Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/357bba74c9baa2cbf2ea5277e916af57d189e795.roa
File:                     357bba74c9baa2cbf2ea5277e916af57d189e795.roa (raw, json)
Hash identifier:          JsC67uXLMkpw6o2g0n6gsfpSf7NqKBoGifo/lvYl7cY=
Subject key identifier:   B4:B1:3B:C5:06:8C:AB:23:8D:5F:A0:FD:FD:A0:60:FB:83:2F:AD:A7
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       1DC86E
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/357bba74c9baa2cbf2ea5277e916af57d189e795.roa
Signing time:             Wed 11 Oct 2023 15:06:25 +0000
ROA not before:           Tue 10 Oct 2023 15:06:25 +0000
ROA not after:            Sat 11 Oct 2025 15:06:25 +0000
asID:                     272833
IP address blocks:        2803:b0e0:800d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951854 (0x1dc86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Oct 10 15:06:25 2023 GMT
            Not After : Oct 11 15:06:25 2025 GMT
        Subject: CN=357bba74c9baa2cbf2ea5277e916af57d189e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:2d:c6:6f:1b:cd:41:5c:d8:3d:6a:13:a0:
                    52:47:0f:9c:a1:68:04:43:4d:0a:ae:93:57:d8:73:
                    1e:50:74:79:99:a6:37:21:72:db:5b:28:9e:87:97:
                    a1:0b:3d:93:e2:ba:cd:5d:27:ce:3c:bc:6d:e6:f7:
                    f4:51:38:d4:f7:87:3b:5c:87:5d:51:93:f9:4a:ec:
                    04:77:c1:43:ea:a2:c5:21:42:aa:b3:da:47:7d:16:
                    42:13:ab:6f:84:11:a0:d0:b0:32:b2:d9:9d:ff:7e:
                    7c:ec:20:f1:9c:c3:7a:32:93:a2:fb:d0:6b:bd:23:
                    af:d8:0e:d0:90:4e:32:a4:98:c3:2e:f1:17:af:cb:
                    26:79:fa:89:80:bc:12:85:20:00:95:76:8e:28:f4:
                    97:5a:f7:17:56:ad:ee:b8:b7:3b:ac:d4:fa:77:21:
                    f6:d7:90:28:7b:ec:14:f6:ae:dd:02:d4:3c:f3:8f:
                    ee:f3:5e:47:6f:21:c6:15:6f:0e:dc:cf:29:2b:5e:
                    71:fd:9c:c5:43:d8:b2:4b:a8:47:a8:8b:e0:fe:d5:
                    fc:cf:8a:1e:40:7b:45:9b:77:40:0f:6b:d0:3d:d2:
                    d7:d5:a6:af:c2:9b:f1:1a:da:2c:7d:e5:24:ab:f1:
                    2a:a6:76:3f:92:be:5a:10:50:a6:c6:eb:a6:0d:f4:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B1:3B:C5:06:8C:AB:23:8D:5F:A0:FD:FD:A0:60:FB:83:2F:AD:A7
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/357bba74c9baa2cbf2ea5277e916af57d189e795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:800d::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:36:60:16:aa:9a:5a:eb:25:fb:0b:67:39:1c:f1:2e:76:
         f3:bb:e0:c1:79:39:df:24:2c:5e:3f:d4:37:62:a1:23:c5:96:
         56:e4:1b:62:c6:6a:e1:1e:5c:47:18:a3:e4:56:ae:39:20:e8:
         56:a0:63:1b:7e:c7:7b:a4:7d:bb:59:6b:41:43:1c:10:6f:58:
         1c:fa:d5:80:e2:a0:9b:f0:11:0f:1b:bf:31:11:fc:ed:ad:e0:
         0f:5b:28:9c:a6:8a:1e:14:e1:e2:13:f3:8e:6f:09:54:50:b2:
         cb:56:17:1b:18:a4:d1:4f:8e:8c:d5:dc:56:91:47:9b:7a:84:
         8d:82:0f:9f:de:c3:71:df:cd:54:8d:31:38:16:db:dc:e4:2d:
         f7:1b:37:39:d8:f6:65:3d:b7:72:28:d1:6e:c5:e6:d3:8d:0c:
         5b:38:c4:5e:60:81:4f:92:9f:ad:0e:d5:ce:c9:21:1d:1e:a6:
         65:a3:81:20:c3:88:31:5b:54:50:2d:a5:99:11:9f:60:5a:4e:
         a4:f2:eb:69:52:e1:d0:9d:ca:5a:14:be:b3:a6:0d:78:bf:58:
         ce:d3:91:11:a0:ea:2b:f7:64:71:41:c8:bd:84:1a:03:35:25:
         a9:ad:e8:ae:aa:08:3b:57:72:68:3c:33:9d:c2:5e:74:f9:5d:
         63:35:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----