Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/13e8b54c05e7dd38bad495184643c51c03491c08.roa
File:                     13e8b54c05e7dd38bad495184643c51c03491c08.roa (raw, json)
Hash identifier:          1jQXsIelcN8ilTKj7PuUQmuSXGhfoaMZ4S4x/0KKwgA=
Subject key identifier:   7E:32:A4:48:38:86:02:2C:00:1C:C1:17:5A:30:B0:52:AA:A0:94:4A
Certificate issuer:       /CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
Certificate serial:       2048E3
Authority key identifier: 17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/13e8b54c05e7dd38bad495184643c51c03491c08.roa
Signing time:             Sat 17 Jun 2023 08:30:00 +0000
ROA not before:           Fri 16 Jun 2023 08:30:00 +0000
ROA not after:            Sun 15 Jun 2025 08:30:00 +0000
asID:                     269829
IP address blocks:        2803:7760::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115811 (0x2048e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
        Validity
            Not Before: Jun 16 08:30:00 2023 GMT
            Not After : Jun 15 08:30:00 2025 GMT
        Subject: CN=13e8b54c05e7dd38bad495184643c51c03491c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:fb:7f:9f:62:f1:79:d3:03:db:5c:3d:17:
                    db:8f:56:53:52:4e:ee:1e:a5:51:41:09:57:9b:25:
                    ab:71:fb:33:60:ed:e6:d0:a3:41:2a:62:07:fe:61:
                    fc:e0:8f:5d:f1:92:b2:47:ee:53:43:8c:51:f9:70:
                    99:93:16:2c:54:f5:73:42:2f:85:f1:55:22:da:44:
                    25:8d:67:6a:db:e7:bd:1b:a7:c4:1d:02:4f:81:7c:
                    c2:cc:fa:ce:a8:09:03:a2:5a:7d:c7:f7:cb:2b:9f:
                    92:cf:70:3d:12:4d:77:80:62:a6:ec:94:27:da:26:
                    88:74:3d:16:b0:7f:9c:e3:e7:0c:8b:82:cb:c9:bc:
                    78:4d:05:40:82:0e:7a:8c:24:ec:08:04:93:0e:dc:
                    c1:83:25:4b:57:98:ba:99:e5:ae:dd:66:a0:a4:f5:
                    a1:6c:48:8c:a8:11:b0:e4:d6:c9:b2:08:e1:68:e3:
                    03:cf:7a:c8:7e:b9:18:28:7c:89:10:9f:56:e3:d6:
                    69:92:b8:80:17:c6:44:ac:dd:c6:76:60:43:c8:97:
                    83:53:4b:f8:30:69:b7:69:ef:f1:c0:2f:89:c9:9a:
                    45:49:1a:ad:a6:80:67:74:8a:6e:68:6d:d9:15:78:
                    bf:47:8c:0a:ba:03:fa:f7:ac:15:0a:8e:fd:83:a5:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:32:A4:48:38:86:02:2C:00:1C:C1:17:5A:30:B0:52:AA:A0:94:4A
            X509v3 Authority Key Identifier:
                keyid:17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/13e8b54c05e7dd38bad495184643c51c03491c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:af:70:8f:46:0f:8e:d0:79:70:1c:4e:e8:aa:88:06:79:93:
         70:c4:87:ee:28:2e:92:5a:80:46:47:74:28:a7:98:93:ad:be:
         2f:e0:65:66:e4:7d:e4:8c:ad:8c:4e:6d:90:d3:3e:6c:78:8f:
         35:8b:8f:f6:b2:fd:77:23:49:a9:07:a9:89:99:55:82:06:71:
         68:79:47:e1:13:e8:6a:6c:d3:50:e4:2a:cf:01:34:c1:0e:88:
         f2:1b:45:08:7b:7c:3b:3e:00:c0:d3:51:a7:b6:ee:b8:d8:bd:
         f8:2f:09:8a:d7:4e:4b:70:fa:39:33:96:20:d4:a7:02:b8:71:
         87:10:e8:84:b6:b5:9b:e5:2d:db:22:28:06:87:4e:90:67:76:
         0d:6a:6e:d9:a9:25:3a:c7:cf:2a:ed:49:d0:1f:91:0b:30:ea:
         7e:b3:61:dd:4c:5d:82:43:1a:49:e8:84:e3:ff:22:dc:0e:e4:
         f9:35:06:7a:df:a3:48:2f:4f:1a:70:6d:a2:85:10:9e:01:06:
         4e:6c:fd:bd:e0:7d:42:01:98:31:5a:b5:e8:86:8a:83:ec:95:
         a5:2f:d1:97:c3:9e:4c:5c:5f:1e:9d:74:56:21:98:0f:ef:b2:
         97:15:2d:12:b8:bb:eb:51:42:8d:58:9b:46:d8:ae:ce:0c:8b:
         19:c0:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----