Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/f9838d0047f07083c042d365467e8f4dc040bf58.roa
File:                     f9838d0047f07083c042d365467e8f4dc040bf58.roa (raw, json)
Hash identifier:          PPfAq1MTaXdo7PbeWwSzl97kR75PD6lKnMKAmm0f6ZA=
Subject key identifier:   26:CA:E8:45:66:94:78:15:48:63:65:44:91:AA:6D:D8:8C:99:E9:11
Certificate issuer:       /CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
Certificate serial:       6036
Authority key identifier: 55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/f9838d0047f07083c042d365467e8f4dc040bf58.roa
Signing time:             Mon 28 Aug 2023 01:55:58 +0000
ROA not before:           Sun 27 Aug 2023 01:55:58 +0000
ROA not after:            Thu 28 Aug 2025 01:55:58 +0000
asID:                     272977
IP address blocks:        2803:d590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24630 (0x6036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
        Validity
            Not Before: Aug 27 01:55:58 2023 GMT
            Not After : Aug 28 01:55:58 2025 GMT
        Subject: CN=f9838d0047f07083c042d365467e8f4dc040bf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:61:a7:b3:10:d1:c0:cb:dc:62:0f:45:e4:
                    30:56:50:39:c2:6e:a2:a1:1e:84:c1:a3:55:21:a3:
                    f3:4a:fd:11:25:31:3d:be:91:c6:49:84:49:d8:98:
                    12:87:25:4a:2f:df:7a:ef:9e:56:a2:70:69:4e:d3:
                    51:91:8d:36:15:dd:1b:ff:68:da:80:40:d2:df:07:
                    62:45:16:72:24:bd:63:1f:a1:79:fb:7d:01:37:ca:
                    71:ae:e5:f6:9e:a5:39:f1:0e:ec:d2:5d:55:e4:a0:
                    b0:0d:b8:43:25:49:d8:02:b5:70:77:04:84:31:fb:
                    e6:4f:d9:a9:17:43:23:89:a7:7e:16:21:18:d7:43:
                    fc:ef:fe:79:d1:01:d6:0e:b8:7c:1d:2e:57:b2:f0:
                    30:4f:c6:9e:3e:17:2d:13:df:e5:ae:69:25:ee:2b:
                    b8:ad:f6:6d:68:43:28:c6:de:c4:3a:35:31:0a:db:
                    ee:30:fc:83:4d:29:14:3a:a8:43:54:c8:f3:b6:5f:
                    83:9b:f4:5f:22:dc:90:3f:23:13:12:ad:5d:51:38:
                    21:fe:03:e5:e1:25:3e:26:39:4e:3c:96:d4:16:b0:
                    fb:05:c0:91:e2:6a:32:74:38:9e:eb:22:0c:c8:0d:
                    32:ea:f1:d8:ad:e8:7d:ef:5f:56:c1:98:be:31:5a:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CA:E8:45:66:94:78:15:48:63:65:44:91:AA:6D:D8:8C:99:E9:11
            X509v3 Authority Key Identifier:
                keyid:55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/f9838d0047f07083c042d365467e8f4dc040bf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d590::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:65:1a:40:05:3c:3f:0f:3d:f8:70:c2:a8:14:80:35:39:
         fe:17:9e:5c:f0:45:6f:0f:06:74:4c:16:9c:09:0a:da:66:60:
         3a:f9:7a:17:db:91:7e:7d:cc:18:55:fc:02:ba:48:ae:d0:9e:
         34:e2:92:bd:51:f6:b0:d7:1d:2c:73:09:fe:ab:eb:0e:2c:32:
         63:94:8b:18:bc:87:a5:7e:2d:0d:0a:4c:44:a7:a6:12:b6:a5:
         b5:b2:51:6c:58:f8:d6:ed:1d:90:5c:f3:ce:71:f9:34:1c:49:
         f4:ef:24:9f:34:2a:c4:c9:d2:a6:0e:b6:e4:69:a1:59:10:f5:
         95:75:f9:ef:36:d7:bb:2e:45:8c:4b:00:5b:bd:b2:cb:6f:d9:
         44:f7:1d:bf:7a:07:e5:70:30:a1:06:1e:29:c7:e5:a0:0b:30:
         dc:64:81:eb:6b:ce:25:aa:e5:5c:56:06:5c:5a:3d:43:b6:89:
         a3:d7:5e:d7:9a:a6:6c:fa:3e:09:b5:11:4d:81:e4:07:fc:6c:
         31:3a:5f:cb:e2:91:b8:b4:25:97:2e:da:60:f7:ad:ac:dd:d8:
         05:85:0e:cc:67:f9:28:14:3e:93:8a:fe:f7:9d:9e:81:dd:8f:
         9e:af:f6:25:db:8f:26:f6:fa:14:8c:e8:72:34:41:cf:46:db:
         f4:42:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----