Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/183bf89084c80db9dcd58840a666dfa13bc02a70.roa
File:                     183bf89084c80db9dcd58840a666dfa13bc02a70.roa (raw, json)
Hash identifier:          4YRO8W7MoWjaIOrt+465vttXPOenmBgbeL3Zo1+rWtg=
Subject key identifier:   A3:D1:82:A5:9F:45:E7:3D:A8:06:A2:09:50:59:E5:6B:83:6A:96:85
Certificate issuer:       /CN=ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba
Certificate serial:       20135A
Authority key identifier: 49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/183bf89084c80db9dcd58840a666dfa13bc02a70.roa
Signing time:             Wed 17 May 2023 13:55:56 +0000
ROA not before:           Tue 16 May 2023 13:55:56 +0000
ROA not after:            Wed 17 May 2028 13:55:56 +0000
asID:                     14259
IP address blocks:        2803:d780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102106 (0x20135a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba
        Validity
            Not Before: May 16 13:55:56 2023 GMT
            Not After : May 17 13:55:56 2028 GMT
        Subject: CN=183bf89084c80db9dcd58840a666dfa13bc02a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:e8:5b:64:d9:27:fc:69:da:89:83:39:c2:
                    65:a0:de:c1:27:f0:3a:d6:6a:5f:1f:09:f0:d2:32:
                    1f:34:24:29:f6:da:b7:21:8e:85:b2:f6:d6:d3:6d:
                    6c:c9:c8:ac:9f:95:18:0a:e9:c9:5b:50:35:e6:5c:
                    d3:d5:52:67:f2:36:19:aa:09:78:45:72:e9:c5:bc:
                    0c:90:c7:77:c7:3e:bd:94:04:77:27:43:0f:ee:02:
                    5f:28:89:66:7f:44:eb:11:09:dd:24:34:7b:33:6e:
                    30:ae:67:16:d4:0d:68:47:19:1f:a2:41:64:92:41:
                    19:2e:d6:4a:8f:88:ca:69:d3:b7:7f:36:07:f7:27:
                    af:a5:ae:b6:f5:b7:ca:ef:1a:09:28:25:c9:43:e1:
                    36:83:43:55:dc:51:f7:8f:0b:d3:14:d6:2e:87:8d:
                    e2:77:c4:24:7c:ee:64:2c:b8:f2:af:ab:e1:0f:ba:
                    f6:50:b7:a2:ca:0a:1d:40:4a:62:b5:bb:f8:a3:45:
                    a7:52:fe:17:61:61:4b:7b:aa:ee:89:e4:b0:e1:42:
                    8d:a9:f9:4c:a5:69:2e:2d:3d:c4:41:6e:af:fb:ad:
                    8e:cf:41:09:31:35:cb:92:87:e2:70:9e:13:a8:2c:
                    70:aa:21:ec:a2:7e:ce:b8:04:60:72:a6:bf:7d:dc:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:82:A5:9F:45:E7:3D:A8:06:A2:09:50:59:E5:6B:83:6A:96:85
            X509v3 Authority Key Identifier:
                keyid:49:A3:4F:5C:E1:4F:A1:E4:9D:E6:5E:E9:10:16:62:25:A9:3A:E0:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/183bf89084c80db9dcd58840a666dfa13bc02a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a46795f-51fd-4be5-8d49-9f4aaa0cc8d9/ef39bbe86ada2cf7c5a7c86fa016e30c06d2c2ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d780::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:9d:42:65:af:b1:0b:0d:e5:41:8c:f3:a6:62:98:1d:1b:
         f7:9f:9a:cb:35:96:53:f4:32:01:5b:69:8f:cf:6e:08:23:5a:
         23:74:7b:7d:f9:59:3e:b7:52:fe:56:58:04:14:52:48:ab:9b:
         68:08:4e:89:9c:46:59:a1:d7:b9:9a:2e:2e:d9:1b:d9:94:21:
         80:ec:c4:41:7a:22:35:1e:34:b0:8a:a3:f1:0f:96:5f:b6:4d:
         64:f5:6b:a6:dd:2d:76:e2:58:49:59:1a:2c:d3:cf:40:7c:e1:
         f5:fa:34:91:e6:2f:da:27:57:5a:9e:0f:fb:7d:7b:de:74:3f:
         ab:bc:81:a2:54:39:37:f0:4b:40:7b:9e:aa:85:5f:83:7c:2c:
         23:d6:d4:3b:b2:3d:8a:a8:b5:ed:4f:48:00:aa:b0:80:ab:a5:
         92:ac:bd:71:9a:33:e2:b3:ea:d2:33:12:d1:8a:ca:be:61:c4:
         87:ba:ef:57:4c:73:54:d5:17:a2:18:31:22:a8:ec:e1:68:2c:
         4d:03:89:23:12:2d:1c:02:fc:fe:0d:3a:61:00:65:6e:3c:b4:
         c9:c0:4c:36:72:77:82:c1:da:e7:0c:bb:3d:af:4f:3f:ed:76:
         0f:cf:ba:81:9f:d0:fd:14:45:4a:36:19:e0:ca:f4:80:e8:2e:
         9f:5d:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----