Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/f495a4943578b27b236813f1d4795f49545ae073.roa
File:                     f495a4943578b27b236813f1d4795f49545ae073.roa (raw, json)
Hash identifier:          T3WkWMuehsAJAUB5l9of+pPfqVD8FHJtTny3FJgQScM=
Subject key identifier:   53:68:F2:21:B3:50:EC:4B:95:CD:AF:30:B1:F5:27:31:79:7B:08:6A
Certificate issuer:       /CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
Certificate serial:       204D54
Authority key identifier: 17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/f495a4943578b27b236813f1d4795f49545ae073.roa
Signing time:             Sat 17 Jun 2023 08:30:01 +0000
ROA not before:           Fri 16 Jun 2023 08:30:01 +0000
ROA not after:            Sun 15 Jun 2025 08:30:01 +0000
asID:                     269829
IP address blocks:        2803:7760::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116948 (0x204d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6f8cd6a6232a4f4258f841671ecbfc513e3959
        Validity
            Not Before: Jun 16 08:30:01 2023 GMT
            Not After : Jun 15 08:30:01 2025 GMT
        Subject: CN=f495a4943578b27b236813f1d4795f49545ae073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:a7:e8:68:72:10:5e:6e:a9:46:52:d3:fa:
                    59:ab:6f:95:85:00:03:a4:e2:94:ce:a6:6c:4b:cd:
                    28:a2:c3:37:08:e9:e3:22:22:b7:39:0f:0e:9f:7e:
                    21:35:94:4e:b8:f8:7c:1f:ef:45:50:4f:d7:9c:f9:
                    23:22:e9:f7:0e:1c:a5:bb:a2:0f:1e:eb:ab:00:37:
                    30:e1:71:a0:37:6a:08:5c:80:e3:98:ff:a0:eb:0e:
                    ac:ca:68:1b:38:c3:ee:37:bd:b5:43:7d:44:cb:78:
                    88:03:27:ab:b1:fa:e9:db:ab:28:59:03:d0:45:95:
                    aa:e9:e6:bf:c5:d7:c5:54:88:ab:7a:3e:87:7c:46:
                    dd:60:87:1e:7f:48:c4:8d:c7:26:1c:2d:e0:1b:70:
                    a6:44:52:b0:da:2a:62:8a:da:04:aa:65:4b:d6:49:
                    1c:2a:ea:52:a1:30:c9:02:d8:a3:fe:2f:b8:f7:8d:
                    85:1c:8f:47:1a:f5:6a:18:0a:60:62:94:11:2c:14:
                    50:8f:7a:ad:c4:e0:89:2f:34:e9:05:8f:2d:d3:2f:
                    3f:62:2a:32:61:1d:d1:dd:62:dc:9e:1a:d8:7e:af:
                    56:88:d0:b6:6e:b4:a1:e4:ca:ea:28:d0:40:6c:ee:
                    df:30:c5:49:14:0c:f6:54:a3:11:60:11:94:9b:4c:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:F2:21:B3:50:EC:4B:95:CD:AF:30:B1:F5:27:31:79:7B:08:6A
            X509v3 Authority Key Identifier:
                keyid:17:C7:4D:D7:34:E9:D0:61:C1:EC:4D:B8:E0:31:BA:26:8C:6D:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/f495a4943578b27b236813f1d4795f49545ae073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62a6ea40-4eb1-425f-b468-eae415f1c94f/ee6f8cd6a6232a4f4258f841671ecbfc513e3959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7760::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:3f:98:f2:a1:e0:de:fc:62:0d:bf:ea:e5:0c:f4:d6:45:
         2b:b3:7b:ac:98:16:7f:44:cb:18:f6:84:37:0c:70:e9:bd:c9:
         11:aa:97:7c:31:0b:52:78:ae:fd:1b:85:5b:cc:f5:e6:d2:16:
         f3:e7:39:c9:06:fc:97:c8:2c:73:69:c6:0b:95:95:f9:32:5d:
         13:72:52:02:fb:99:c2:5d:0b:42:b2:20:9f:02:02:21:b1:88:
         15:31:d7:9b:4b:7d:b6:01:d1:74:ab:47:c4:72:09:ac:d8:06:
         a9:88:bc:b4:8a:9e:9a:09:a6:ae:8c:85:e7:32:40:89:eb:d9:
         c2:17:93:16:56:ae:0c:63:bb:bd:c3:35:6f:4c:1d:5c:cf:a8:
         de:05:a7:2d:91:d9:e7:45:a3:16:4b:a0:b9:63:98:e9:a8:f1:
         36:53:3b:64:67:65:83:78:6a:b7:33:31:2c:37:3b:d4:1a:34:
         b2:5f:00:d8:a9:6d:1d:76:b7:18:14:68:6c:d9:e3:f2:61:0e:
         69:8e:50:a8:37:01:5f:fb:bc:00:37:7b:32:a3:eb:6d:b1:46:
         11:50:83:88:3c:b1:c8:04:65:27:e0:70:1a:4c:90:59:69:21:
         ae:bc:cd:47:05:d7:c7:06:50:47:76:27:c5:03:8b:ac:88:87:
         ef:4c:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----