B3:6D:E1:34:BB:AB:1E:AD:02:0E:7C:24:78:32:28:B7:EF
            X509v3 Authority Key Identifier:
                keyid:1B:54:57:FE:43:51:67:CE:87:F6:61:EB:2A:EF:23:89:21:1A:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3d85f03580e6350cae3b1665689b40bfef21165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/9fd0429eb44097867feeaffef000e05b17ed5c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dbdfc49-5ffc-4792-8883-da8bf6a378c5/c3d85f03580e6350cae3b1665689b40bfef21165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:07:15:51:bb:24:b3:29:55:43:15:9f:a7:d2:ea:d8:b6:67:
         9b:5f:64:7c:0d:0f:f4:00:c0:a5:56:31:9e:f3:b6:d0:d4:ff:
         ec:33:62:4f:0a:81:de:f7:8c:d4:1e:ac:eb:41:c9:73:a9:fa:
         f8:ce:ad:bc:40:26:90:c8:bc:15:11:b0:b1:1d:3b:8f:14:a8:
         52:19:d1:7b:d5:67:8a:76:f6:79:9d:07:ad:ad:64:c5:4f:64:
         05:7e:9a:47:2c:db:ab:2e:eb:da:95:a2:23:e9:b0:ba:05:a3:
         ea:0f:3a:ff:10:a5:81:04:b5:5d:68:4e:af:fc:6b:3c:b9:2d:
         6f:9b:0e:7f:d8:06:04:5b:8c:e8:6e:a4:14:03:eb:d0:6b:c0:
         b3:0a:1f:05:37:95:32:6e:ea:fa:bb:a5:f9:1d:65:08:19:c7:
         4e:f6:9a:97:25:b1:4f:4d:c7:0a:ef:a2:30:3d:35:53:65:b6:
         77:93:c4:05:ab:5f:9e:21:24:89:48:52:7d:16:07:50:8f:e7:
         bd:4f:b7:d5:09:a8:c4:55:2c:37:bb:67:4e:42:80:20:25:8c:
         e9:c5:72:01:53:51:c1:74:3d:ba:32:47:75:8f:0c:0f:40:b9:
         06:1b:45:04:ec:73:4a:35:b6:aa:33:34:76:dc:28:36:19:b1:
         bc:50:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----