Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4ed7047566d276f9f1ccdff552cc8475b994b01a.roa
File:                     4ed7047566d276f9f1ccdff552cc8475b994b01a.roa (raw, json)
Hash identifier:          4WxD9kZPBrr7W7VbhFl5+5IAG+jDBBnjlv5v3D6i3qk=
Subject key identifier:   FC:E6:EC:E5:AB:29:A3:E2:C7:E0:D1:86:1B:29:C3:01:4C:3C:7F:77
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       234A39
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4ed7047566d276f9f1ccdff552cc8475b994b01a.roa
Signing time:             Sat 08 Jul 2023 05:05:12 +0000
ROA not before:           Fri 07 Jul 2023 05:05:12 +0000
ROA not after:            Tue 08 Jul 2025 05:05:12 +0000
asID:                     61461
IP address blocks:        2803:d700:2000::/40 maxlen: 40
                          2803:d700:3f00::/40 maxlen: 40
                          2803:d700:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312761 (0x234a39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:05:12 2023 GMT
            Not After : Jul  8 05:05:12 2025 GMT
        Subject: CN=4ed7047566d276f9f1ccdff552cc8475b994b01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:df:73:50:fd:a8:60:03:cc:62:80:55:f2:
                    5d:5c:ab:ea:ba:63:38:8e:b1:a2:72:84:47:48:0c:
                    a1:54:40:fe:36:ef:46:a8:50:39:fc:02:8e:c5:61:
                    e8:63:15:4e:5e:07:90:1c:d1:6d:2c:ec:ee:cf:fb:
                    d4:f1:bc:cf:fc:7e:92:c9:e8:74:a5:91:d2:41:ed:
                    ef:aa:ad:d3:f1:dc:86:2f:0c:1c:ac:d4:b2:7c:fa:
                    93:7e:33:aa:c7:1f:5f:36:ce:bc:4d:1c:0f:02:50:
                    b6:d0:cd:d4:64:ac:cb:56:c5:59:22:78:13:11:51:
                    d7:19:25:52:74:b6:8a:d7:c8:2f:31:c7:73:37:14:
                    58:dc:a4:0b:5c:1b:b4:bc:92:69:e6:b6:eb:c3:79:
                    cc:9a:3a:5a:fc:12:0c:47:68:f2:4b:2e:55:0e:d7:
                    0b:70:0d:e8:aa:ca:5f:e6:62:04:a4:b7:2f:03:26:
                    b9:fe:44:ea:c4:c0:a1:57:2f:63:be:6c:b6:1b:72:
                    4c:4e:b0:1a:8f:02:82:fd:96:cc:c5:da:0c:0e:a4:
                    76:68:1b:35:5e:27:ae:e5:2d:91:26:62:83:d2:0b:
                    ac:55:fd:b5:a0:bb:71:cb:36:69:0d:61:68:b0:c8:
                    5c:b5:96:26:45:07:f7:76:af:c6:1b:12:8e:28:e6:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:EC:E5:AB:29:A3:E2:C7:E0:D1:86:1B:29:C3:01:4C:3C:7F:77
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4ed7047566d276f9f1ccdff552cc8475b994b01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:2000::/40
                  2803:d700:3f00::-2803:d700:40ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         55:30:fa:31:b3:7b:3f:3d:00:f5:69:e9:3c:65:d4:80:11:cf:
         4e:f6:7b:89:1c:28:4b:9d:f6:3a:89:ae:2f:4a:5e:ba:56:ed:
         ea:ee:7a:d4:43:a8:4c:78:cc:c1:cb:87:9e:3d:7d:c5:96:38:
         fa:a8:10:eb:bf:0a:05:0f:7a:84:3c:36:4e:eb:5d:81:d6:5b:
         b1:7b:ee:99:9e:9b:4b:39:8b:11:ed:96:b0:8b:b9:b6:56:f9:
         d3:64:02:9f:db:62:6f:fd:1e:55:bc:39:b7:e9:f9:40:59:d0:
         59:24:14:41:6b:15:f1:d8:5e:3c:24:c7:ea:44:37:30:1a:85:
         d3:96:af:58:9c:9d:b6:2d:be:6d:e5:79:78:ed:6a:00:ec:00:
         a4:f8:79:ce:eb:51:2a:3b:b1:2d:4b:3e:67:1e:1b:1e:71:11:
         f0:60:76:6c:79:02:a7:a7:0e:ba:e9:0b:f6:d3:53:b0:9d:f0:
         dc:67:40:67:78:4b:f3:ea:b6:3b:96:51:7e:51:a7:2e:40:ea:
         3e:13:7d:c0:67:8b:15:15:8d:ba:f1:ce:b5:ea:ed:dd:d7:2a:
         fc:bd:e4:95:a3:0d:59:e5:95:dc:78:09:54:0c:93:7e:c9:f7:
         9b:2d:26:df:dd:1f:0d:16:22:9a:5a:85:42:ec:f7:bd:0f:c1:
         33:9d:29:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----