Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/c3f2468601cc062aac44917040465c53fd3ebbac.roa
File:                     c3f2468601cc062aac44917040465c53fd3ebbac.roa (raw, json)
Hash identifier:          ad1kGxCSD5oHS5x5DGmDzJSPx7f14rF+ixQlgatBt/8=
Subject key identifier:   C9:74:DD:4B:DC:C7:F3:A7:E7:30:22:78:5E:68:83:57:67:8C:5F:7E
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       237480
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/c3f2468601cc062aac44917040465c53fd3ebbac.roa
Signing time:             Sat 08 Jul 2023 11:29:20 +0000
ROA not before:           Fri 07 Jul 2023 11:29:20 +0000
ROA not after:            Tue 08 Jul 2025 11:29:20 +0000
asID:                     61461
IP address blocks:        2803:d700:8b00::/40 maxlen: 40
                          2803:d700:8c00::/40 maxlen: 40
                          2803:d700:8d00::/40 maxlen: 40
                          2803:d700:8e00::/40 maxlen: 40
                          2803:d700:8f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323584 (0x237480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 11:29:20 2023 GMT
            Not After : Jul  8 11:29:20 2025 GMT
        Subject: CN=c3f2468601cc062aac44917040465c53fd3ebbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:90:48:0b:d6:3e:0e:d8:e9:af:2b:57:e7:
                    e3:e9:d2:c7:8c:0b:c8:24:79:cc:9b:7c:72:46:f3:
                    a6:59:3c:7f:f7:62:42:fe:a0:1f:8c:da:91:5a:7b:
                    29:5c:dc:36:63:0b:46:b0:b4:c8:76:0b:4d:d6:75:
                    f3:eb:78:80:69:d2:28:0f:51:b8:ed:df:cf:ee:f7:
                    bf:df:1b:26:cf:20:c7:6c:d7:9b:11:76:ad:12:28:
                    18:14:42:3b:c6:ca:0c:61:81:b8:f3:73:55:08:b9:
                    c9:10:bc:52:f1:7e:d2:5a:51:42:7a:f7:46:06:2d:
                    eb:49:50:d6:a6:1d:c9:a0:5b:6c:b2:59:8e:48:94:
                    ca:cd:77:c9:44:4b:99:e7:08:57:eb:3c:17:2a:d8:
                    18:37:57:c6:12:db:a3:77:50:cb:dd:a2:7b:5c:bd:
                    9f:7f:ee:58:b4:7f:8d:c6:b8:1a:85:75:2a:74:1b:
                    10:a1:4c:c1:72:f1:4c:26:ef:0c:64:b5:22:01:75:
                    8c:f4:65:00:34:5d:86:1e:32:e6:7c:df:ed:8e:21:
                    f0:71:72:cb:4d:3a:3e:72:88:d7:d3:0e:e2:33:8e:
                    c4:90:72:93:66:21:ce:ff:9d:8b:ab:e5:3f:3c:fb:
                    ee:59:a9:bc:cf:ba:f6:6c:e1:69:9b:b5:58:1a:3d:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:74:DD:4B:DC:C7:F3:A7:E7:30:22:78:5E:68:83:57:67:8C:5F:7E
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/c3f2468601cc062aac44917040465c53fd3ebbac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8b00::-2803:d700:8fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         1e:b7:a9:6c:a3:af:c2:c3:db:ee:e4:83:ce:26:1a:08:14:38:
         65:34:6a:7a:dd:03:34:8d:25:07:3a:33:b4:c6:c1:4f:76:cb:
         63:36:61:85:bf:a4:d6:ee:99:73:49:48:fe:4a:fb:cb:dd:82:
         e5:48:0e:cf:a3:5b:88:a3:ec:05:c2:0c:5a:aa:34:18:9e:8a:
         62:96:eb:2e:30:5c:1b:b1:8b:50:6e:1f:c5:6a:cb:ff:9d:45:
         e7:e3:8d:a9:f3:fb:9d:eb:db:d8:3e:89:f2:07:78:53:7f:15:
         18:30:f4:58:b4:b2:e4:1c:62:f6:cd:b8:f4:c0:28:6b:31:4a:
         f9:f0:00:0c:55:2c:37:c8:6f:56:86:cc:c2:56:7e:01:9a:bd:
         14:5b:c4:c6:a5:7f:ad:df:b7:d8:b0:88:62:ed:ab:e0:75:6c:
         63:b6:62:56:42:92:9f:55:6a:cc:47:0e:77:c4:27:23:86:d9:
         2c:d6:be:d4:1f:4f:02:b4:cb:1c:02:11:d5:6a:5d:75:34:ac:
         1f:70:0d:b6:03:25:96:13:89:b7:fc:94:5b:4c:c2:45:af:0a:
         c8:7a:44:10:70:ba:35:42:57:e3:17:d7:60:a9:b4:d8:c6:4f:
         19:5a:45:c9:ad:d2:7a:6a:9a:3d:35:8c:3c:6b:61:b6:9c:f0:
         fd:5f:c1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----