Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/16dac058a0a9f3b03ae8a6223ca898539addde8b.roa
File:                     16dac058a0a9f3b03ae8a6223ca898539addde8b.roa (raw, json)
Hash identifier:          JJ7XXtaU3HTwTwxyB82FhxbDCUiAg0rFEiBGQZdodVw=
Subject key identifier:   3E:A7:F6:E8:C2:C8:EA:A1:E2:CF:DE:46:1C:88:93:F8:5D:0B:B0:E2
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       2361DA
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/16dac058a0a9f3b03ae8a6223ca898539addde8b.roa
Signing time:             Sat 08 Jul 2023 05:11:04 +0000
ROA not before:           Fri 07 Jul 2023 05:11:04 +0000
ROA not after:            Tue 08 Jul 2025 05:11:04 +0000
asID:                     61461
IP address blocks:        2803:d700:8100::/40 maxlen: 40
                          2803:d700:8200::/40 maxlen: 40
                          2803:d700:8300::/40 maxlen: 40
                          2803:d700:8400::/40 maxlen: 40
                          2803:d700:8500::/40 maxlen: 40
                          2803:d700:8600::/40 maxlen: 40
                          2803:d700:8700::/40 maxlen: 40
                          2803:d700:8800::/40 maxlen: 40
                          2803:d700:8900::/40 maxlen: 40
                          2803:d700:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318810 (0x2361da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:11:04 2023 GMT
            Not After : Jul  8 05:11:04 2025 GMT
        Subject: CN=16dac058a0a9f3b03ae8a6223ca898539addde8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:0b:16:c2:0b:76:24:37:b8:4b:b5:5d:d3:
                    5a:e8:b4:4c:d7:28:12:04:34:4f:69:fc:4f:7e:6f:
                    fa:75:bc:d8:39:1f:b8:22:35:ce:7c:aa:84:7d:cb:
                    79:56:cc:b7:5a:24:7e:5a:60:ad:e9:70:52:6a:41:
                    46:d9:99:83:51:c2:29:76:20:84:52:db:d6:dd:db:
                    eb:ce:6f:96:07:fe:c2:11:a5:c6:1d:c0:f8:88:ad:
                    2d:9a:48:13:c5:21:9a:8a:0d:18:a2:3c:1d:3b:24:
                    97:cf:08:6d:12:f7:49:d3:a9:df:76:76:16:6f:25:
                    b2:93:5c:8c:b6:32:bb:08:3a:3c:b5:d5:6f:21:ed:
                    ab:7d:17:8f:f5:86:dc:42:d3:b9:e5:b9:d7:7a:a0:
                    df:02:d1:98:4c:69:d2:6d:cd:b2:a3:97:a5:97:30:
                    14:3d:75:fe:d2:e4:75:d9:a1:0c:1a:db:c8:54:22:
                    31:cd:a7:99:d8:d5:4a:c7:81:61:89:d8:40:e5:37:
                    f1:8b:88:c3:be:d8:d9:cc:45:de:84:c4:8e:5b:5e:
                    a0:8b:90:f0:66:98:7e:d1:b3:23:ec:83:e8:4b:27:
                    09:0c:86:c6:c5:c3:9b:75:f9:22:3b:4c:e6:77:2c:
                    20:a1:29:9d:9d:8e:c8:1d:f2:3d:d0:bd:77:f7:2a:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:F6:E8:C2:C8:EA:A1:E2:CF:DE:46:1C:88:93:F8:5D:0B:B0:E2
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/16dac058a0a9f3b03ae8a6223ca898539addde8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8100::-2803:d700:89ff:ffff:ffff:ffff:ffff:ffff
                  2803:d700:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:69:e8:9c:7f:e7:9c:9d:10:3f:cd:2d:11:9a:4a:21:8b:
         b8:5f:b9:3b:c7:89:9b:83:5b:cf:cd:f7:ec:7c:fe:05:e0:2e:
         6c:d1:eb:d9:8b:73:06:17:ae:62:f6:5b:3a:f1:4e:d7:1e:45:
         af:61:75:5c:1f:6c:82:96:54:4b:e4:01:7e:6c:ed:78:26:2c:
         67:56:04:af:17:42:e0:a2:de:ea:86:7a:8c:5e:ed:86:4c:3a:
         7f:6f:af:1b:0e:b6:3d:2c:f8:3e:a9:fb:a1:9f:99:23:c9:d0:
         29:1d:da:b9:5b:29:8c:0e:20:9e:21:1e:8f:b2:97:6c:1d:e3:
         4e:e7:d6:af:08:36:5e:d5:b7:f6:5e:4d:bf:09:5f:fe:52:65:
         b1:f8:43:60:6a:01:ea:26:2e:44:a6:1f:4d:8a:a7:a7:75:b8:
         ed:9e:dc:1c:39:b6:bd:2f:35:c8:22:14:3d:6c:ea:ee:5c:45:
         ae:85:24:95:a9:3d:d6:46:f1:11:0d:10:88:74:73:f3:28:16:
         93:30:36:e7:7a:1d:ae:0c:cf:e6:0d:6f:32:f2:df:46:d3:84:
         47:2f:c7:d3:ff:d8:e9:0b:64:03:78:09:eb:6b:60:eb:4b:eb:
         78:d1:c8:b7:08:ae:da:2e:c3:c6:54:93:33:8d:d1:96:16:28:
         a9:2d:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----