Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/229ab1c52b07598f0b0597713837a524521f6353.roa
File:                     229ab1c52b07598f0b0597713837a524521f6353.roa (raw, json)
Hash identifier:          HA8Ww6guo5YoY/Z5UzeUamkD0BwapYq4ul0lZfT0/X0=
Subject key identifier:   A3:C2:EB:D5:A6:C8:21:5E:63:82:36:DD:C3:82:F9:09:9B:B8:D7:47
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       1A3F20
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/229ab1c52b07598f0b0597713837a524521f6353.roa
Signing time:             Thu 25 May 2023 14:38:17 +0000
ROA not before:           Wed 24 May 2023 14:38:17 +0000
ROA not after:            Sun 25 May 2025 14:38:17 +0000
asID:                     272979
IP address blocks:        2803:b0e0:99c2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720096 (0x1a3f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: May 24 14:38:17 2023 GMT
            Not After : May 25 14:38:17 2025 GMT
        Subject: CN=229ab1c52b07598f0b0597713837a524521f6353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:7c:31:be:10:2d:06:e0:cd:3c:75:fa:f5:
                    87:9c:42:c4:79:55:97:08:94:98:21:b7:6f:0e:62:
                    6c:4f:cb:54:e6:a8:7b:02:a3:20:4e:dc:3a:b5:82:
                    25:bf:aa:15:c9:f0:08:c1:95:f0:28:98:eb:23:ad:
                    9c:b9:39:b8:27:d7:97:a7:da:50:03:df:87:42:4a:
                    e9:eb:0e:f3:f5:a2:6b:1b:43:23:9f:40:84:6c:89:
                    68:25:9a:1f:b2:0b:1a:be:05:c9:8e:ec:2f:7e:3f:
                    e0:cf:f8:9a:8e:e7:d6:f6:d5:a4:47:d4:cc:db:61:
                    1b:40:59:f2:1f:57:ca:37:56:e9:72:36:b0:60:e0:
                    27:10:e3:1d:e7:9f:1b:34:29:90:7d:52:15:3f:53:
                    9d:ab:60:d7:f3:a3:d2:67:a0:4e:38:32:03:24:3d:
                    78:b4:ba:10:e1:28:af:10:5c:c9:bd:3e:60:38:b8:
                    5d:8d:87:91:08:34:f4:9c:00:8d:15:af:0c:84:15:
                    50:5c:77:b7:77:36:96:ef:1f:0c:98:f3:40:73:4c:
                    b2:a9:bc:71:d6:2d:0a:92:96:f5:e3:8b:97:9e:bb:
                    ea:c4:49:d6:d1:dd:a5:83:6c:4a:c8:7c:5d:34:22:
                    12:4d:f2:9e:21:57:7e:16:2f:20:b8:c5:eb:19:c3:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C2:EB:D5:A6:C8:21:5E:63:82:36:DD:C3:82:F9:09:9B:B8:D7:47
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/229ab1c52b07598f0b0597713837a524521f6353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:cf:e8:0d:0e:12:ca:03:5d:07:05:0d:9d:bb:31:07:b5:
         76:d5:dd:1d:5a:79:74:1a:e2:76:ea:6a:39:e6:74:62:74:13:
         9f:19:8c:6a:f9:7f:6b:92:d4:e1:74:2c:23:c5:38:0d:03:51:
         4f:51:2d:ce:4d:c5:0d:25:39:95:dd:c5:7b:ef:6e:07:06:bb:
         da:70:39:e3:e9:ff:44:93:99:a3:70:bd:53:86:ac:9e:8d:15:
         e7:22:87:7f:c2:33:d3:50:4a:38:60:b7:1b:b1:0a:99:84:05:
         a0:9f:01:88:15:e2:e5:e3:2b:b7:90:a7:fd:65:86:88:25:95:
         fc:25:eb:f5:9d:12:45:28:bd:93:e9:82:4e:66:27:db:28:39:
         27:af:ca:e3:17:c9:26:ce:45:e5:c2:06:dc:ed:09:6f:a6:41:
         7d:09:97:a5:c1:e5:59:69:e3:b9:ce:b6:7e:a1:d9:55:33:da:
         a1:e4:a0:f2:40:bb:61:47:85:65:5e:4e:c6:54:c8:08:a5:da:
         92:89:ca:3a:57:b7:fa:58:e5:e4:56:2a:0f:2a:26:e4:78:c7:
         7b:2f:77:7f:fa:53:9b:b5:71:a5:47:6f:86:75:76:f5:28:91:
         dd:f0:1e:d4:6c:29:b4:d7:ac:73:ed:c1:4d:9a:9f:74:c7:15:
         0c:95:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----