Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/77493973755ada2e1a24f695001fe82d0a1f2e80.roa
File:                     77493973755ada2e1a24f695001fe82d0a1f2e80.roa (raw, json)
Hash identifier:          ZraYWGepx3/DRNuu3nTKmYErzAn9ZSu7GFvXdLIhW/w=
Subject key identifier:   48:49:49:0C:AB:D4:3D:B2:1D:F0:1D:30:5F:EF:CF:3E:7D:9A:B0:43
Certificate issuer:       /CN=0355d87e3448f414f994660978ab87d5ff78b854
Certificate serial:       22E532
Authority key identifier: 6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/77493973755ada2e1a24f695001fe82d0a1f2e80.roa
Signing time:             Tue 24 Oct 2023 07:30:07 +0000
ROA not before:           Tue 24 Oct 2023 07:30:07 +0000
ROA not after:            Thu 23 Oct 2025 07:30:07 +0000
asID:                     52486
IP address blocks:        2803:1700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286898 (0x22e532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0355d87e3448f414f994660978ab87d5ff78b854
        Validity
            Not Before: Oct 24 07:30:07 2023 GMT
            Not After : Oct 23 07:30:07 2025 GMT
        Subject: CN=77493973755ada2e1a24f695001fe82d0a1f2e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1d:fa:17:9a:27:2e:8e:91:0b:3b:99:81:f9:
                    a4:e3:98:28:8f:49:b3:7c:8c:48:3b:42:69:96:88:
                    e2:3e:6c:71:3a:c1:8c:78:e8:9b:c0:e8:9c:2e:2f:
                    e1:56:7c:3e:bb:14:aa:00:31:1c:87:e9:4b:2b:a1:
                    9b:11:fc:cf:08:c8:0d:73:2a:be:cd:23:8f:e7:5c:
                    a3:2f:b7:6c:3c:8c:49:d5:a1:15:b9:7c:fb:31:2d:
                    b9:2b:43:b8:1e:97:55:c5:cc:4d:be:ab:22:91:62:
                    84:3e:74:24:ad:20:79:78:76:b2:d3:6a:a9:6e:b0:
                    80:51:78:d2:75:bc:0f:84:ce:36:5f:e0:a9:58:18:
                    73:f5:f2:42:86:50:88:bd:57:af:5b:15:97:79:19:
                    39:f4:04:84:9f:54:2b:3f:ae:1b:c1:d8:41:a3:fb:
                    6c:1f:70:c0:a7:fa:21:f0:81:63:b8:f4:e4:1b:af:
                    19:a0:02:cd:bb:6a:eb:e1:58:40:c6:d0:86:04:f5:
                    b9:8e:9a:46:23:bc:3a:59:2c:99:20:62:f1:ed:c4:
                    ab:77:a1:00:0c:e1:07:b2:98:fe:b8:ba:3f:9f:fa:
                    c6:6d:e9:dc:d2:24:8e:64:58:1e:8b:33:bf:33:13:
                    bc:3e:dc:94:3a:7d:9b:8a:ad:de:47:cb:c4:ef:0d:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:49:49:0C:AB:D4:3D:B2:1D:F0:1D:30:5F:EF:CF:3E:7D:9A:B0:43
            X509v3 Authority Key Identifier:
                keyid:6A:1F:D0:83:9B:18:57:FD:1D:74:85:2A:20:CA:A9:34:39:E7:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0355d87e3448f414f994660978ab87d5ff78b854.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/77493973755ada2e1a24f695001fe82d0a1f2e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64bcd229-7f98-4e3c-b0b3-bcbce62e9c91/0355d87e3448f414f994660978ab87d5ff78b854.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1700::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:ac:18:04:f9:81:44:40:6a:83:96:bf:69:b6:57:4d:87:
         96:3f:c8:c7:33:42:ec:55:8e:4a:c5:41:04:37:aa:63:91:f1:
         89:ef:c6:14:30:05:db:cb:aa:5a:84:ff:e9:27:a0:ea:e6:97:
         ac:d0:44:9f:7b:38:7e:b4:11:f1:51:ea:af:45:87:96:3b:74:
         03:18:e9:6e:bc:03:b5:52:c6:61:b5:d6:01:da:79:35:a0:28:
         a6:d8:8e:bb:d7:2a:5b:b4:83:a5:3a:49:fc:1c:79:5f:46:65:
         0d:6d:78:36:f0:23:6c:15:f3:b2:d7:4d:e9:36:b0:dd:e4:10:
         69:7e:a5:94:00:41:f4:d0:3b:a6:8c:5c:cc:71:28:ed:cb:59:
         56:21:25:58:85:c9:72:07:5b:b9:14:f4:ef:9a:14:21:8d:da:
         b6:8f:85:dd:7e:13:42:2c:da:91:fa:05:34:fd:e7:95:7a:33:
         79:bb:0d:c2:20:e2:4f:8f:19:81:aa:44:28:69:4a:60:6b:11:
         2b:65:a4:a5:0d:4d:fe:2c:01:3c:d8:0f:a8:ae:47:2b:0d:33:
         6e:e4:4a:e5:67:cd:0b:99:1f:81:25:1b:eb:9d:3e:93:e5:bd:
         72:88:1f:94:16:f0:c6:24:ca:40:5c:d8:9b:94:85:cf:37:d8:
         3b:9d:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----