Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/227c7f3cf39897d646da669d36720413c27a2d96.roa
File:                     227c7f3cf39897d646da669d36720413c27a2d96.roa (raw, json)
Hash identifier:          xgb/YUp4OmIb+ORhIQhZbsf2bBMwV8JHJWqjivHQRkc=
Subject key identifier:   7A:3C:B3:76:F2:08:FD:34:FA:76:7F:ED:99:41:1B:E3:37:F2:AB:CE
Certificate issuer:       /CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
Certificate serial:       1E9C19
Authority key identifier: B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/227c7f3cf39897d646da669d36720413c27a2d96.roa
Signing time:             Sat 27 May 2023 20:05:37 +0000
ROA not before:           Fri 26 May 2023 20:05:37 +0000
ROA not after:            Tue 27 May 2025 20:05:37 +0000
asID:                     273006
IP address blocks:        2803:84e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006041 (0x1e9c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71dea23d89f89e25e8692a6c0b1c413e909da1ca
        Validity
            Not Before: May 26 20:05:37 2023 GMT
            Not After : May 27 20:05:37 2025 GMT
        Subject: CN=227c7f3cf39897d646da669d36720413c27a2d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:16:64:ac:43:87:1e:da:1d:12:21:ed:81:
                    9b:b9:f6:fa:ef:1e:48:f8:0f:24:99:60:03:02:ca:
                    c7:06:2b:0a:ee:ce:53:5e:33:c3:98:a2:b8:19:d6:
                    7b:7b:68:04:a8:ce:e4:96:1e:05:23:09:ab:02:c7:
                    51:d9:20:ec:4a:57:6b:29:a5:7b:99:3f:9f:7d:af:
                    65:63:d8:9c:14:15:51:cb:26:d3:95:cf:62:79:d0:
                    99:87:e7:3e:7c:9f:f9:a5:52:77:c7:74:59:78:22:
                    63:c3:64:90:fe:41:8b:b7:6c:30:3d:56:6d:f2:13:
                    13:b3:08:44:21:c9:8f:4e:4b:cb:ff:6f:02:97:94:
                    fa:97:9c:53:f3:4d:e0:2d:8b:5c:8f:12:6b:d0:1d:
                    6a:5a:6d:c4:c7:e1:0a:0f:3b:c9:99:1d:ce:76:67:
                    8e:7f:bd:cb:48:65:63:9a:63:e5:7e:56:78:07:0e:
                    84:22:5b:66:65:b4:9b:7e:05:e4:13:62:2e:86:2f:
                    b7:84:e9:c7:e1:5d:ff:ef:45:56:9e:d7:36:a1:02:
                    44:17:6d:ac:7a:86:23:2e:6b:97:9a:c3:85:ac:e8:
                    0e:be:42:23:6c:dc:6d:b8:53:f5:c7:85:61:d5:80:
                    c8:ba:63:36:16:b0:6b:f1:ff:1c:cc:25:a3:6d:46:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:B3:76:F2:08:FD:34:FA:76:7F:ED:99:41:1B:E3:37:F2:AB:CE
            X509v3 Authority Key Identifier:
                keyid:B9:9A:45:CF:DC:96:00:0F:02:FC:06:6C:CF:98:59:F0:52:C2:98:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71dea23d89f89e25e8692a6c0b1c413e909da1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/227c7f3cf39897d646da669d36720413c27a2d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee8752d-3b9d-490a-b88f-81513806c4da/71dea23d89f89e25e8692a6c0b1c413e909da1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:89:d8:33:aa:06:da:d6:d2:03:37:ed:e2:e7:d4:b7:98:24:
         1a:d6:6e:a7:3f:a3:8f:7f:e9:0b:95:8d:72:be:52:8d:bf:5e:
         8c:f8:29:a0:74:bd:8b:2e:7b:58:29:fd:22:d3:85:84:62:d9:
         e3:23:c7:0e:2e:82:0e:9e:04:c5:41:66:64:43:6a:53:ea:be:
         16:89:56:f3:a8:3f:03:1d:c3:e4:c5:2a:63:a3:19:12:7f:d9:
         e3:04:9f:f5:97:03:18:98:4d:f7:97:5c:41:f0:45:f7:f3:6f:
         28:61:0a:41:35:9f:e4:db:c3:59:91:31:56:24:f9:ff:d4:c1:
         da:32:3d:d6:ed:4f:81:80:ad:aa:0e:9a:68:73:40:a5:48:1e:
         b3:de:44:d5:34:37:b2:7a:fe:c8:3e:57:ef:a6:6b:21:25:ca:
         8f:19:04:51:34:a0:b0:ce:0c:84:15:2f:92:a6:23:ac:0e:d4:
         c4:fa:51:d5:f4:01:47:b9:c3:ca:a6:53:97:d4:6a:e3:3e:23:
         43:5c:3d:cf:af:a6:9f:9f:8e:5b:22:a0:40:ee:d8:6c:ba:eb:
         12:e8:96:84:2c:e3:d0:1f:fb:32:02:15:eb:11:48:93:cb:af:
         8f:7d:ac:9e:e3:c9:cd:fc:ac:aa:cb:47:ad:b3:14:37:02:4a:
         c0:0c:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----