Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/1ae6a66ae66ad0c254a058855734df05c50bf95e.roa
File:                     1ae6a66ae66ad0c254a058855734df05c50bf95e.roa (raw, json)
Hash identifier:          2ih18axYZjCRPLbD8zUJ2NuMaAQA1AVLnmdPIBd4MuY=
Subject key identifier:   0F:4E:51:DD:CB:46:F3:6B:49:89:8F:23:C0:49:B5:1C:7F:06:2F:8A
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       227E78
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/1ae6a66ae66ad0c254a058855734df05c50bf95e.roa
Signing time:             Fri 11 Aug 2023 03:15:52 +0000
ROA not before:           Thu 10 Aug 2023 03:15:52 +0000
ROA not after:            Mon 11 Aug 2025 03:15:52 +0000
asID:                     64120
IP address blocks:        2803:f080:c000::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260600 (0x227e78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Aug 10 03:15:52 2023 GMT
            Not After : Aug 11 03:15:52 2025 GMT
        Subject: CN=1ae6a66ae66ad0c254a058855734df05c50bf95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:7e:21:ce:d1:47:51:06:c1:ae:45:71:cd:
                    74:29:b4:67:e7:84:fa:e3:98:4e:f9:95:88:c2:16:
                    9d:3d:98:5a:ef:6a:ca:b7:0f:4b:02:a4:e4:4d:6b:
                    f7:7c:07:a8:ec:fe:2a:05:26:41:60:21:96:0f:82:
                    ff:f4:3a:dd:79:e5:96:40:13:5e:6b:ed:74:89:ee:
                    9b:36:42:de:20:1f:af:10:9f:27:a2:aa:99:fb:2b:
                    e5:66:6e:be:49:16:cf:9d:b6:2a:90:c0:6a:40:06:
                    9f:03:c4:fe:d6:ed:c8:15:cc:7a:5e:48:ea:c6:30:
                    3b:40:a3:cb:03:4a:23:ba:c0:78:93:13:1f:aa:c1:
                    1e:90:f4:3c:86:82:ab:2f:d7:ee:24:ae:45:53:74:
                    20:d5:9b:61:a0:8d:47:6e:cf:fd:9e:12:06:e2:1c:
                    0b:bb:c8:03:e8:0d:49:bb:96:2c:d7:1d:3f:d9:a3:
                    94:01:7a:12:6f:1a:65:50:d3:5f:15:a0:85:fc:b5:
                    f4:7d:db:fa:36:75:5c:ea:92:e7:25:58:ec:66:eb:
                    40:7a:18:f8:2d:b7:cd:ac:aa:ed:93:38:af:0f:ab:
                    1c:c7:c6:60:a0:5b:35:e5:de:eb:41:a7:43:fb:ed:
                    af:27:e3:42:75:28:b9:9d:a8:4c:aa:6e:0b:02:69:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:51:DD:CB:46:F3:6B:49:89:8F:23:C0:49:B5:1C:7F:06:2F:8A
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/1ae6a66ae66ad0c254a058855734df05c50bf95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         87:13:62:6a:4e:b4:55:1e:a7:e3:27:87:cd:a6:97:55:e3:49:
         e0:61:c0:52:4c:09:4b:12:7b:70:ba:55:9a:40:63:31:a2:f6:
         4a:81:b2:b0:dc:5f:3b:e7:f3:dc:7f:08:dd:c7:29:c5:dd:d3:
         d5:61:25:ce:b0:a3:fd:ab:33:65:82:65:22:e6:1d:af:41:69:
         ad:90:1f:95:c3:b0:dc:06:65:2d:66:16:32:6d:d2:e8:b4:44:
         f6:fb:19:f8:23:00:3d:aa:2e:a1:e3:5e:15:9c:ff:87:93:32:
         ee:d4:bc:ec:51:e2:c1:48:1e:a6:a7:0f:58:f5:f0:cc:74:45:
         d9:0f:66:b9:c1:69:3b:69:03:5e:a4:01:a9:bd:42:24:85:83:
         4a:b4:2b:0b:5b:6a:e5:27:f8:cf:cd:97:87:00:53:17:f1:43:
         b2:2c:9b:a7:cf:0a:7a:b5:91:0f:3d:ad:c2:6c:0a:04:7b:2e:
         37:d4:fa:c0:b3:2c:c7:4f:82:bb:b2:c7:e7:25:7a:9f:7f:24:
         95:3f:24:31:c7:7c:4d:2b:22:1e:ce:7f:65:f6:0c:1d:b0:02:
         f0:8e:5d:3a:a6:fa:5c:72:88:7a:bc:63:36:4f:e8:ef:b5:d7:
         45:32:3a:4d:c7:30:24:5e:23:63:7d:77:4d:cc:e7:f6:41:17:
         4d:0e:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----