Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/92f05e3e19a5912b9be364027ca70503a4b660d1.roa
File:                     92f05e3e19a5912b9be364027ca70503a4b660d1.roa (raw, json)
Hash identifier:          Ap7liB62KHKk3zldfcVX99dpAcRUDn+RjrOH49TXBJw=
Subject key identifier:   74:39:B7:F2:A4:9A:39:E8:7A:AC:D2:C8:CC:63:ED:A8:DE:E0:1E:BD
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       227FBF
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/92f05e3e19a5912b9be364027ca70503a4b660d1.roa
Signing time:             Wed 05 Jul 2023 02:04:48 +0000
ROA not before:           Tue 04 Jul 2023 02:04:48 +0000
ROA not after:            Sat 05 Jul 2025 02:04:48 +0000
asID:                     52468
IP address blocks:        2803:bc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260927 (0x227fbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Jul  4 02:04:48 2023 GMT
            Not After : Jul  5 02:04:48 2025 GMT
        Subject: CN=92f05e3e19a5912b9be364027ca70503a4b660d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:61:8b:82:39:c7:cc:04:55:56:54:ed:ea:
                    9d:aa:b9:39:10:86:75:7c:db:8a:f8:cc:93:a7:35:
                    79:78:99:dc:dd:e5:c7:22:4b:69:a0:15:c0:89:75:
                    32:df:36:c2:e8:de:1d:dc:62:18:ed:e6:55:0e:6d:
                    78:31:21:0d:30:74:27:05:b9:07:d1:ca:b2:8b:99:
                    b3:28:95:97:b6:71:2f:cf:93:06:e8:0f:13:95:3f:
                    eb:db:55:df:78:d7:ef:f6:ab:46:d4:66:76:e9:1b:
                    24:ec:de:31:48:be:50:14:6a:e1:2c:3a:92:2d:93:
                    d3:b4:1c:f6:1c:a9:e9:e5:5d:12:f1:ac:33:69:b4:
                    ad:f3:de:15:70:c1:9e:e7:52:96:72:2d:6b:c9:f9:
                    09:95:77:e4:e9:32:21:a5:7d:e8:7b:c6:2e:36:dd:
                    24:e3:1a:91:39:1a:82:7f:2a:e3:b0:2b:a1:63:fa:
                    3d:29:a8:e2:5d:fb:e9:91:04:82:5f:dc:b1:2a:ca:
                    b4:43:ea:db:53:53:56:da:7f:92:a3:58:8e:38:65:
                    04:7c:c0:31:e8:dd:7f:87:98:ec:8a:1c:c4:5a:b0:
                    c3:5b:ad:96:98:9b:af:59:21:41:67:b4:ef:11:46:
                    9f:7a:ca:c9:56:a9:b1:26:dd:23:6e:9c:ad:e7:bf:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:39:B7:F2:A4:9A:39:E8:7A:AC:D2:C8:CC:63:ED:A8:DE:E0:1E:BD
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/92f05e3e19a5912b9be364027ca70503a4b660d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:84:ec:c6:45:95:e2:7d:32:33:1b:90:de:4b:69:c5:3b:
         9a:9a:fe:77:11:db:0d:2f:91:a5:22:55:bf:7c:6a:b6:d7:0a:
         da:ed:e7:40:10:9d:e3:af:ca:18:b1:08:6d:44:87:0d:69:8b:
         41:b4:57:a0:ce:6a:27:22:4f:82:92:e7:c8:40:cf:d5:cb:1f:
         05:44:7f:a7:b1:98:d7:23:6b:52:e1:17:b3:9a:6f:56:5a:c3:
         fe:63:e9:a5:62:73:84:7b:f1:eb:29:fe:bd:57:68:94:c5:1b:
         5d:c1:58:7c:c5:03:63:08:cf:98:a1:18:03:2d:a8:1a:02:ff:
         24:ea:44:c3:67:fa:06:ac:34:9a:de:4a:51:af:a7:f4:31:45:
         1c:14:ab:45:09:fe:bb:f4:7f:36:a6:5e:4b:30:1a:80:a5:94:
         ac:88:88:a8:3f:97:a5:9d:22:ad:ae:18:84:46:a9:d5:e4:cc:
         81:33:d9:36:75:f1:c8:85:d4:50:80:3b:79:e3:eb:9b:96:1d:
         6e:a8:45:94:2d:f3:05:b3:8a:94:49:37:90:9a:40:7f:bb:69:
         52:d4:60:06:d3:16:c9:75:02:cb:f9:c4:6e:dd:e3:a1:89:be:
         e9:71:01:55:aa:8c:c3:60:5b:d9:76:30:b6:c4:42:bb:0c:c0:
         5d:0e:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----