Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa
File:                     4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa (raw, json)
Hash identifier:          3Gmx7/ox7ZfLM2nOCQZWnlrtFPh7ZyXD22HkuK+xxd4=
Subject key identifier:   C0:9C:2E:5D:7C:57:65:F7:3A:6B:20:27:C1:BB:9F:EA:10:DB:6A:D2
Certificate issuer:       /CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
Certificate serial:       075EF7
Authority key identifier: D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa
Signing time:             Mon 22 May 2023 17:15:40 +0000
ROA not before:           Sun 21 May 2023 17:15:40 +0000
ROA not after:            Thu 22 May 2025 17:15:40 +0000
asID:                     272030
IP address blocks:        2803:5510::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483063 (0x75ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
        Validity
            Not Before: May 21 17:15:40 2023 GMT
            Not After : May 22 17:15:40 2025 GMT
        Subject: CN=4786bfe9ac1356a671e3817f3a16f369c5277e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:ba:33:a4:4d:7c:11:9a:93:23:fb:c2:93:
                    92:f8:bc:d3:6a:2d:59:fa:24:95:f1:61:9a:df:42:
                    dd:8e:5f:d2:63:6a:41:16:f7:77:6b:21:ac:45:1a:
                    b6:e9:dc:0e:7d:cb:a8:95:86:a4:b9:d7:7a:68:86:
                    a1:8d:0d:d6:14:77:6d:bc:be:30:af:34:a9:87:f5:
                    b9:14:ca:b5:3e:a0:ea:ca:3b:44:af:ca:5c:91:00:
                    52:57:94:a8:b2:66:51:40:f2:ef:f4:43:6b:81:8c:
                    f5:ac:a5:76:0b:40:b1:b6:cd:d0:8f:11:e8:69:bd:
                    35:d8:32:d8:b4:1a:37:d9:52:14:55:b1:2b:33:80:
                    be:d7:39:fb:60:ce:b3:8c:1e:b4:3d:84:6d:db:7b:
                    93:15:11:47:6e:07:fc:33:ce:03:9e:36:28:d1:d8:
                    9c:43:15:50:59:ce:ac:20:6e:79:b6:5a:09:45:2c:
                    29:49:d3:e8:35:a2:96:6e:dc:5d:34:a5:d0:99:f6:
                    97:79:1a:1e:75:11:d4:6c:5f:66:50:ec:96:29:30:
                    92:d7:d2:56:cd:5a:2c:56:fe:5c:f9:af:29:ae:a8:
                    36:68:35:e0:c0:85:51:f4:ce:53:6c:d6:3b:22:3e:
                    8e:27:1b:f3:ff:cb:2f:c3:74:b6:78:5e:19:2f:fa:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9C:2E:5D:7C:57:65:F7:3A:6B:20:27:C1:BB:9F:EA:10:DB:6A:D2
            X509v3 Authority Key Identifier:
                keyid:D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/4786bfe9ac1356a671e3817f3a16f369c5277e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5510::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:50:82:25:57:b4:37:68:5e:d4:d6:a0:34:bb:66:a1:84:
         4e:f8:57:8d:be:71:51:52:0b:37:38:30:21:d7:26:8e:17:99:
         53:19:85:25:1f:20:d0:ba:44:14:26:11:e4:77:c8:94:2b:d7:
         0b:26:45:95:b9:98:86:b9:41:28:f9:9b:5a:27:95:3e:22:60:
         75:07:a9:33:21:01:a8:27:58:55:88:17:eb:52:0d:bf:9c:e7:
         1e:c4:da:06:28:2b:b7:5a:4b:23:d9:8c:f0:8e:4c:0d:1f:03:
         8c:4d:28:ac:9a:36:e4:c6:92:ed:0a:30:76:19:17:a2:ef:db:
         b8:e0:e9:30:31:c5:51:01:20:9b:1b:69:af:b2:05:96:ca:79:
         3b:1d:f3:88:10:d3:e9:12:3f:b6:c9:e5:1c:45:f1:42:34:21:
         6d:14:b0:78:54:10:47:bc:ed:89:48:23:69:64:eb:ba:c1:76:
         37:24:b3:d5:80:09:83:de:c4:d9:d5:45:18:c1:84:20:ef:4d:
         e1:c1:c4:3d:b7:bb:a3:69:d5:2d:43:0d:2f:0a:3d:c9:2c:32:
         0a:70:67:17:ed:f5:c4:02:70:1d:fd:d4:50:f9:b0:dc:1e:bb:
         c9:e9:20:64:6a:cd:b2:d8:63:87:7c:61:24:50:1d:02:e5:6f:
         aa:b3:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----