Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/75c54fbe292d553cfa4c7191321da077fbbd8cf1.roa
File:                     75c54fbe292d553cfa4c7191321da077fbbd8cf1.roa (raw, json)
Hash identifier:          F73v2GMvnxBVN4S2hYxwVcaCUqGbQ5ly+QZ3GWbJItQ=
Subject key identifier:   E5:F1:22:EE:39:C8:98:7E:6B:1F:C2:28:94:84:B7:30:6F:F2:C8:B4
Certificate issuer:       /CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
Certificate serial:       230E22
Authority key identifier: AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/75c54fbe292d553cfa4c7191321da077fbbd8cf1.roa
Signing time:             Sun 01 Oct 2023 08:30:01 +0000
ROA not before:           Sat 30 Sep 2023 08:30:01 +0000
ROA not after:            Mon 29 Sep 2025 08:30:01 +0000
asID:                     269730
IP address blocks:        2803:5160::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297378 (0x230e22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed9f71dc0182564f0b1d89d7dbe402d3c34665
        Validity
            Not Before: Sep 30 08:30:01 2023 GMT
            Not After : Sep 29 08:30:01 2025 GMT
        Subject: CN=75c54fbe292d553cfa4c7191321da077fbbd8cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:fa:ca:59:cf:3a:c8:8a:50:4d:5d:cb:f2:
                    13:5d:92:d1:19:5a:d0:3e:2a:d3:f6:54:e0:60:d4:
                    4c:63:58:10:90:1c:81:c8:9e:d7:6a:78:f3:43:d2:
                    08:1a:5d:dd:6a:65:e0:75:85:56:22:ca:b5:f6:af:
                    18:68:33:c1:d0:17:b5:ce:4d:ce:f5:de:87:bf:b3:
                    0b:3a:84:99:f8:22:90:6b:42:6a:43:55:c4:09:37:
                    c9:5e:b9:f6:00:0e:3f:8a:17:c6:a3:0b:8b:32:e9:
                    be:68:1d:9b:d7:f9:27:13:f3:1d:1e:f0:95:db:0b:
                    bf:a3:fb:30:e7:49:ec:39:0b:b0:d5:99:b7:12:e4:
                    84:c4:58:9a:32:b7:d1:e9:0f:eb:11:a7:3e:87:d3:
                    5b:8c:94:2b:bb:a8:62:6f:22:5b:b8:83:b1:cb:05:
                    b6:0b:f0:61:51:87:73:1a:a3:43:3f:e5:12:9f:38:
                    19:e4:13:39:b7:d9:ab:bf:99:7c:71:4e:70:b4:30:
                    5e:d3:64:46:80:e5:e1:f4:f2:4e:ac:3a:e9:21:99:
                    39:78:76:18:c9:7c:90:fc:50:3e:09:7a:37:95:3b:
                    b3:ca:8d:1f:d9:48:01:4d:67:48:5d:92:97:93:81:
                    e0:86:ac:16:8c:18:cb:67:c5:f7:1e:24:91:83:ec:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F1:22:EE:39:C8:98:7E:6B:1F:C2:28:94:84:B7:30:6F:F2:C8:B4
            X509v3 Authority Key Identifier:
                keyid:AE:9B:5F:4B:06:21:A5:52:ED:6B:19:3E:63:61:DB:9C:E9:30:6E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/75c54fbe292d553cfa4c7191321da077fbbd8cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22bf051e-c109-4ab8-998f-f97be65a3598/72ed9f71dc0182564f0b1d89d7dbe402d3c34665.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:3c:be:16:2e:2f:ec:b2:c9:74:9c:0a:62:0c:81:72:ef:
         77:d0:cf:ba:ed:6f:4a:13:a6:20:8f:ad:c5:eb:d3:1e:8c:c7:
         29:e7:cb:48:62:be:18:c7:d3:d6:20:9c:8e:01:0e:d5:83:e2:
         e1:8f:e4:4d:11:79:cb:0a:14:4d:51:7a:65:29:2b:a3:0b:36:
         22:24:0d:79:04:fe:bf:e1:26:22:8a:b2:a7:9e:6a:07:b6:cd:
         4a:5f:5a:3a:68:91:fb:eb:f3:07:50:82:5c:95:10:96:04:1f:
         85:28:54:d0:ca:a6:0c:4e:f8:c1:a0:dc:b2:f3:5e:b1:60:a1:
         48:25:b5:d4:c5:a7:ee:60:c3:66:21:21:c8:d4:d4:0c:57:46:
         47:7a:be:b9:a3:c2:af:4d:8b:39:76:5a:b4:36:0c:23:5b:a1:
         d4:9b:0c:30:b5:f3:ec:56:af:fd:74:ed:7d:d1:f7:58:d1:0a:
         7c:22:84:82:22:18:0a:19:ff:1c:90:40:42:47:e6:33:cd:24:
         76:1b:1d:08:a0:95:46:51:2e:6b:6c:56:ed:d8:f3:4c:86:52:
         9a:0d:71:eb:de:00:ad:0b:b0:91:6e:2b:e4:b1:34:c9:ff:b4:
         f8:23:6b:30:cd:45:4f:39:b3:92:9e:a7:24:83:ff:73:92:df:
         23:ec:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----