Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/720488917fceb98f54e7f541eeb7e68695f18cc2.roa
File:                     720488917fceb98f54e7f541eeb7e68695f18cc2.roa (raw, json)
Hash identifier:          BmAC/yVR/KSs2yP5WqDdY6kYrBzmSJqkNNkmAqRHfTw=
Subject key identifier:   DA:C6:01:A4:7B:89:91:84:ED:FA:70:BA:E0:7D:1C:1E:CE:DF:90:75
Certificate issuer:       /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial:       249309
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/720488917fceb98f54e7f541eeb7e68695f18cc2.roa
Signing time:             Tue 10 Oct 2023 17:55:57 +0000
ROA not before:           Mon 09 Oct 2023 17:55:57 +0000
ROA not after:            Fri 10 Oct 2025 17:55:57 +0000
asID:                     265804
IP address blocks:        2803:b880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396937 (0x249309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
        Validity
            Not Before: Oct  9 17:55:57 2023 GMT
            Not After : Oct 10 17:55:57 2025 GMT
        Subject: CN=720488917fceb98f54e7f541eeb7e68695f18cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:64:ca:f4:d8:ff:8c:c9:6a:3b:58:a1:59:
                    5f:e9:54:fe:59:6d:0f:9d:4b:85:71:d4:50:cb:d6:
                    6d:77:e3:83:f4:d0:77:ef:48:04:81:0b:e3:69:0c:
                    36:b1:49:03:3b:97:58:68:fd:aa:00:b8:d6:74:02:
                    60:39:9d:8c:01:e3:46:63:0b:5a:3c:2e:75:77:12:
                    92:f3:07:83:33:fe:9f:19:22:34:c8:44:92:2b:a8:
                    85:c4:2f:64:4d:ec:23:42:06:d2:d6:6d:fb:b0:85:
                    4a:6a:14:a1:f4:78:b4:7d:94:e7:36:0c:31:6c:6a:
                    ed:f5:cc:a0:75:e5:fb:ac:3a:19:5a:01:eb:fc:87:
                    5c:72:5c:32:64:ef:ca:18:9f:c1:42:b8:bf:f0:c3:
                    9b:ef:9b:e0:8c:92:47:5c:d9:e6:a6:78:93:c0:0f:
                    82:78:ae:a1:ca:3f:5a:38:ad:22:93:f1:03:2c:ac:
                    03:12:56:a8:d3:7d:08:03:c7:2c:c2:1d:e2:18:33:
                    0f:b1:c3:99:68:36:82:bc:27:8c:18:08:01:30:1e:
                    3c:9e:2b:7d:2e:a4:0a:35:49:b9:6c:dd:ce:66:9d:
                    d0:ab:91:ae:03:61:62:dd:24:c2:9c:c1:08:2a:a5:
                    91:ca:1c:05:8f:3f:bc:20:e7:79:72:05:b0:d3:8d:
                    ab:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:01:A4:7B:89:91:84:ED:FA:70:BA:E0:7D:1C:1E:CE:DF:90:75
            X509v3 Authority Key Identifier:
                keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/720488917fceb98f54e7f541eeb7e68695f18cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b880::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:27:b2:de:2e:5a:cf:c5:35:ee:2b:00:e5:91:f2:26:85:
         ac:a7:54:84:a5:26:da:64:f1:7a:77:29:d2:56:56:63:3b:ba:
         f7:96:4c:8b:b1:bb:13:97:eb:8f:3d:82:d2:fc:e7:79:56:21:
         89:71:92:1c:f4:e9:3f:c7:ac:4d:5f:3b:ba:f8:c9:56:8f:18:
         3e:0b:2e:ad:f3:2a:78:ba:17:eb:e6:07:4e:99:a0:24:fc:bf:
         3f:0d:d9:2b:7a:e4:18:f7:c7:0c:4b:a7:14:d5:94:df:46:b4:
         5a:c1:8e:43:ce:85:b2:74:05:2a:2d:d6:05:d0:4a:be:96:01:
         cd:09:b0:74:d6:2f:3d:bb:05:ff:26:d1:85:96:3c:c7:a3:4c:
         2b:5c:8e:64:5a:f6:0d:2b:8e:46:48:2a:66:33:8d:d1:ad:02:
         8d:6a:49:0d:c3:2b:15:63:60:39:87:f3:d3:da:4f:90:08:24:
         b5:93:97:9f:ac:67:7a:2b:b3:cd:e7:ec:c5:86:06:11:12:4e:
         bc:cd:80:d3:60:23:0f:75:65:c9:10:ba:bf:ca:11:61:d5:33:
         56:67:8f:82:b6:6d:62:90:a2:f7:1e:a7:95:80:b6:30:59:dd:
         26:77:77:3b:97:9f:71:32:21:60:9b:26:40:6c:fb:e6:5a:fc:
         b5:24:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----