Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/7e807e98eb863a8794f213c309f5d80e339243af.roa
File:                     7e807e98eb863a8794f213c309f5d80e339243af.roa (raw, json)
Hash identifier:          9mynHvBYyJiUnlBCSiM8KkdKF3BXsKMZ/8d7nHoo/3Q=
Subject key identifier:   F9:7E:41:B0:AD:A8:E3:E6:CD:66:13:53:72:88:DF:6F:B9:49:D0:C7
Certificate issuer:       /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial:       20EDC6
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/7e807e98eb863a8794f213c309f5d80e339243af.roa
Signing time:             Sat 08 Jul 2023 17:02:56 +0000
ROA not before:           Fri 07 Jul 2023 17:02:56 +0000
ROA not after:            Tue 08 Jul 2025 17:02:56 +0000
asID:                     269782
IP address blocks:        2803:2360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158022 (0x20edc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
        Validity
            Not Before: Jul  7 17:02:56 2023 GMT
            Not After : Jul  8 17:02:56 2025 GMT
        Subject: CN=7e807e98eb863a8794f213c309f5d80e339243af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:f1:75:ae:60:ea:95:c1:72:98:2d:82:be:
                    21:83:0c:78:b6:c9:cf:88:ea:af:e4:e8:a8:4a:7e:
                    fe:39:8a:9d:53:66:4b:40:3e:76:17:f6:e8:0b:9f:
                    d1:1c:1a:1d:6f:52:29:61:4c:12:3b:41:b8:7c:61:
                    5b:5c:e0:ca:a3:a8:70:92:39:b7:c4:48:dd:bf:b7:
                    68:54:9c:60:87:fd:43:da:c8:03:e1:1b:84:46:66:
                    ee:ff:f4:66:83:91:3d:e6:b8:bb:a1:7f:34:01:fd:
                    99:3c:c2:44:76:78:59:74:62:05:b9:7f:a1:a6:84:
                    a6:3d:aa:e0:e4:b9:d6:cf:72:fd:8d:54:b4:a7:d5:
                    03:48:95:cd:93:a1:b0:94:b3:63:7f:00:84:ad:17:
                    e0:26:fe:39:0d:16:78:a8:96:66:a1:ee:58:c9:eb:
                    80:26:2d:5a:71:71:38:21:58:7b:82:15:67:b7:d2:
                    29:2e:69:71:cc:42:f3:cc:70:db:38:36:d5:5c:8b:
                    47:5d:bf:3a:e6:3d:9a:fb:4a:eb:2d:9c:f4:5c:22:
                    10:a1:75:19:1d:9c:ab:28:b0:47:fa:75:d5:b8:2c:
                    57:fa:78:c5:ed:44:4b:c5:e9:a6:4a:b9:f7:2e:c3:
                    ab:14:8b:09:0c:2b:f2:ce:66:1b:85:63:c7:32:59:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7E:41:B0:AD:A8:E3:E6:CD:66:13:53:72:88:DF:6F:B9:49:D0:C7
            X509v3 Authority Key Identifier:
                keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/7e807e98eb863a8794f213c309f5d80e339243af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:88:2c:c8:9a:e6:27:cf:5c:73:b0:a5:f0:52:fc:95:eb:1f:
         b1:da:f2:0b:6d:bf:74:e9:fd:32:c3:bb:61:38:c3:15:73:6c:
         ca:2d:2b:e9:42:5d:2b:b9:b4:60:b1:4d:94:34:a8:50:72:34:
         3f:a3:df:cb:0a:ec:60:35:eb:16:e3:4f:9f:8e:7c:fa:45:63:
         b0:e7:3a:2e:4e:89:8c:b6:7a:42:8d:af:ba:39:c5:f3:2a:e4:
         dd:4e:4c:0d:8c:75:df:2e:40:b9:a9:1e:e7:b9:f1:7c:8d:5a:
         15:f8:2a:a7:85:13:56:2c:0b:15:f5:77:63:33:c2:f1:e8:6b:
         c3:7e:92:3b:26:d2:0b:a7:e6:28:3e:e9:cf:35:7f:29:0a:78:
         4f:4b:5d:e8:1c:be:e4:10:22:12:00:de:18:ac:94:b0:37:30:
         18:77:ed:87:6f:6d:cf:0d:fa:f6:92:a8:8f:3f:9f:2c:b7:09:
         25:3c:16:7c:4f:9f:4c:5b:81:e8:45:ca:69:67:20:cb:4b:42:
         af:c5:61:f3:15:ff:29:51:5e:37:93:12:1f:d7:d7:5a:ff:24:
         87:e4:60:cd:e4:aa:3b:dd:79:99:ba:39:2a:87:16:f7:3c:a5:
         28:33:92:1c:0f:bd:bd:61:9d:a4:32:d9:55:6a:2f:a4:26:f6:
         31:d3:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----