Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/e0faa0f7f9216aa25685845964e495c49f7582b3.roa
File:                     e0faa0f7f9216aa25685845964e495c49f7582b3.roa (raw, json)
Hash identifier:          zxd2/zHFnnKs4zHBNdEsU7PrWYaQLJkpsw/PW3BOPRk=
Subject key identifier:   B1:D0:64:A0:F7:82:3F:A1:B1:E6:26:96:F5:6E:B9:6C:D7:D6:E9:13
Certificate issuer:       /CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
Certificate serial:       204F42
Authority key identifier: 17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/e0faa0f7f9216aa25685845964e495c49f7582b3.roa
Signing time:             Sat 17 Jun 2023 08:30:03 +0000
ROA not before:           Fri 16 Jun 2023 08:30:03 +0000
ROA not after:            Sun 15 Jun 2025 08:30:03 +0000
asID:                     269829
IP address blocks:        2803:7760:200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117442 (0x204f42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
        Validity
            Not Before: Jun 16 08:30:03 2023 GMT
            Not After : Jun 15 08:30:03 2025 GMT
        Subject: CN=e0faa0f7f9216aa25685845964e495c49f7582b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:4a:09:2f:31:ad:14:88:05:bb:6f:81:0c:
                    f5:95:42:80:5f:07:dd:3f:65:3b:44:48:e7:24:5a:
                    09:7c:f8:05:78:57:58:c0:04:ce:06:93:6c:51:f2:
                    02:c3:17:38:32:5e:f3:9c:ba:77:58:3b:7e:6e:5e:
                    0b:d8:08:e4:f0:a6:6f:9e:41:92:d3:6e:3b:f8:60:
                    b1:d8:4d:58:c7:7c:61:dd:f5:37:9f:15:3c:80:1a:
                    b4:d9:f7:eb:69:10:46:55:ac:44:9f:12:7a:c5:fd:
                    0d:e5:ee:df:72:b8:7a:13:5b:51:36:fc:85:c6:ed:
                    e6:90:a7:93:39:91:6f:a6:11:2f:54:25:53:85:91:
                    fe:c7:50:28:d2:67:cb:7c:54:66:3b:69:9e:5a:ac:
                    21:27:44:df:6f:9a:db:b2:91:9f:f5:f6:20:5d:2e:
                    de:2b:df:a4:44:ee:f3:98:02:44:69:a7:5f:22:93:
                    ae:d1:c7:f8:72:71:07:b3:f9:61:e3:3d:36:c5:2a:
                    54:8c:da:11:bd:a7:78:a7:a3:bf:ee:d7:7c:54:80:
                    12:34:b3:44:c8:c5:2d:60:1a:3e:e6:18:62:1d:1e:
                    38:93:2f:9f:a4:ee:0d:19:2c:29:b1:76:11:7c:c1:
                    f1:2d:4c:25:56:38:94:4f:6c:4b:45:da:24:d8:96:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:64:A0:F7:82:3F:A1:B1:E6:26:96:F5:6E:B9:6C:D7:D6:E9:13
            X509v3 Authority Key Identifier:
                keyid:17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/e0faa0f7f9216aa25685845964e495c49f7582b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:fa:cc:c9:3f:85:74:b9:49:35:63:05:a1:a6:00:ad:4e:
         d3:5e:0c:b7:15:4f:d6:6f:53:9c:88:20:0c:09:32:aa:de:29:
         58:24:3f:a9:ed:26:41:c1:e4:32:b0:91:fc:78:b3:c3:db:b7:
         aa:0f:c3:0c:a8:c8:16:25:59:54:c2:2a:e1:12:c1:8a:57:2c:
         ff:32:9c:40:63:3c:c9:98:de:96:4b:4d:d2:6e:5c:db:a6:de:
         b1:ca:b4:3f:c4:b9:94:5a:5f:3f:81:bb:cf:09:9b:9a:e6:6a:
         a3:02:02:ad:f0:4b:b5:b1:3b:b1:b7:a3:90:3c:3e:22:7f:cc:
         c6:da:36:55:2c:4a:7e:e1:b4:1f:61:34:22:3f:f8:79:cd:55:
         bd:f2:47:d4:15:8e:5f:f4:c3:7d:7e:f6:1b:52:c0:1c:48:97:
         fb:26:5a:c1:fe:f3:da:f4:5d:bb:22:3b:0b:cd:72:1d:c5:fb:
         54:2b:34:c3:49:e1:d5:8c:f3:97:10:a0:39:a4:cf:89:a1:4c:
         79:80:2d:fc:c2:96:8a:81:2f:8b:0e:b3:b7:77:7c:ff:4d:3a:
         55:ff:65:c0:13:c8:82:f2:58:66:70:47:86:64:b6:60:89:f1:
         4c:5c:74:17:18:dd:32:de:36:49:69:3b:3a:fc:f4:6d:fb:81:
         32:66:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----