Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/64bbf59825eb6f739223a0578aed085f8838e6d6.roa
File:                     64bbf59825eb6f739223a0578aed085f8838e6d6.roa (raw, json)
Hash identifier:          q4aX3AwoGeUFPzNUsV3OLj5eJVhCpfp1p6RUfXtLboM=
Subject key identifier:   98:33:D5:24:33:BB:B8:F5:22:E8:68:6F:07:6C:7A:27:86:D1:66:7C
Certificate issuer:       /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial:       21EE76
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/64bbf59825eb6f739223a0578aed085f8838e6d6.roa
Signing time:             Wed 05 Jul 2023 02:04:55 +0000
ROA not before:           Tue 04 Jul 2023 02:04:55 +0000
ROA not after:            Sat 05 Jul 2025 02:04:55 +0000
asID:                     52468
IP address blocks:        2803:e620::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223734 (0x21ee76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
        Validity
            Not Before: Jul  4 02:04:55 2023 GMT
            Not After : Jul  5 02:04:55 2025 GMT
        Subject: CN=64bbf59825eb6f739223a0578aed085f8838e6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:0e:7a:db:f5:72:f0:d1:ff:e9:36:cc:7b:
                    84:f2:74:ac:95:27:16:9d:b2:2a:15:a8:9d:fc:f3:
                    c8:03:0e:b9:26:ca:21:68:af:0a:79:a5:0c:1a:75:
                    e0:0a:b4:24:f7:5a:bb:15:e4:b7:65:4d:87:31:95:
                    ed:07:da:22:b5:1e:26:7a:a4:d4:29:e1:6f:19:37:
                    24:fc:85:42:3a:9a:8a:de:65:c3:5b:d8:bf:f0:f8:
                    89:4a:a6:95:a2:25:3f:0b:94:f5:40:a9:7f:f4:62:
                    fe:c7:91:6d:92:f8:d5:2e:d1:a6:47:57:a8:68:ec:
                    b9:bb:c3:c8:c2:2e:06:b3:80:9a:ef:9c:f0:0d:a7:
                    07:52:21:3c:af:70:64:60:e8:97:6e:a9:f4:b6:d9:
                    8f:c3:da:10:c8:d6:6a:af:d1:f1:95:b5:57:97:50:
                    38:99:08:39:fa:ed:33:35:7d:13:b6:8f:9b:ba:c1:
                    15:b2:c8:8a:05:93:14:69:46:45:49:43:07:09:a6:
                    5e:ef:17:26:e8:25:df:a2:5a:4d:b1:02:ec:3a:a6:
                    b5:c9:6f:0d:23:77:05:b6:64:66:7a:a4:8c:59:9d:
                    d8:18:23:41:5b:12:f4:4a:40:4c:5e:38:4f:b6:b2:
                    3b:f7:b3:e5:bc:4f:0f:46:3a:d5:15:2e:9f:9c:37:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:33:D5:24:33:BB:B8:F5:22:E8:68:6F:07:6C:7A:27:86:D1:66:7C
            X509v3 Authority Key Identifier:
                keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/64bbf59825eb6f739223a0578aed085f8838e6d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e620::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:e2:81:46:73:8e:1f:3a:33:01:76:0e:a6:9b:61:f2:63:
         d9:2c:93:51:a4:9a:a4:87:33:1c:96:da:22:95:a1:cd:d2:cb:
         0c:4c:0e:35:74:bd:a4:ba:80:34:f6:36:4d:73:ae:23:d3:be:
         b7:69:6f:25:1a:50:40:71:b0:2a:93:45:18:45:ac:c3:a7:80:
         93:67:13:b0:a4:04:7b:f5:26:2e:a4:40:82:c7:08:d7:46:b3:
         4a:db:c4:11:26:06:be:ea:bb:67:3f:50:10:d2:f8:b9:eb:ba:
         8a:0e:71:a8:2f:5c:c3:be:41:f4:fa:64:96:8c:47:88:55:96:
         48:53:47:dc:02:46:8f:64:0f:ab:8d:09:7c:25:b9:56:c1:be:
         c9:ab:b4:05:e7:0d:5c:3b:1a:5d:5d:f3:3b:f3:cb:a4:4c:20:
         3f:17:14:09:63:c5:83:7a:d5:2b:87:24:36:a3:cd:aa:c4:0c:
         02:56:a7:a4:b0:c8:6c:10:59:66:5c:b5:cd:16:9f:08:bb:a5:
         7b:68:42:88:80:9c:07:c8:d9:86:b1:f0:3c:b9:1d:49:f7:b5:
         2b:76:8d:32:f8:76:b7:27:1d:36:2b:b4:29:ce:18:1e:76:bc:
         24:ca:be:4b:71:69:d2:b3:3f:a9:51:29:6e:22:96:a2:8f:fe:
         66:54:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----