Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/b225a93a036218900b94c1a9d2105258c8cc4699.roa
File:                     b225a93a036218900b94c1a9d2105258c8cc4699.roa (raw, json)
Hash identifier:          ZrshzqH9cGgjNupIbMjNfeWON5j3dus0nXDPjUA6Mbg=
Subject key identifier:   3E:D2:C9:A0:65:83:73:A3:D1:2D:85:01:61:8B:B7:26:66:89:63:BA
Certificate issuer:       /CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
Certificate serial:       01A5BC
Authority key identifier: B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/b225a93a036218900b94c1a9d2105258c8cc4699.roa
Signing time:             Sat 01 Jul 2023 01:00:46 +0000
ROA not before:           Fri 30 Jun 2023 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     269811
IP address blocks:        2803:3b60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107964 (0x1a5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
        Validity
            Not Before: Jun 30 01:00:46 2023 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=b225a93a036218900b94c1a9d2105258c8cc4699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:94:5b:8b:1c:8c:1c:68:f3:55:ec:b9:02:
                    bd:b3:8a:63:ce:c4:a8:8f:a1:6c:6d:2c:61:67:38:
                    64:15:bc:c9:ac:29:6d:d7:62:7d:59:9e:5c:a4:af:
                    16:a9:f3:5a:17:65:14:92:d3:4b:f6:a6:aa:3e:1f:
                    c4:29:ad:4e:be:54:20:3a:44:82:9f:8d:eb:44:71:
                    1c:48:84:41:b4:44:14:fb:a7:0c:73:51:b0:a5:a2:
                    9a:80:67:a6:61:08:f0:47:ba:6e:d2:4e:c3:6f:98:
                    ff:e5:38:ae:49:c2:2d:c5:1d:24:bd:6e:89:f0:72:
                    db:72:46:91:2b:e2:cc:13:2a:58:7d:8d:7f:e9:81:
                    af:e1:d8:01:3d:cd:5f:7b:72:2e:62:5f:0e:2e:59:
                    1a:36:d8:8e:e7:9b:59:3a:dd:8e:50:1e:85:17:cd:
                    1f:10:46:fe:4b:f3:3e:7b:77:48:32:c5:7b:18:bf:
                    8b:c4:e4:79:2c:a1:6c:f6:ac:54:3a:65:99:90:87:
                    05:42:d9:f9:8f:9b:7b:f1:09:ea:be:dd:02:aa:1c:
                    ae:be:7e:e9:ba:27:5f:2d:31:12:7c:55:18:3a:78:
                    c1:19:6f:05:62:33:5d:50:10:9d:3a:92:c8:7a:22:
                    bf:df:7d:78:ca:17:e2:6e:79:b0:2e:16:4b:e3:56:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:C9:A0:65:83:73:A3:D1:2D:85:01:61:8B:B7:26:66:89:63:BA
            X509v3 Authority Key Identifier:
                keyid:B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/b225a93a036218900b94c1a9d2105258c8cc4699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:93:87:67:25:fd:2c:7d:a0:9a:5a:f2:bc:5a:9b:1c:5a:cc:
         71:5f:f7:35:9d:c0:36:76:3e:df:cd:59:f5:96:39:35:fa:4f:
         91:25:50:5b:50:b0:50:ec:db:60:fb:2a:79:c6:99:8a:63:db:
         b9:4c:68:d9:cb:9d:47:e7:28:a0:cf:ab:af:85:fa:0e:35:8c:
         8b:4b:6f:c4:15:bc:f4:de:2d:22:d4:f1:ad:fb:44:f8:bd:95:
         02:1f:f0:7b:e8:c4:de:30:ac:3f:09:e2:b8:6c:0b:5e:8a:f1:
         b0:98:ff:7d:92:98:c4:f5:97:b4:2a:b9:55:0d:32:9d:26:93:
         91:80:5a:ea:ff:7f:bd:c8:4a:3a:27:20:5c:8c:14:f8:d4:a4:
         ab:63:17:01:3c:ab:b9:95:35:99:70:b3:22:0e:5b:1e:8d:c3:
         03:00:2e:6c:bb:aa:aa:da:96:d9:81:30:15:c6:c2:ad:c6:cd:
         fa:9d:b6:b9:68:5a:c8:b1:e7:62:7b:b9:05:72:04:ac:67:84:
         5a:d0:a6:3a:da:9c:e8:b0:bf:d9:40:7f:71:12:1c:86:63:01:
         30:97:65:76:6c:88:be:ed:61:07:8c:32:80:0a:f0:5b:36:40:
         f6:75:38:e6:d8:83:7b:67:e6:6a:1d:b3:67:80:15:24:dd:b2:
         f9:d5:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----