Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/7578c1455dfb163fb23f8b5d1eea50a242717ab7.roa
File:                     7578c1455dfb163fb23f8b5d1eea50a242717ab7.roa (raw, json)
Hash identifier:          p2gtFF53q42LeRq03SSHRuJTogH8L2FlHmXw4AOTkPs=
Subject key identifier:   63:BF:30:55:D8:56:6D:AE:6A:7F:82:8D:94:59:BF:D1:96:10:70:2E
Certificate issuer:       /CN=83224a116c610d8fbb400355d82709d9c5e1946b
Certificate serial:       1EAD17
Authority key identifier: EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/7578c1455dfb163fb23f8b5d1eea50a242717ab7.roa
Signing time:             Tue 06 Jun 2023 20:43:09 +0000
ROA not before:           Mon 05 Jun 2023 20:43:09 +0000
ROA not after:            Fri 06 Jun 2025 20:43:09 +0000
asID:                     264668
IP address blocks:        2803:1f60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010391 (0x1ead17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83224a116c610d8fbb400355d82709d9c5e1946b
        Validity
            Not Before: Jun  5 20:43:09 2023 GMT
            Not After : Jun  6 20:43:09 2025 GMT
        Subject: CN=7578c1455dfb163fb23f8b5d1eea50a242717ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:1e:54:54:0d:14:1a:c3:ce:3a:4c:78:e2:
                    66:75:3e:6c:7f:a2:1c:a7:42:1a:a2:d9:b9:67:d1:
                    a4:78:5f:2d:1e:c1:2d:12:a2:41:6b:a5:5a:e8:fb:
                    a6:52:68:f8:96:f5:41:82:51:84:63:2f:d4:60:08:
                    5f:02:1a:e1:48:1e:2b:a8:68:92:6a:01:ef:7c:40:
                    57:f3:0c:0c:15:56:2c:5c:b2:4f:ab:df:f1:6f:dc:
                    47:f6:18:6a:4d:2f:09:d1:bd:83:72:78:04:86:f1:
                    6a:26:f2:4a:80:79:32:42:92:d8:50:e5:3e:10:3a:
                    df:33:a0:ea:2c:4c:15:5c:f9:0b:70:42:a0:4e:67:
                    ee:7f:7e:ad:11:6a:28:01:48:cd:e4:95:14:b1:10:
                    4a:ad:f9:20:a3:5e:c1:36:f9:ac:cf:b9:20:36:f4:
                    9f:fb:b8:8f:99:a8:87:79:10:09:b1:98:41:87:4f:
                    83:26:13:a7:db:52:25:2a:74:3c:8d:55:21:f1:0c:
                    06:c8:db:d2:3d:79:65:b1:be:f4:de:04:8a:fd:21:
                    36:67:60:b4:74:67:4f:09:df:4e:bb:68:90:33:c9:
                    ae:98:8c:df:ed:78:a2:6c:9b:00:4d:ef:ea:07:48:
                    17:b7:1f:2a:ff:0e:4c:cf:61:3f:67:f1:0a:56:09:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:30:55:D8:56:6D:AE:6A:7F:82:8D:94:59:BF:D1:96:10:70:2E
            X509v3 Authority Key Identifier:
                keyid:EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/7578c1455dfb163fb23f8b5d1eea50a242717ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/83224a116c610d8fbb400355d82709d9c5e1946b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:22:e4:1d:4c:73:b4:6a:b6:6a:5f:89:86:69:64:88:2e:0d:
         3d:17:4f:f6:ee:0d:9e:e4:26:ae:38:c8:b7:94:38:2e:6f:f3:
         c1:4e:5a:77:81:70:3d:af:14:22:4b:89:d7:68:de:50:87:fb:
         84:e6:45:24:73:35:c7:69:99:7e:0c:08:30:c9:26:c8:6c:c6:
         00:6d:1d:07:31:de:31:4a:31:40:1e:45:ef:75:c5:90:fa:94:
         ce:55:53:9e:2c:88:0b:b6:4f:be:ee:2d:f0:05:b0:f9:7e:02:
         f3:fd:ef:93:a2:9f:7c:be:c4:3f:f7:02:c0:b4:68:73:96:02:
         58:34:63:05:ad:7a:11:c8:5c:8e:47:98:ec:67:99:c7:f4:a9:
         20:7f:bb:fe:42:3b:58:83:70:67:ee:06:71:ab:cd:91:12:c6:
         4e:66:1c:1a:2b:e9:47:46:09:dc:ae:56:d4:5b:95:7d:c0:79:
         df:11:cd:7f:4c:a9:8e:3c:19:d5:ca:a5:5c:df:ff:3f:a8:c3:
         08:83:c3:62:f7:82:94:00:4a:d1:7a:9c:d5:a4:21:24:37:bc:
         fc:b8:19:02:04:3d:2f:18:4c:ca:74:a6:fa:a7:43:77:02:25:
         d1:fa:c4:51:b0:e4:7c:b3:c9:8e:33:90:23:a1:1d:3d:89:e6:
         ed:9d:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----