Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/9f3eff124772b02a418dba43d68e5fd9097fcb79.roa
File:                     9f3eff124772b02a418dba43d68e5fd9097fcb79.roa (raw, json)
Hash identifier:          vjpyFWOBrct4ndh6MIy18Hng4E3pQ8HI6JR7EFXErhk=
Subject key identifier:   4F:9C:72:5E:7B:EF:FE:2E:DA:1B:BA:2E:43:D8:28:D1:B3:28:03:F1
Certificate issuer:       /CN=a207cb2f14582ea28aa604734d5ad48d807bd643
Certificate serial:       1E06B7
Authority key identifier: C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/9f3eff124772b02a418dba43d68e5fd9097fcb79.roa
Signing time:             Sat 15 Apr 2023 18:55:40 +0000
ROA not before:           Fri 14 Apr 2023 18:52:24 +0000
ROA not after:            Tue 15 Apr 2025 18:52:24 +0000
asID:                     269736
IP address blocks:        2803:8960::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967799 (0x1e06b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a207cb2f14582ea28aa604734d5ad48d807bd643
        Validity
            Not Before: Apr 14 18:52:24 2023 GMT
            Not After : Apr 15 18:52:24 2025 GMT
        Subject: CN=9f3eff124772b02a418dba43d68e5fd9097fcb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:3c:ee:d3:2c:22:5f:8e:be:f8:cd:3a:13:
                    73:fd:5f:47:f8:1e:56:eb:7f:23:72:73:62:4d:c6:
                    5e:d7:5b:8b:86:3c:3d:83:e6:b9:f2:a0:ab:67:64:
                    08:dc:c6:5a:3d:11:43:ff:3a:14:e6:f1:87:eb:82:
                    8a:64:13:63:c2:a4:63:0f:a4:9b:22:4c:10:57:e0:
                    89:e0:70:bf:e3:0c:34:36:e2:9d:c7:df:5a:53:3d:
                    80:5b:c5:ed:9a:87:75:4d:8a:1d:3b:f8:f8:9d:af:
                    c8:2e:cb:f9:c6:83:14:33:68:79:8f:d4:01:f1:bd:
                    44:8d:30:1f:0a:2b:fd:db:94:87:6f:cf:24:5d:f6:
                    3e:ea:9e:8e:ea:21:31:09:61:0b:7f:2b:9e:e5:be:
                    0d:69:c9:8c:85:d4:55:9e:d1:62:2e:2d:70:e6:35:
                    9e:8c:c1:0b:a4:63:d0:ff:3a:30:a1:60:ab:8b:26:
                    d2:56:79:e0:dc:c5:0e:fc:bd:b1:b4:6e:8f:90:4c:
                    36:87:e6:ff:a9:63:ee:37:16:4e:46:2d:68:cd:32:
                    b1:0d:0b:df:2d:a3:80:4f:0b:91:fe:5c:74:6e:60:
                    d2:a5:f5:0e:25:a9:da:91:41:f1:63:94:32:b4:3e:
                    45:ce:c2:7b:44:9e:9b:62:79:21:ee:25:ec:8d:c3:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:72:5E:7B:EF:FE:2E:DA:1B:BA:2E:43:D8:28:D1:B3:28:03:F1
            X509v3 Authority Key Identifier:
                keyid:C0:6A:C0:F0:C7:04:DC:7E:24:D1:CB:D4:12:8A:2C:E2:26:64:37:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a207cb2f14582ea28aa604734d5ad48d807bd643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/9f3eff124772b02a418dba43d68e5fd9097fcb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/506f2045-77c2-435d-8e2a-d6576b507dbe/a207cb2f14582ea28aa604734d5ad48d807bd643.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:7d:8d:10:18:9c:73:cb:bf:a0:24:d6:4f:23:08:66:a4:
         6c:7c:1e:f4:f3:79:5a:29:39:c4:17:c9:fe:74:15:e2:f1:3c:
         4b:c5:5f:2e:f6:59:09:b4:34:51:93:30:00:b2:5f:db:6b:40:
         d2:f2:23:2c:b5:52:ba:b0:cb:a6:3f:97:06:07:55:65:65:3a:
         d4:16:11:9b:59:03:70:7d:72:8d:a8:eb:f9:13:ae:d3:e1:09:
         8e:5b:17:71:30:6a:ee:ee:ff:13:f0:01:c9:eb:b9:62:28:1d:
         de:87:e5:47:42:48:b8:b9:d7:c0:35:86:34:41:92:cc:54:ba:
         f4:0a:31:d2:5a:e5:fe:4d:89:b9:67:a5:02:9a:4b:be:4a:8b:
         da:89:8a:fb:58:cd:4e:b1:ea:2b:17:1c:cc:23:99:28:81:55:
         80:9e:2e:ce:83:b3:d0:fb:a8:a8:bc:50:0d:f0:5c:6a:60:58:
         cf:ce:a7:0b:b9:a2:03:84:76:ff:24:09:10:a6:a2:94:15:61:
         1f:11:30:24:15:c3:de:75:5f:3d:93:50:e1:76:be:df:dc:69:
         ba:5b:3e:9e:90:18:62:fd:3a:6e:25:c0:fc:0b:3f:36:8d:24:
         f8:53:34:af:5f:98:04:5d:65:cb:7b:09:08:7f:40:49:a2:bc:
         e0:6b:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----