Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/6f227459ea3cbc5fa361477d5119270b659bd766.roa
File:                     6f227459ea3cbc5fa361477d5119270b659bd766.roa (raw, json)
Hash identifier:          tOYCcZkLh8IUFKVGuKjzwmq5TvNomqGXazqzQ7e8wbk=
Subject key identifier:   E6:93:EA:7A:DD:FF:5F:C7:61:A9:BD:05:DA:28:8B:26:23:45:A1:A8
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       23678C
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/6f227459ea3cbc5fa361477d5119270b659bd766.roa
Signing time:             Sat 08 Jul 2023 05:14:14 +0000
ROA not before:           Fri 07 Jul 2023 05:14:14 +0000
ROA not after:            Tue 08 Jul 2025 05:14:14 +0000
asID:                     61461
IP address blocks:        2803:d700:ce00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320268 (0x23678c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:14:14 2023 GMT
            Not After : Jul  8 05:14:14 2025 GMT
        Subject: CN=6f227459ea3cbc5fa361477d5119270b659bd766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:d3:4c:39:e5:2f:3f:2c:63:84:f2:06:12:
                    b1:2d:2e:23:fd:cc:bb:2e:e1:f0:a8:f3:ce:7e:89:
                    49:d4:ce:98:63:8c:62:3f:c8:c1:50:17:5b:7f:2f:
                    ce:3b:3d:e8:d8:e0:e3:5b:8b:46:20:5d:1e:30:11:
                    e7:22:7c:32:1e:53:82:81:d0:1b:94:e2:d1:69:cb:
                    56:8b:28:6d:61:80:7e:d3:4c:f8:c6:95:25:62:61:
                    be:63:4b:82:de:29:2d:a2:12:c9:ee:3c:1a:4b:2f:
                    d4:76:c1:12:79:21:0d:dc:9a:ad:ea:31:3e:c4:8a:
                    82:a3:4a:ab:30:91:9f:3f:95:11:cf:db:3c:21:0f:
                    7f:26:c3:b6:e8:2d:db:12:24:02:75:b5:3a:85:b0:
                    a3:0a:98:53:0a:97:7f:81:55:1f:81:8f:34:04:43:
                    f1:4b:0e:30:bb:03:d7:b5:04:27:27:5b:eb:29:7a:
                    24:fe:3a:6f:84:02:4a:0d:62:17:8b:5b:2e:2d:c0:
                    e7:6d:50:b0:72:40:2c:99:b9:ea:ec:db:b0:8d:36:
                    da:32:2d:7f:91:5d:19:3d:e6:89:a1:a2:ba:f9:75:
                    f0:73:f5:a1:f3:24:58:ac:12:e3:b7:51:e1:92:63:
                    7e:41:2d:b0:75:0b:fb:0e:57:8b:ef:cf:91:40:01:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:EA:7A:DD:FF:5F:C7:61:A9:BD:05:DA:28:8B:26:23:45:A1:A8
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/6f227459ea3cbc5fa361477d5119270b659bd766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:01:2a:62:60:d4:b4:56:11:d6:77:7b:76:e5:70:79:4c:4c:
         9b:47:09:8f:b2:8e:1d:4b:27:4a:b6:c7:3f:0d:a9:cf:7b:22:
         ca:43:a1:f3:c8:3d:c0:41:50:33:48:0a:1d:f5:9a:1c:69:a7:
         67:50:3a:23:d7:26:73:be:74:0b:43:41:5f:8b:12:c1:b1:cd:
         4f:5c:ba:e6:6c:d6:96:51:ba:e4:a2:7a:5a:66:fe:78:ce:08:
         23:32:5f:79:dc:a8:12:ce:fe:a7:ba:c7:a5:4d:46:4e:59:7e:
         16:8f:25:72:39:c8:51:a8:77:e1:7d:ca:71:4b:cd:61:7e:4f:
         e5:86:ac:6e:b1:83:a7:9b:6b:67:83:70:50:24:ef:cc:da:b2:
         b4:51:be:9e:9d:b4:44:af:a6:fe:74:81:99:ed:ac:ce:4e:72:
         dd:7b:5f:99:bb:2d:b6:0b:0f:12:48:04:54:3d:32:c0:62:91:
         c9:6d:9f:2c:43:3c:77:c4:cc:69:ac:1b:36:90:38:5d:1f:4d:
         f6:5a:e9:6b:fa:81:70:10:17:95:f4:d4:e9:24:dc:a6:a8:85:
         06:d2:53:5b:0c:92:f4:12:31:fa:43:f5:86:5c:79:a1:90:3c:
         d9:ec:f8:cd:8c:45:e3:5d:d2:1b:ba:52:a8:9c:1d:dd:81:ff:
         21:75:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----