Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f0c4e54423d2f98526ea74de80a5331135f30105.roa
File:                     f0c4e54423d2f98526ea74de80a5331135f30105.roa (raw, json)
Hash identifier:          tjPH0VFQQT1VnpNo49if+sB90VSKJd+zXFQzDGTgAxU=
Subject key identifier:   EC:17:23:D9:6C:53:7B:3B:F9:D2:52:97:69:00:C4:3A:52:F4:EB:32
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       1331E0
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f0c4e54423d2f98526ea74de80a5331135f30105.roa
Signing time:             Fri 19 May 2023 02:42:29 +0000
ROA not before:           Thu 18 May 2023 02:42:29 +0000
ROA not after:            Mon 19 May 2025 02:42:29 +0000
asID:                     271903
IP address blocks:        2803:5be0:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257952 (0x1331e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 02:42:29 2023 GMT
            Not After : May 19 02:42:29 2025 GMT
        Subject: CN=f0c4e54423d2f98526ea74de80a5331135f30105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:78:8e:38:d9:1a:e2:2b:3f:3b:07:8f:3b:
                    0f:df:9d:93:8e:aa:72:4d:c4:19:08:2d:12:6f:19:
                    f6:76:3c:bf:f8:bb:6a:ad:75:e5:f2:0f:e3:cb:18:
                    f6:8e:18:b9:a8:d6:78:36:2d:9c:ea:01:fb:5d:f4:
                    16:b7:3d:be:6a:57:33:ec:72:c0:fc:10:fb:65:ad:
                    81:c8:aa:81:cb:95:15:23:bd:a8:e5:75:7d:39:9f:
                    88:f0:a6:bb:53:8c:85:21:ab:43:94:2a:1d:54:bd:
                    11:50:4c:4d:93:d4:cd:30:52:b2:27:a7:5a:ca:0f:
                    a3:8f:1c:80:4c:37:7e:13:6a:ed:69:82:d3:4d:0a:
                    cb:6c:c6:5a:5e:ef:f9:1f:62:71:e7:ce:29:62:79:
                    42:b6:6a:39:27:e2:b8:e0:52:bd:fc:d8:53:31:5b:
                    41:d1:c6:5a:2e:4e:7e:7b:47:4a:33:83:9d:fa:f4:
                    4d:44:df:1c:8b:de:cf:32:e3:99:e2:b9:71:14:70:
                    48:1b:00:db:74:fc:1c:e7:a0:4d:ff:bc:21:8b:69:
                    2b:79:e3:e9:f1:3e:68:41:7a:07:d2:16:e9:c2:eb:
                    9c:6b:12:5f:6c:ec:04:34:76:62:d1:25:83:8f:fb:
                    73:53:22:97:58:4f:94:a1:5c:bf:10:f8:26:31:cd:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:23:D9:6C:53:7B:3B:F9:D2:52:97:69:00:C4:3A:52:F4:EB:32
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/f0c4e54423d2f98526ea74de80a5331135f30105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:98:da:17:30:28:8f:23:6a:53:1b:3c:92:fd:d7:fb:bd:
         ee:f5:2b:55:1f:8f:36:2c:28:9b:a7:65:fe:9b:0b:e7:11:e6:
         9a:71:1d:53:18:a5:ea:d3:9f:c1:2a:74:5e:a3:7e:66:47:a7:
         7c:e7:6f:9a:91:a3:a0:81:df:48:09:11:30:0e:e0:5b:f8:f1:
         43:d1:40:6e:26:0e:2d:58:49:05:09:83:ad:4b:4d:7b:07:84:
         82:f1:b2:b5:c4:10:27:09:13:7b:9c:2b:fd:a2:56:c8:49:fd:
         62:c7:17:f5:a6:cf:5a:0e:0b:6e:77:63:1a:82:d6:0a:02:9e:
         64:a0:71:5b:88:9e:6b:39:6c:6f:9a:2a:db:75:52:6e:4e:67:
         e4:a3:94:67:fb:13:28:fa:a0:5d:58:ef:9d:16:e4:9f:ac:34:
         96:e0:2e:59:f1:a2:05:b7:9c:4c:08:16:9f:08:70:86:6f:87:
         a2:99:8b:83:f6:62:4c:a4:78:08:9d:34:72:71:a1:13:38:ca:
         6e:ca:cc:4c:25:94:bf:6e:46:05:e7:73:22:e6:c8:9f:84:c2:
         ba:0a:07:71:f9:0a:53:68:18:55:ce:14:11:80:e6:42:a3:f2:
         93:13:04:9b:92:05:b1:11:f9:ad:3c:80:bc:d7:0e:b4:cc:45:
         be:8c:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----