Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/2882197d4d50980a2a23d5aec10bfc5cf1d51e8e.roa
File:                     2882197d4d50980a2a23d5aec10bfc5cf1d51e8e.roa (raw, json)
Hash identifier:          PuYo30SQTvT6mOS+SmWMEK6YQkjllGCtqk1VjBt7Sds=
Subject key identifier:   ED:14:6D:13:1A:29:BE:AE:70:38:3B:3F:A7:9E:99:20:E0:83:3B:9B
Certificate issuer:       /CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
Certificate serial:       0DDC16
Authority key identifier: CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/2882197d4d50980a2a23d5aec10bfc5cf1d51e8e.roa
Signing time:             Thu 20 Apr 2023 21:36:11 +0000
ROA not before:           Wed 19 Apr 2023 21:36:10 +0000
ROA not after:            Sun 20 Apr 2025 21:36:10 +0000
asID:                     265868
IP address blocks:        2803:b620::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908310 (0xddc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a8a2c72a83a6a007b4119c4bead05ab70e47c
        Validity
            Not Before: Apr 19 21:36:10 2023 GMT
            Not After : Apr 20 21:36:10 2025 GMT
        Subject: CN=2882197d4d50980a2a23d5aec10bfc5cf1d51e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:95:3d:6b:60:ee:8f:2e:70:cc:d8:01:f1:
                    a9:b5:fa:f1:b3:d4:e0:a3:df:98:61:f7:aa:94:68:
                    ac:4a:6c:89:1e:21:f7:bb:33:55:44:30:4a:4b:4e:
                    1b:9e:29:96:11:28:3a:32:25:c2:aa:af:62:05:05:
                    0d:a3:21:88:eb:96:44:78:ac:6a:fe:5c:2a:78:e0:
                    bf:be:58:a1:1c:89:94:35:ee:1f:ff:13:53:21:ca:
                    8a:40:1d:37:1a:b6:a3:a4:9b:0b:19:7b:71:cc:1c:
                    69:7f:c6:9c:94:0c:03:8d:9a:22:ee:3d:bd:06:44:
                    71:db:12:b8:09:f3:c4:e4:7c:52:09:92:39:ce:65:
                    2d:3b:26:4b:67:ee:53:66:a4:f9:aa:57:dd:9e:a5:
                    e1:69:de:4f:f9:7f:24:bb:ea:df:18:1d:d2:f6:95:
                    5c:8e:dc:02:99:44:1b:d5:de:de:47:c4:5e:da:ce:
                    f4:24:20:a2:8c:60:40:73:b0:05:4f:ff:43:c8:63:
                    87:cb:47:a6:34:60:a4:0b:52:23:08:60:e5:b5:e3:
                    32:5f:c1:c6:81:da:2c:cd:d9:cb:45:71:ab:fc:ef:
                    30:9a:d4:b8:a6:cf:af:c8:71:62:a0:37:ce:6d:ec:
                    56:ca:ab:d3:cf:a7:7a:85:ce:08:2c:dd:7d:a0:f2:
                    42:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:6D:13:1A:29:BE:AE:70:38:3B:3F:A7:9E:99:20:E0:83:3B:9B
            X509v3 Authority Key Identifier:
                keyid:CF:62:D5:B0:5F:8D:02:DA:E2:04:5F:9B:0B:DF:83:DB:92:1C:3E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/2882197d4d50980a2a23d5aec10bfc5cf1d51e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256a499f-5a3c-4446-bc48-f8f27d86c736/e84a8a2c72a83a6a007b4119c4bead05ab70e47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b620::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:9d:01:61:0d:9f:18:b6:4b:7e:ea:a2:d8:87:00:bf:a0:
         7b:50:9a:80:2d:85:c1:4b:c4:fc:0c:46:a5:8b:b3:36:49:22:
         4e:ba:c7:8f:37:e3:10:22:a9:8d:45:cc:fb:34:87:fb:a6:9f:
         02:99:ec:d5:f4:fe:7a:f2:7c:bd:7e:41:78:28:5f:1a:05:ac:
         63:16:cc:83:e9:14:e2:8e:63:20:09:34:b2:a4:bb:62:24:e9:
         8d:5d:c4:b7:dc:40:8e:b5:e1:bc:10:aa:26:d7:29:a2:39:b0:
         89:18:ca:0b:c8:2f:e9:b9:d6:8e:de:cb:a7:24:09:3b:55:84:
         cc:3c:df:96:ef:d2:97:c8:36:90:fa:4e:eb:9c:37:70:db:02:
         c9:b1:72:c3:0d:40:e2:fc:ce:10:b3:53:16:63:1d:04:cd:5c:
         94:03:e6:a9:5c:3a:7e:3f:78:b4:ab:1f:07:a4:6e:5a:40:99:
         d0:a4:ae:da:b3:d6:2e:5e:1a:fc:0f:e5:28:14:fc:8c:63:98:
         2e:54:49:25:0b:9a:e3:30:8d:3b:92:0c:d8:22:3c:a6:3a:e9:
         44:7b:eb:e4:28:85:b5:86:af:82:70:d4:a9:89:16:b3:fe:13:
         a9:64:3a:04:0c:cd:bb:2c:46:36:a4:24:f0:f6:43:7c:64:8b:
         0d:81:13:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----