Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/2654f3a136b16fafc288b8ac844d91e599d01338.roa
File:                     2654f3a136b16fafc288b8ac844d91e599d01338.roa (raw, json)
Hash identifier:          pmofKh7Lb+G4Mqkv1QH5A9dA+CWIfEgqsJ/Ot1sAMRI=
Subject key identifier:   64:5B:08:65:58:48:CE:98:90:95:05:78:58:9D:D5:AF:D9:CA:02:A6
Certificate issuer:       /CN=3e9fb67f683a9f133313d58c2a61dabb59c3d853
Certificate serial:       01225F
Authority key identifier: A7:C6:77:5B:38:FA:E6:69:BA:12:42:C3:DE:E0:B2:F1:B6:19:3B:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e9fb67f683a9f133313d58c2a61dabb59c3d853.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/2654f3a136b16fafc288b8ac844d91e599d01338.roa
Signing time:             Wed 05 Jul 2023 03:32:30 +0000
ROA not before:           Tue 04 Jul 2023 03:32:30 +0000
ROA not after:            Sat 05 Jul 2025 03:32:30 +0000
asID:                     273000
IP address blocks:        2803:5d90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74335 (0x1225f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9fb67f683a9f133313d58c2a61dabb59c3d853
        Validity
            Not Before: Jul  4 03:32:30 2023 GMT
            Not After : Jul  5 03:32:30 2025 GMT
        Subject: CN=2654f3a136b16fafc288b8ac844d91e599d01338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:70:34:71:57:31:d3:fd:c1:b5:6c:07:1e:34:
                    2b:08:7e:f4:6d:5b:81:7b:4a:e1:36:b1:a7:8d:51:
                    fe:b1:7a:de:53:22:e0:17:30:57:0c:c5:68:d5:0d:
                    f7:a3:43:f9:22:a6:eb:ff:de:c5:16:7d:f2:d7:70:
                    13:65:6a:c5:4e:5f:b6:b5:13:89:24:f0:2a:50:60:
                    86:30:6e:2b:1a:da:19:e7:70:f3:e3:9d:df:6e:cd:
                    32:42:2c:67:d4:ee:ce:0f:8e:ae:5b:43:37:d1:32:
                    f5:26:0b:a6:bb:3a:ef:c4:09:32:87:f2:b8:5d:20:
                    75:a3:f1:cc:fa:fc:17:b6:3e:4d:a2:ac:d9:f6:f3:
                    a4:9e:41:cf:7d:f1:7f:c1:93:6f:cb:3b:b5:55:d4:
                    36:fa:46:d0:ad:1c:5d:ff:cf:36:2a:79:96:2b:47:
                    5a:14:47:40:c0:48:7a:49:43:3f:62:73:5a:9c:fa:
                    29:8e:f3:da:da:17:8a:c1:f1:2c:9e:63:9b:ac:27:
                    2d:f6:8e:24:6b:23:26:90:87:09:c0:91:df:01:1d:
                    ae:9b:27:5e:b3:ba:c6:96:aa:89:89:b1:21:c6:8f:
                    03:75:94:26:a0:ee:33:fc:6a:e6:b3:ef:7d:50:f9:
                    de:b9:16:89:e8:b5:ca:a4:c7:66:b1:e7:44:d2:c3:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5B:08:65:58:48:CE:98:90:95:05:78:58:9D:D5:AF:D9:CA:02:A6
            X509v3 Authority Key Identifier:
                keyid:A7:C6:77:5B:38:FA:E6:69:BA:12:42:C3:DE:E0:B2:F1:B6:19:3B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e9fb67f683a9f133313d58c2a61dabb59c3d853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/2654f3a136b16fafc288b8ac844d91e599d01338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/3e9fb67f683a9f133313d58c2a61dabb59c3d853.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:14:c8:7d:06:92:b7:71:61:0b:df:a1:45:23:bc:f2:aa:
         82:7e:d4:00:ea:3c:46:d5:ac:0d:42:32:c0:27:cf:43:5d:77:
         c3:eb:32:50:4c:55:f1:de:c3:b5:97:0a:6c:62:0e:89:05:19:
         ad:87:ba:f0:f1:55:e9:24:61:17:cb:a5:b0:da:a0:d3:00:6f:
         8c:c6:0f:61:d9:8b:f6:0e:24:74:fc:e4:3e:75:f4:4f:04:1e:
         b4:1a:2d:46:c8:a0:12:b8:37:36:91:2e:39:e7:b1:b0:81:1c:
         8a:7a:03:a3:a7:18:9d:a4:ec:b8:e8:d1:f9:83:77:a7:ac:2c:
         9a:42:7e:8d:7f:26:1d:f0:de:eb:47:bb:3f:ef:7c:46:be:47:
         1d:bb:e9:5c:c5:93:c4:1e:cf:92:da:b3:42:c3:eb:bf:63:3c:
         67:e7:a6:91:4c:b5:25:e2:ae:f2:1f:7b:c1:32:62:8f:16:b7:
         80:60:24:05:60:2f:d0:bf:10:2b:0d:fb:c2:5d:0b:56:10:ca:
         94:8a:de:ab:43:71:e7:22:15:bb:a6:0d:72:f6:c3:e3:12:2a:
         b4:ce:8a:34:12:a7:e7:af:6a:24:0c:93:22:8f:1c:21:64:6f:
         10:e0:88:38:78:39:5a:da:6e:64:91:9f:95:42:49:fd:ec:12:
         65:8b:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----