Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b168099-1949-4955-8149-b5511c078014/7a6911102d7c02d4ac9a9dada3939aee7982a75a.roa
File:                     7a6911102d7c02d4ac9a9dada3939aee7982a75a.roa (raw, json)
Hash identifier:          Kc/ioeBD5grVXOS8RMHoHmsFHv6HBLi9EfeauxaoENs=
Subject key identifier:   81:40:6D:CC:4D:05:E1:82:54:78:C6:25:75:BF:E4:73:37:00:E6:ED
Certificate issuer:       /CN=569808b25b9d92bfff27c27675ad93db37e4abd7
Certificate serial:       2BC2
Authority key identifier: B8:E4:B8:A0:AF:67:4A:8A:FD:0D:46:87:E1:C1:93:F0:B4:9F:46:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569808b25b9d92bfff27c27675ad93db37e4abd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b168099-1949-4955-8149-b5511c078014/7a6911102d7c02d4ac9a9dada3939aee7982a75a.roa
Signing time:             Sat 29 Apr 2023 17:27:23 +0000
ROA not before:           Fri 28 Apr 2023 17:27:23 +0000
ROA not after:            Tue 29 Apr 2025 17:27:23 +0000
asID:                     272988
IP address blocks:        2803:8d90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11202 (0x2bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569808b25b9d92bfff27c27675ad93db37e4abd7
        Validity
            Not Before: Apr 28 17:27:23 2023 GMT
            Not After : Apr 29 17:27:23 2025 GMT
        Subject: CN=7a6911102d7c02d4ac9a9dada3939aee7982a75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:9e:28:5d:d0:51:0f:ff:a2:5d:1f:ce:be:
                    c1:bf:dc:56:ff:49:0f:61:70:16:0d:fa:46:b1:0d:
                    d0:4a:12:19:58:c5:11:4b:49:8d:14:da:7e:2a:d6:
                    1c:07:8d:e5:cd:2b:96:40:a3:ad:04:b1:b5:17:83:
                    6d:51:96:d2:69:f9:b9:58:25:41:a6:e7:09:1d:b4:
                    29:74:c8:ba:a6:ed:dd:78:72:c5:06:1e:c8:ab:b8:
                    87:25:44:9c:51:8b:a1:ef:de:da:ae:9c:05:b9:81:
                    d1:5b:86:81:86:90:32:39:a0:72:1c:fc:00:c0:05:
                    c3:db:89:77:19:f0:03:f3:ce:c9:f0:b8:e1:ce:23:
                    f3:6a:22:03:f2:98:61:bb:16:95:b5:a8:1d:40:80:
                    4f:69:28:f3:0a:85:26:31:a4:c4:f4:64:ba:fb:8f:
                    ff:b9:b1:6e:c7:a2:e6:ab:71:be:c3:6f:6c:81:cf:
                    4a:e4:3d:9c:fc:8b:8f:4c:c1:32:02:a4:e5:9f:ab:
                    e3:b1:86:13:06:c1:34:16:62:d9:a6:fb:17:c3:32:
                    22:72:0d:6d:e5:b2:39:ab:ff:47:3f:65:cb:50:8f:
                    9b:4f:9e:3f:6f:28:91:05:95:93:8f:0d:fd:e4:1d:
                    f5:2b:c4:1b:f0:7f:47:cf:c2:43:68:9d:05:54:8f:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:6D:CC:4D:05:E1:82:54:78:C6:25:75:BF:E4:73:37:00:E6:ED
            X509v3 Authority Key Identifier:
                keyid:B8:E4:B8:A0:AF:67:4A:8A:FD:0D:46:87:E1:C1:93:F0:B4:9F:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569808b25b9d92bfff27c27675ad93db37e4abd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b168099-1949-4955-8149-b5511c078014/7a6911102d7c02d4ac9a9dada3939aee7982a75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b168099-1949-4955-8149-b5511c078014/569808b25b9d92bfff27c27675ad93db37e4abd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:1d:84:04:f2:a5:fa:70:3d:52:9e:f2:3b:d0:68:e6:6f:
         0c:d0:00:3b:d1:20:67:82:6f:bd:02:40:dd:78:73:00:a6:52:
         0d:80:23:86:f2:3b:a5:71:dc:8e:9c:ba:e7:95:fe:34:e8:6a:
         6f:d7:1c:d7:76:fe:4d:45:3a:e9:14:e5:0a:b6:d9:f9:b5:f4:
         ab:8f:53:a3:11:f3:08:44:d0:09:98:54:50:1a:42:5c:a9:97:
         31:50:28:32:ca:3a:3a:43:82:e6:47:5c:33:87:59:8c:46:97:
         2a:3f:08:07:4c:d7:d2:75:e2:c9:26:61:06:fe:8b:0c:c8:29:
         0f:69:d6:9d:46:33:76:74:e9:75:f7:34:f3:84:30:e0:80:b7:
         65:65:87:0e:01:43:69:34:e7:2e:88:04:66:4a:00:20:b1:7d:
         ab:8f:08:67:b9:b1:ef:3d:f7:88:34:fd:fe:3b:9f:5c:3e:e0:
         42:43:6c:65:6e:cb:12:9c:f1:33:63:99:b8:97:ef:55:67:77:
         8b:e6:06:f8:7a:e8:7c:8e:55:16:69:4b:b9:ea:ad:59:3d:cc:
         a5:62:42:bd:95:06:3b:a2:a9:4b:25:67:3b:cd:a5:5a:16:a3:
         ea:86:cc:a7:e5:a1:13:4a:c4:8b:b6:aa:2f:41:91:ee:31:a5:
         73:c7:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----