Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/c0ee23d174ec433a533d4386518d660ca6f5d9e7.roa
File:                     c0ee23d174ec433a533d4386518d660ca6f5d9e7.roa (raw, json)
Hash identifier:          PcReN44URbVLgz9RDmqfRpns41B53nHQuMpsIKSvBJ8=
Subject key identifier:   42:F0:6F:7D:9B:20:27:D7:60:4D:25:0F:F9:A6:80:DC:CD:18:8A:0E
Certificate issuer:       /CN=b77f9c61d953c15bb1d3a967c6d9a2e76d26c241
Certificate serial:       ADC3
Authority key identifier: 08:5F:77:A9:4F:40:0D:61:F7:97:11:41:48:E4:5A:D0:9D:3B:B7:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/c0ee23d174ec433a533d4386518d660ca6f5d9e7.roa
Signing time:             Fri 02 Jun 2023 01:51:52 +0000
ROA not before:           Thu 01 Jun 2023 01:51:52 +0000
ROA not after:            Mon 02 Jun 2025 01:51:52 +0000
asID:                     267691
IP address blocks:        2803:41a0::/33 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44483 (0xadc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77f9c61d953c15bb1d3a967c6d9a2e76d26c241
        Validity
            Not Before: Jun  1 01:51:52 2023 GMT
            Not After : Jun  2 01:51:52 2025 GMT
        Subject: CN=c0ee23d174ec433a533d4386518d660ca6f5d9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:e9:6f:18:00:8e:7a:ae:c6:9f:51:cd:e2:
                    53:bc:c1:92:b7:45:94:32:57:77:c3:b7:ba:49:a4:
                    51:5b:4f:2b:af:ce:81:db:0d:81:35:47:61:02:fe:
                    b4:6a:de:26:40:14:ac:c8:26:0b:be:78:4f:28:f6:
                    d8:84:00:af:4a:08:3e:77:dc:b9:3e:74:91:a9:69:
                    7b:ca:f7:76:ff:68:35:f0:50:c4:81:22:6b:18:97:
                    2a:2f:c9:bd:9e:8a:0f:c0:89:2c:f2:98:68:6f:c3:
                    bc:a1:3c:ab:9d:bd:fb:f8:16:b2:cf:c3:69:9e:f4:
                    9f:d2:d1:ab:ca:35:c9:ed:80:4a:2f:fa:a3:41:b0:
                    a5:60:54:ed:f8:d8:cc:c1:cb:5f:98:67:5e:b3:f7:
                    fa:1b:f8:9e:91:15:17:18:5d:dc:05:20:0d:8c:a8:
                    07:f5:63:09:24:2a:5e:56:c2:a2:35:10:ef:e0:aa:
                    87:8c:6f:2d:76:6f:10:4e:ca:37:b5:62:2b:64:c1:
                    f6:72:69:70:4a:fb:98:ac:e9:d6:fd:73:8e:ca:b6:
                    1f:b7:35:54:f8:3d:81:a7:c7:9e:06:44:c6:8e:62:
                    f6:af:55:40:39:66:f5:64:02:7f:a0:a3:d8:5d:2f:
                    10:1c:85:0c:35:67:00:75:3c:c0:e9:27:09:ae:0e:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F0:6F:7D:9B:20:27:D7:60:4D:25:0F:F9:A6:80:DC:CD:18:8A:0E
            X509v3 Authority Key Identifier:
                keyid:08:5F:77:A9:4F:40:0D:61:F7:97:11:41:48:E4:5A:D0:9D:3B:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/c0ee23d174ec433a533d4386518d660ca6f5d9e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66e78b29-2c38-4dba-ac7d-c226f4cbe3a0/b77f9c61d953c15bb1d3a967c6d9a2e76d26c241.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:41a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:6f:36:8a:69:d0:06:e5:1b:dd:3d:64:93:32:37:2f:fb:6a:
         8e:d9:17:55:23:a2:12:88:43:e7:c9:91:82:f5:fa:34:94:87:
         ac:dd:32:ae:78:86:26:af:fd:4b:2d:d5:01:4b:7b:86:34:7c:
         b1:6c:94:f1:8b:fe:db:18:cd:62:0e:a7:30:fa:a9:d8:7a:cb:
         2c:53:1f:92:61:50:d3:37:51:d1:a7:4d:fd:80:44:18:7c:86:
         33:61:81:ad:c5:c0:7f:37:dc:17:5d:c4:b0:71:50:72:f0:c6:
         6d:ac:bc:e5:3d:70:c0:3e:79:c3:9f:ad:80:fc:20:3f:62:47:
         55:5f:cd:0d:11:83:2e:c3:03:9f:bd:73:1c:ea:28:90:71:08:
         08:a7:a4:c7:51:18:cf:86:c6:b1:47:a5:f1:8c:bc:ea:05:8c:
         3b:d5:d2:92:c7:44:ab:1d:eb:5d:eb:36:04:92:e5:23:a2:77:
         32:aa:62:d6:0f:72:ed:3e:67:a8:14:92:c5:b7:8d:d1:40:2d:
         76:54:c0:1e:f3:7b:ac:ff:82:37:62:93:3b:13:60:06:c1:d9:
         51:68:49:13:68:64:e0:ea:95:c8:75:11:d6:cb:7e:c7:3a:f0:
         d3:d8:68:34:60:ec:a4:97:8d:3b:35:6d:4c:d3:e9:dc:c3:ea:
         47:08:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----