Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/4688c61eb662a7a91867b257674d1e5cd9b7c69d.roa
File:                     4688c61eb662a7a91867b257674d1e5cd9b7c69d.roa (raw, json)
Hash identifier:          jjTRAQlevj12TJNVjLVVd4YTz4jd1SYrlZ6J+xxnqLs=
Subject key identifier:   00:07:FD:23:B8:1D:8E:26:11:4D:50:9F:91:DB:82:6C:DA:13:BC:A8
Certificate issuer:       /CN=06f6143d984e42d40da19f4f36d19bbb0ccf959c
Certificate serial:       08876D
Authority key identifier: 07:2A:41:D8:27:9B:3D:D1:28:E2:FE:63:F4:DA:6E:D4:D8:65:63:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06f6143d984e42d40da19f4f36d19bbb0ccf959c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/4688c61eb662a7a91867b257674d1e5cd9b7c69d.roa
Signing time:             Mon 03 Jul 2023 15:53:24 +0000
ROA not before:           Sun 02 Jul 2023 15:53:24 +0000
ROA not after:            Thu 03 Jul 2025 15:53:24 +0000
asID:                     272820
IP address blocks:        2803:e490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558957 (0x8876d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f6143d984e42d40da19f4f36d19bbb0ccf959c
        Validity
            Not Before: Jul  2 15:53:24 2023 GMT
            Not After : Jul  3 15:53:24 2025 GMT
        Subject: CN=4688c61eb662a7a91867b257674d1e5cd9b7c69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:73:8d:22:28:ba:b6:f8:c6:6a:b8:31:7f:
                    e1:45:ac:ca:38:8e:c2:26:2e:a9:8f:e6:0d:05:9b:
                    5f:43:84:88:3d:12:b0:bf:e7:5a:1e:2a:66:e9:ff:
                    5a:fb:80:6c:84:93:e0:c7:68:77:e0:04:a5:18:c8:
                    86:02:22:a3:f7:46:da:45:b6:54:d1:6d:19:f6:51:
                    64:33:ef:ca:41:de:8b:dd:0c:67:1a:75:f9:56:ee:
                    8f:b9:31:96:b5:81:81:5e:09:aa:f0:79:9f:2c:58:
                    e8:0b:5d:40:39:4f:df:88:88:ad:95:10:a7:66:5c:
                    65:2c:c6:3a:06:31:8c:c8:31:04:ba:04:06:93:cf:
                    b2:c2:ea:00:94:e6:77:68:32:01:58:28:80:1c:32:
                    42:07:81:47:93:8b:cf:fc:4c:7a:eb:62:4c:a2:14:
                    77:77:1a:78:6e:d5:0d:7d:86:78:be:7c:54:1a:2f:
                    9f:a7:0b:a6:3f:37:b3:8c:61:6d:da:74:c2:b8:d9:
                    c5:4f:31:11:96:53:19:28:dd:15:c5:18:f1:b1:09:
                    07:fd:8e:4c:3f:17:0b:8b:6e:a0:d9:fc:70:82:8c:
                    fa:d3:6c:11:bc:43:8b:f8:8a:2a:28:12:00:81:02:
                    ca:fd:7a:fe:3a:8d:df:df:84:0f:b1:e5:57:4e:5e:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:FD:23:B8:1D:8E:26:11:4D:50:9F:91:DB:82:6C:DA:13:BC:A8
            X509v3 Authority Key Identifier:
                keyid:07:2A:41:D8:27:9B:3D:D1:28:E2:FE:63:F4:DA:6E:D4:D8:65:63:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06f6143d984e42d40da19f4f36d19bbb0ccf959c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/4688c61eb662a7a91867b257674d1e5cd9b7c69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5bb3592e-ba9a-4946-914d-7fee918b2577/06f6143d984e42d40da19f4f36d19bbb0ccf959c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e490::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:96:b0:85:1e:dc:70:80:76:3b:21:3c:9a:b1:72:dd:8b:
         38:5c:f5:60:0e:4d:be:c0:82:6f:8b:ed:cd:04:1a:b9:bf:f4:
         38:9b:fc:f6:ae:80:00:39:9b:82:16:6e:3f:ae:d3:f9:1d:4b:
         74:f9:9c:45:95:81:18:71:f5:50:62:bd:14:fa:67:27:54:cb:
         7d:e7:7d:6d:cb:e9:c2:a0:58:fa:18:16:89:44:09:94:9f:56:
         8a:9b:23:b9:01:b3:f7:65:09:db:4e:26:60:c7:13:53:34:b9:
         cd:fd:af:a3:10:70:ee:03:1a:cc:5b:67:36:9f:e6:02:9b:6d:
         9c:29:7a:8d:c5:c8:42:c4:1e:31:e3:b8:f1:81:47:4a:31:18:
         fd:de:b7:e6:d6:41:08:3d:07:fa:22:7f:90:67:54:69:77:be:
         27:0c:fc:26:12:26:ef:c2:4c:06:dc:55:88:89:98:de:d1:ce:
         58:1e:08:7b:ed:61:c4:bb:b8:5e:02:ac:dc:cd:c2:3f:1c:c7:
         0d:e0:d0:7b:4d:ae:40:e2:0e:e1:9d:63:bc:e0:2c:2e:dd:1d:
         c0:12:45:24:af:d4:d4:82:72:77:98:a1:a8:d5:c7:fb:f5:39:
         35:81:15:a8:35:75:13:be:ab:d0:c2:f6:32:5f:61:4e:66:09:
         33:de:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----