Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9fe5e4f66440fa62451877eadc39c602286c422e.roa
File:                     9fe5e4f66440fa62451877eadc39c602286c422e.roa (raw, json)
Hash identifier:          tz/uPebgem2j1vslG15EeAJcvL3vDSeNjOs71zpOY6Y=
Subject key identifier:   22:B4:86:9E:F3:B7:03:16:8D:32:E6:17:C4:22:E2:12:5B:0B:DF:BC
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       1C37AB
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9fe5e4f66440fa62451877eadc39c602286c422e.roa
Signing time:             Mon 14 Aug 2023 18:27:27 +0000
ROA not before:           Sun 13 Aug 2023 18:27:27 +0000
ROA not after:            Thu 14 Aug 2025 18:27:27 +0000
asID:                     272978
IP address blocks:        2803:b0e0:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849259 (0x1c37ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Aug 13 18:27:27 2023 GMT
            Not After : Aug 14 18:27:27 2025 GMT
        Subject: CN=9fe5e4f66440fa62451877eadc39c602286c422e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:d1:be:ad:16:fa:d6:a0:76:d7:64:09:7d:
                    c5:89:7d:d2:ab:f9:5b:d1:22:8b:d7:e3:8b:5a:46:
                    d7:95:fc:24:c6:5a:45:a6:87:8e:56:d9:2f:5a:23:
                    57:f0:38:ff:12:01:2d:49:93:4f:e8:c2:34:0a:78:
                    30:b4:aa:11:e5:9e:c2:cd:c4:57:b3:62:d1:8e:64:
                    cd:36:bf:62:2d:de:b2:30:69:89:99:04:5d:6c:5c:
                    d8:29:19:28:0c:69:40:31:51:bb:a2:a6:85:a1:b5:
                    f1:2f:7c:cf:ec:9f:dc:57:30:f8:4a:63:f1:1c:7f:
                    30:2f:10:f3:f9:7d:16:2d:20:5b:5b:1d:ec:99:2e:
                    14:f2:a2:e9:9c:74:41:ca:a1:c5:e8:99:0f:38:62:
                    07:24:33:c2:c6:c5:b1:be:d3:b1:89:8c:10:56:2a:
                    05:f9:5a:7c:b1:e1:8c:12:bc:62:cf:6e:b9:1d:b5:
                    d1:d5:48:d3:8b:23:fe:e6:f4:1b:88:d7:86:3b:53:
                    98:47:29:0b:21:1b:e1:c0:14:c1:73:9c:b0:89:ae:
                    1d:b2:05:37:b7:04:74:03:8b:18:c7:71:01:14:3e:
                    be:ad:54:93:65:34:9d:4f:f3:14:dc:21:72:e0:a5:
                    aa:5c:4c:db:cb:07:62:db:04:bb:d6:c8:4d:22:36:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:86:9E:F3:B7:03:16:8D:32:E6:17:C4:22:E2:12:5B:0B:DF:BC
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/9fe5e4f66440fa62451877eadc39c602286c422e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:15:69:cc:45:3d:36:ed:53:da:c3:76:8c:25:9f:77:75:7e:
         07:7d:1d:57:95:3d:75:01:8f:cb:83:2a:12:9b:20:09:72:82:
         c7:2c:69:8b:50:32:f5:1d:b0:28:48:9b:6a:ea:39:49:31:40:
         6d:cf:13:52:ad:ce:0b:9b:bd:63:0c:fc:f3:2e:b9:eb:cf:9f:
         f8:98:44:ea:23:62:69:8b:f1:40:d3:7b:72:19:e1:22:55:1d:
         59:f5:05:89:c0:fd:dd:53:22:66:04:e0:30:97:53:2c:34:51:
         12:bc:09:63:84:a5:33:7d:3e:0b:19:ab:b9:41:bb:86:a5:f6:
         07:1f:67:54:33:bc:9f:85:05:3e:29:9e:5a:7c:59:d8:30:5f:
         81:03:90:c4:54:8e:8f:0b:6b:43:93:af:34:c0:e0:b9:fb:d8:
         8c:df:77:5b:5c:e6:ff:48:5a:c3:fd:d6:84:06:56:30:d1:bc:
         a3:a0:44:8d:40:f7:f2:cb:ad:29:c4:c5:c3:9e:dd:ec:33:6e:
         6a:24:4c:7e:11:aa:bd:fa:e8:5b:c6:f7:db:e3:d9:86:ee:dd:
         35:a2:1f:ca:0b:1a:e7:49:58:c8:ec:56:98:18:d1:cc:52:cc:
         f9:be:bc:23:3d:32:0a:54:dd:18:50:e6:03:49:87:85:4e:d9:
         a6:c9:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----