Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/473a16ac620dbd5cbbcfdf921e60c48a04079409.roa
File:                     473a16ac620dbd5cbbcfdf921e60c48a04079409.roa (raw, json)
Hash identifier:          ymwDKJcXSNjCL9zZ/DwtAYDfjfNCk1tKq9mYWJ6ld9w=
Subject key identifier:   78:0B:28:E8:9F:27:6C:4E:B6:8B:91:5D:AA:25:0E:56:DA:DB:DC:B4
Certificate issuer:       /CN=6afeb237421bf785392eae0300cf585fb828024b
Certificate serial:       023895
Authority key identifier: 1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/473a16ac620dbd5cbbcfdf921e60c48a04079409.roa
Signing time:             Thu 11 May 2023 13:38:24 +0000
ROA not before:           Wed 10 May 2023 13:38:24 +0000
ROA not after:            Sun 11 May 2025 13:38:24 +0000
asID:                     272951
IP address blocks:        2803:6990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145557 (0x23895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afeb237421bf785392eae0300cf585fb828024b
        Validity
            Not Before: May 10 13:38:24 2023 GMT
            Not After : May 11 13:38:24 2025 GMT
        Subject: CN=473a16ac620dbd5cbbcfdf921e60c48a04079409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:7a:52:a9:bd:5c:84:d9:ff:c6:72:26:3f:
                    50:21:6a:77:61:09:f3:c1:3f:38:9f:4c:e8:9d:c8:
                    92:2c:f1:26:c2:69:1c:88:5e:92:72:f4:0f:d6:b9:
                    c8:01:a0:a9:b7:b7:55:c4:fa:a4:a4:f2:8e:eb:5c:
                    58:75:4a:95:4b:f7:1b:b2:85:25:14:a3:b9:31:e3:
                    85:4b:89:83:7d:cd:64:e6:7e:6c:d2:0b:7b:d8:9c:
                    23:cc:c5:31:2c:11:90:a2:4b:40:97:f8:c9:24:7d:
                    94:d0:ff:6e:1b:8b:17:fe:b9:c3:df:7c:a3:31:6f:
                    a6:c5:e6:29:5d:f9:aa:e6:53:a5:9c:44:d6:0c:0d:
                    a6:05:13:a9:68:e3:8b:2a:1e:12:61:cb:71:e5:3e:
                    ea:49:2d:d2:fd:d0:63:1a:74:07:58:0d:5d:c6:d6:
                    3f:6b:1c:ee:2f:f6:87:9b:6e:df:3f:44:79:7f:d1:
                    ea:59:51:63:80:6a:63:c3:ee:04:75:fc:28:bb:65:
                    e3:8e:f4:f5:95:ab:37:55:18:0b:ff:b4:f8:4c:5f:
                    bc:17:36:03:d7:93:4d:7a:ee:cf:19:54:73:0d:f9:
                    1a:37:f2:7b:88:81:c0:01:df:24:2b:3e:96:a5:d2:
                    92:6a:35:b4:cf:cf:eb:90:e5:f6:04:65:7a:71:c6:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0B:28:E8:9F:27:6C:4E:B6:8B:91:5D:AA:25:0E:56:DA:DB:DC:B4
            X509v3 Authority Key Identifier:
                keyid:1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/473a16ac620dbd5cbbcfdf921e60c48a04079409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/6afeb237421bf785392eae0300cf585fb828024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:96:bc:7f:8a:27:d3:4c:93:f1:19:fb:10:ab:50:90:3d:d7:
         c5:51:71:56:8d:bf:02:b0:e0:e0:51:d3:1b:3c:5f:40:80:0a:
         a6:e4:66:f8:50:98:89:4e:a6:ed:b4:dc:6c:27:2e:59:39:b2:
         fb:c5:8f:1a:3b:c7:db:fb:30:39:9f:4c:50:91:f6:9c:0c:74:
         68:6c:5f:cd:75:03:9c:d5:5d:85:17:aa:75:9c:b0:e3:ce:b1:
         37:e1:19:bd:6b:f6:ae:36:6e:18:dc:86:39:a2:63:c3:c0:eb:
         cd:9a:a5:84:06:1c:d6:bb:44:83:d2:d8:11:22:40:bd:4a:f9:
         cf:cb:82:fb:94:e2:24:51:72:7a:a1:60:6f:a7:31:f8:d1:4b:
         4f:4b:85:1e:e8:c7:45:ae:51:d4:a2:8a:d5:6b:e3:7d:61:c9:
         f3:bf:f6:b1:e3:0d:0b:c1:fa:8b:b6:d2:05:aa:50:50:c9:d3:
         41:96:6f:d1:9c:71:be:d4:2e:e8:62:71:57:b5:31:b8:6e:74:
         ec:e6:1e:7a:46:f2:27:94:79:10:a6:26:e9:a7:b7:ca:72:d2:
         00:1a:99:60:81:6f:39:bf:31:48:d0:5d:c9:db:91:89:ca:5a:
         41:7a:62:42:c7:84:9f:e0:7b:8d:85:37:ee:1a:a7:b6:6f:65:
         63:87:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----