Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/b6461996a80d2cc003c2e6facdb2233b9172158b.roa
File:                     b6461996a80d2cc003c2e6facdb2233b9172158b.roa (raw, json)
Hash identifier:          J/xButtW73OmE1VVQca4xhzAcRmD9mQ9Q9V0Fv4rcNY=
Subject key identifier:   A4:46:99:68:51:6B:E2:61:D2:F5:CD:13:3A:70:DC:01:4D:AD:1B:29
Certificate issuer:       /CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
Certificate serial:       11EBDB
Authority key identifier: 83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/b6461996a80d2cc003c2e6facdb2233b9172158b.roa
Signing time:             Thu 08 Jun 2023 08:30:04 +0000
ROA not before:           Wed 07 Jun 2023 08:30:04 +0000
ROA not after:            Fri 06 Jun 2025 08:30:04 +0000
asID:                     271916
IP address blocks:        2803:4a10::/32 maxlen: 32
                          2803:4a10:a000::/36 maxlen: 36
                          2803:4a10:e000::/36 maxlen: 36
                          2803:4a10:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174491 (0x11ebdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
        Validity
            Not Before: Jun  7 08:30:04 2023 GMT
            Not After : Jun  6 08:30:04 2025 GMT
        Subject: CN=b6461996a80d2cc003c2e6facdb2233b9172158b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:d7:64:17:8b:40:55:f8:44:80:4e:04:b9:
                    30:62:e9:59:a1:72:6a:55:b2:bf:0b:94:f2:c9:5d:
                    40:e1:d7:a5:59:74:b7:3c:6e:00:c9:5c:d2:1b:0a:
                    74:44:26:4a:55:6b:65:0b:85:b9:f6:f1:aa:cc:79:
                    2f:ab:fe:ba:ac:e9:ea:bf:87:ca:d3:0a:96:e6:5e:
                    c7:cd:c7:7a:86:ae:9b:d7:07:23:b8:cd:d8:7c:82:
                    1d:2d:88:06:6e:3b:88:1a:79:81:7f:3b:66:5f:99:
                    75:1a:c7:b0:67:2f:45:d3:d9:4d:73:69:6e:5c:32:
                    77:bb:79:74:ae:a2:a5:6b:9b:71:ca:49:5c:f8:e1:
                    8d:c0:91:fa:d6:2e:76:ae:bd:4e:a6:25:13:02:49:
                    92:b0:1c:23:50:e4:ae:a6:99:7b:52:66:c3:6e:e5:
                    0d:a8:b3:24:79:27:5e:18:9b:61:34:52:f3:ca:c2:
                    0b:79:53:a7:fb:79:05:e9:aa:12:49:f7:b9:a9:4d:
                    b8:50:64:35:49:b6:16:e0:7b:2a:ef:10:d1:ca:43:
                    00:80:35:9a:21:97:8d:17:bd:06:1d:f6:8f:a2:4f:
                    01:03:f1:e7:6b:d9:43:d6:80:9f:74:83:a0:60:4e:
                    11:f1:56:9c:ae:39:31:23:25:9e:3e:5d:4c:18:91:
                    f1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:99:68:51:6B:E2:61:D2:F5:CD:13:3A:70:DC:01:4D:AD:1B:29
            X509v3 Authority Key Identifier:
                keyid:83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/b6461996a80d2cc003c2e6facdb2233b9172158b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/3d7e92fe67745c4ed93e7215168d5bb095f17102.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:c4:61:71:b8:c7:80:22:d9:83:8b:63:a9:70:0a:d5:9d:
         ad:04:73:78:8f:85:0d:43:8d:aa:47:c3:ce:04:2c:1a:31:54:
         ea:20:af:e8:39:42:ac:6f:ae:f3:d7:b1:93:bc:25:54:72:33:
         e8:f9:15:2b:4d:51:ae:88:fa:b8:57:3b:d1:5c:fa:f4:cb:a0:
         49:66:08:20:23:38:17:c2:52:19:4d:d2:ee:ee:b8:1e:01:9e:
         d8:2d:5f:9e:d6:67:ae:9e:5a:80:f4:6b:63:e6:dc:b6:c1:fd:
         8c:00:d8:c4:de:72:c7:c1:c9:80:59:21:48:3a:27:8e:3c:5a:
         5c:ed:4b:99:25:85:56:73:88:1a:c4:28:3e:b6:1e:3a:14:78:
         d6:21:6d:8e:d8:20:f6:1c:8b:f2:6d:47:2f:ac:cb:6b:ae:06:
         55:63:95:68:74:6b:f8:36:b6:f7:45:c8:d3:61:9f:9e:3a:ed:
         be:52:8a:a0:11:2c:59:28:4f:21:da:c3:38:5b:3f:18:0b:6b:
         05:17:e0:ed:8a:60:12:a5:01:18:fc:6b:d7:de:c3:c8:c7:dd:
         d2:c3:5b:35:7f:15:cf:01:7f:62:f8:1c:40:f5:d0:51:58:ff:
         31:ac:a8:dd:37:bf:df:5d:ad:ca:55:e5:99:19:ab:cb:0c:5f:
         31:f0:4f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----