Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/c05cdef8d23b9344e69821b1a6d626b6140cad7e.roa
File:                     c05cdef8d23b9344e69821b1a6d626b6140cad7e.roa (raw, json)
Hash identifier:          gInQz0+RwTdMNcEguYOdwlS1Ih10xVSvZWp9Nfp6i+Y=
Subject key identifier:   46:CD:F6:6B:C3:AF:BA:DA:C4:7C:26:68:F0:A2:74:E8:8F:47:88:7D
Certificate issuer:       /CN=6afeb237421bf785392eae0300cf585fb828024b
Certificate serial:       06F2
Authority key identifier: 1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/c05cdef8d23b9344e69821b1a6d626b6140cad7e.roa
Signing time:             Thu 16 Feb 2023 17:06:32 +0000
ROA not before:           Tue 14 Feb 2023 13:51:11 +0000
ROA not after:            Sun 16 Feb 2025 13:51:11 +0000
asID:                     272951
IP address blocks:        2803:6990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afeb237421bf785392eae0300cf585fb828024b
        Validity
            Not Before: Feb 14 13:51:11 2023 GMT
            Not After : Feb 16 13:51:11 2025 GMT
        Subject: CN=c05cdef8d23b9344e69821b1a6d626b6140cad7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:51:f6:2a:e5:b4:52:3f:51:ca:a4:a9:53:
                    fc:ca:a1:85:34:73:75:01:fb:2d:14:19:87:8f:56:
                    0b:bf:ee:fe:01:2e:6f:da:22:a6:db:1a:62:2b:80:
                    c0:ca:1a:2c:75:2b:8c:e9:2f:74:34:0a:f2:1a:6a:
                    6c:14:da:a8:79:4f:e9:7e:8f:a9:b4:11:c1:dd:18:
                    87:28:ef:f4:06:e6:22:9c:4a:d5:6e:0e:4d:d8:32:
                    5e:98:eb:8b:f3:c2:96:0e:39:ac:7c:72:05:84:38:
                    7f:b8:85:93:1f:c7:81:e6:bd:31:b9:6a:07:41:1d:
                    92:80:74:4c:34:eb:e6:e8:7a:f2:e0:b4:5a:c7:7c:
                    b4:c5:aa:af:af:37:14:c6:77:82:d7:37:d0:cb:d3:
                    4c:90:6f:9d:bc:b1:83:d3:14:c1:04:75:61:91:63:
                    a0:93:72:e8:19:5a:b8:b3:f4:bf:33:da:93:af:44:
                    cb:47:c6:7f:d8:04:1b:a4:be:d6:4f:14:a7:6c:72:
                    58:e1:9a:0e:02:5e:fe:b5:a2:b9:e3:9e:62:04:aa:
                    00:ca:20:f3:5a:a4:a6:82:14:4d:a9:f3:9f:7a:bc:
                    58:97:e0:ec:3a:98:c8:87:e5:c4:66:95:7f:a3:64:
                    bc:50:c4:8b:96:4b:8a:10:9d:3b:59:28:9f:0b:c3:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:F6:6B:C3:AF:BA:DA:C4:7C:26:68:F0:A2:74:E8:8F:47:88:7D
            X509v3 Authority Key Identifier:
                keyid:1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/c05cdef8d23b9344e69821b1a6d626b6140cad7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/6afeb237421bf785392eae0300cf585fb828024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:0f:17:b1:25:9e:cd:f0:e7:a1:5c:ef:39:fe:92:4b:79:
         e1:97:20:56:59:e1:f6:ef:ef:11:46:50:ba:26:e4:bd:1c:1e:
         16:c5:ea:6c:07:7a:3c:6a:f0:00:d5:ac:5b:c1:75:ba:23:c4:
         50:78:5d:76:12:50:57:46:ec:ce:66:93:93:35:67:27:f3:0d:
         d0:20:ac:c3:40:82:de:7a:89:90:cf:d5:47:aa:5f:67:da:80:
         a5:d0:e1:a2:69:92:b4:df:42:6c:ec:45:a8:bd:71:9f:dd:39:
         b3:1b:00:83:2c:46:d4:db:78:0c:eb:58:80:47:7c:fc:c3:5b:
         34:b0:1b:50:da:4e:9a:d4:c1:5b:bd:46:27:8e:ee:9a:02:5b:
         65:6e:4e:10:bb:6a:20:2b:d4:f6:7b:6e:6f:33:89:03:c9:9c:
         92:0e:70:7e:09:9c:70:f8:c5:30:69:06:55:01:36:1d:10:55:
         05:45:63:77:08:ab:13:f1:0b:fb:65:c1:83:ef:fe:c6:66:8e:
         87:e9:04:f9:a7:9a:e1:ab:b4:9b:3d:b7:c1:5e:1d:be:6a:d0:
         bb:5c:5d:fb:fc:5c:d2:12:3d:08:51:d9:69:09:dc:af:d7:af:
         f1:fd:6e:2f:30:10:39:dd:f0:d2:86:db:d6:6f:ef:64:dc:af:
         ac:78:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----