Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/91776ca530778d0cf9bd86b8c1385283a489eba0.roa
File:                     91776ca530778d0cf9bd86b8c1385283a489eba0.roa (raw, json)
Hash identifier:          0/qSs2mBlkKORLXtpPJwih0eaULnLW9WxN75oNHSvEA=
Subject key identifier:   2C:2F:5E:84:36:EE:63:5A:94:A3:5D:6D:EE:C8:FE:EC:11:98:50:C0
Certificate issuer:       /CN=595b6f21d80ffe65425eaf4b36e8f5af2f3312b8
Certificate serial:       122358
Authority key identifier: 23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/91776ca530778d0cf9bd86b8c1385283a489eba0.roa
Signing time:             Thu 17 Aug 2023 08:30:02 +0000
ROA not before:           Wed 16 Aug 2023 08:30:02 +0000
ROA not after:            Fri 15 Aug 2025 08:30:02 +0000
asID:                     266774
IP address blocks:        2803:ef20::/117 maxlen: 117

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188696 (0x122358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b6f21d80ffe65425eaf4b36e8f5af2f3312b8
        Validity
            Not Before: Aug 16 08:30:02 2023 GMT
            Not After : Aug 15 08:30:02 2025 GMT
        Subject: CN=91776ca530778d0cf9bd86b8c1385283a489eba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:f9:ce:c8:97:cc:5b:95:e8:01:04:a2:48:
                    49:fe:8c:fd:1b:54:ea:6b:a5:fc:4a:03:c6:f4:f8:
                    be:f3:2b:c3:dc:50:d4:d2:f7:99:09:e8:79:3c:94:
                    8e:47:17:57:c4:78:32:90:3a:60:bb:6d:77:57:1d:
                    37:b4:b6:90:c7:f9:c0:48:2d:d4:1f:91:92:40:27:
                    72:3e:cb:73:20:4c:99:31:e1:e6:4b:39:3a:e0:16:
                    1b:2b:be:55:18:b9:86:6b:bc:d6:51:59:a5:61:2b:
                    2f:85:c7:cd:18:39:0b:0c:bb:79:a5:43:dc:98:0d:
                    2e:07:6d:00:05:c6:3c:c4:0c:24:13:fe:be:80:7a:
                    28:41:01:17:74:b3:73:f9:ce:ac:ee:65:ea:25:5a:
                    79:53:90:1c:0b:f2:36:de:bf:c3:98:a5:6a:3a:2e:
                    39:71:6a:cd:84:f9:f5:76:ea:7b:96:cc:6d:a7:b7:
                    87:99:30:53:9b:f9:01:92:9a:cc:5c:51:0b:7b:8d:
                    37:6a:7e:65:48:06:e4:e8:86:e2:e6:4d:42:cb:cf:
                    08:86:fc:74:c6:64:ff:fd:3d:c5:26:82:80:7a:bc:
                    ae:50:8f:86:cb:88:fc:1a:83:64:e4:6e:08:d3:de:
                    74:d2:57:02:7d:47:99:ce:7f:56:fe:f6:c0:d9:9b:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2F:5E:84:36:EE:63:5A:94:A3:5D:6D:EE:C8:FE:EC:11:98:50:C0
            X509v3 Authority Key Identifier:
                keyid:23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/91776ca530778d0cf9bd86b8c1385283a489eba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ef20::/117

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:22:66:0c:ff:7a:c5:ac:df:bb:f2:ad:46:aa:a5:b2:03:
         42:1d:ba:87:98:6c:d8:4d:80:9d:35:2e:ba:ce:e2:92:5d:3e:
         34:5e:42:16:99:fb:ce:06:ac:90:71:68:75:37:69:71:1c:da:
         fd:07:a2:2d:d4:e1:16:1f:b5:de:ed:d1:45:f2:7d:bc:f7:90:
         0d:46:9d:0a:e7:47:8e:77:5d:77:63:9c:8f:a6:2b:91:27:7f:
         5d:99:c7:a0:a8:84:71:80:76:65:7d:bc:80:91:09:dd:b4:86:
         0d:06:e2:21:c7:62:c9:ec:31:af:83:30:3f:a7:d2:04:1a:d0:
         6b:6b:53:93:8f:de:40:4a:be:e6:0c:bc:71:63:ae:9e:92:71:
         f0:10:19:86:af:d5:b3:b2:36:da:0b:6a:d6:cf:b5:c6:20:02:
         f4:04:d9:04:5c:ea:9d:ca:6b:42:3e:a0:55:5e:d1:43:58:3a:
         a4:f0:df:86:36:eb:de:ac:4e:c2:c5:dc:f9:92:5a:ca:2b:cb:
         90:98:31:82:e9:07:b9:22:11:43:ae:c1:1d:db:90:65:06:1a:
         ca:ba:2a:b6:fe:2e:40:1f:6f:00:9e:26:1e:31:12:38:c5:d3:
         e4:0e:26:6a:6a:d2:d5:1d:b3:8f:90:5e:d0:c8:e2:b6:23:95:
         e6:48:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----