Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/4f06bfbb3d9a0a3cf8150fb2e46a02b73a9758ae.roa
File:                     4f06bfbb3d9a0a3cf8150fb2e46a02b73a9758ae.roa (raw, json)
Hash identifier:          Y191/EfUHrEtSFvHZhnd6+zmjdUB6dqbmtIHbjDyPKA=
Subject key identifier:   33:EE:5B:3A:48:C0:F0:67:67:2A:37:F8:02:78:07:A1:7D:B8:D4:8B
Certificate issuer:       /CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
Certificate serial:       0FAFDE
Authority key identifier: F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/4f06bfbb3d9a0a3cf8150fb2e46a02b73a9758ae.roa
Signing time:             Fri 05 May 2023 20:29:32 +0000
ROA not before:           Thu 04 May 2023 20:29:32 +0000
ROA not after:            Mon 05 May 2025 20:29:32 +0000
asID:                     174
IP address blocks:        2803:9be0:ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028062 (0xfafde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
        Validity
            Not Before: May  4 20:29:32 2023 GMT
            Not After : May  5 20:29:32 2025 GMT
        Subject: CN=4f06bfbb3d9a0a3cf8150fb2e46a02b73a9758ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:26:e8:68:ed:7d:34:32:bd:82:34:42:d8:
                    fa:3a:f0:d5:4a:2e:cf:9b:00:ec:b6:ab:58:88:de:
                    ec:ee:86:60:d6:06:31:9b:b7:86:a1:e5:85:f6:8c:
                    a9:94:80:67:25:55:1b:2a:a4:55:ec:67:4a:0a:fd:
                    40:15:e3:eb:50:17:d1:b0:d1:9c:0c:0b:b9:e3:8d:
                    f2:49:9b:74:f2:f7:0e:13:b2:1b:a6:fb:6b:64:10:
                    fd:e5:21:c7:ee:d4:4f:12:8d:93:7e:18:59:c3:28:
                    4a:1c:23:a6:7a:80:09:73:3b:81:9c:48:d5:bf:ab:
                    82:5c:7c:83:bc:b6:81:32:e4:ba:5f:8a:14:c4:6e:
                    23:bc:c1:12:f4:2e:16:04:2e:6b:c8:b2:a4:96:de:
                    b9:53:bd:48:0a:af:6f:ac:99:7a:0c:29:b7:ec:44:
                    31:08:10:c9:1b:69:8c:60:a9:08:d6:56:56:14:d0:
                    09:57:b2:62:9d:af:96:e0:12:4c:28:50:6b:ea:35:
                    d3:a0:95:42:64:9b:2e:4d:46:81:da:af:f0:46:9f:
                    30:49:21:4d:62:12:0d:80:07:1f:52:2e:6b:6a:f3:
                    f5:2f:3f:f5:56:a7:a1:6b:af:fb:57:65:4c:2f:6e:
                    8f:17:11:32:d4:b4:3d:1e:ae:ba:4b:42:b7:94:e9:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:5B:3A:48:C0:F0:67:67:2A:37:F8:02:78:07:A1:7D:B8:D4:8B
            X509v3 Authority Key Identifier:
                keyid:F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/4f06bfbb3d9a0a3cf8150fb2e46a02b73a9758ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9be0:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:91:6f:ab:e0:93:d8:68:be:83:f2:5e:14:6c:53:c6:40:2f:
         40:bc:69:c9:ad:69:82:0f:1a:50:fe:35:8e:96:e4:b4:4b:df:
         bd:99:58:dc:a5:ee:6c:31:10:de:5d:19:7d:ed:11:cc:c3:2e:
         33:18:cd:15:72:50:95:4f:6a:5f:3f:4c:25:11:29:b2:68:fb:
         e5:6e:66:a2:c4:0c:e5:e5:fc:0d:1a:ae:2e:6c:e1:a2:05:c8:
         00:68:51:94:71:c2:18:90:70:6f:3a:76:9e:83:e5:45:88:bb:
         bd:ab:9a:4f:9d:58:eb:ea:fd:d1:51:36:9c:62:fa:42:81:53:
         32:48:76:2b:97:bc:4a:d1:38:8a:16:56:c0:fa:5b:10:24:ce:
         da:1d:a1:84:f1:b0:7e:5f:19:b7:c1:76:47:2b:f5:f3:25:1c:
         a2:6a:33:f7:09:21:9c:0c:9d:85:77:b3:35:28:87:e5:38:a8:
         16:b5:bb:ec:10:fa:57:ee:6e:f2:53:3f:45:43:3d:c6:91:37:
         b6:b2:21:11:33:34:f9:a2:6b:6a:20:0b:28:a0:ad:1e:7e:7b:
         d4:fe:4e:dc:d7:2a:91:2f:f5:9b:45:dc:6d:0c:c1:71:6d:0a:
         b9:f9:94:de:cf:f9:29:ed:ee:b9:65:04:34:92:83:f9:34:00:
         48:2c:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----