Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2833ed8c38b37cf1812717e82ede0abeb67ccc03.roa
File:                     2833ed8c38b37cf1812717e82ede0abeb67ccc03.roa (raw, json)
Hash identifier:          tloRxwxjFG8Wn3TNqumwmArQ1XawtZMArbw/piKww4s=
Subject key identifier:   20:86:D8:F6:D6:19:A5:92:8E:B5:6F:B4:D1:73:48:ED:28:E9:CD:F3
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       227750
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2833ed8c38b37cf1812717e82ede0abeb67ccc03.roa
Signing time:             Fri 11 Aug 2023 03:08:04 +0000
ROA not before:           Thu 10 Aug 2023 03:08:04 +0000
ROA not after:            Mon 11 Aug 2025 03:08:04 +0000
asID:                     64120
IP address blocks:        2803:f080::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258768 (0x227750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Aug 10 03:08:04 2023 GMT
            Not After : Aug 11 03:08:04 2025 GMT
        Subject: CN=2833ed8c38b37cf1812717e82ede0abeb67ccc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:8d:e2:1e:58:84:e5:92:2d:2e:51:ea:c1:
                    29:0e:86:b5:aa:d3:04:98:ee:9e:65:d0:7d:44:05:
                    d8:80:14:de:8b:f7:55:0e:cc:7a:02:3d:f8:b4:f1:
                    70:38:be:31:8a:59:23:ec:eb:f7:b8:24:4e:5e:59:
                    8e:dd:a8:7c:94:e6:e2:8d:f1:8e:b4:e6:c4:d8:6f:
                    90:8e:15:23:c7:b4:af:8b:23:3a:82:3e:3a:74:29:
                    ac:a6:a8:9c:87:3a:83:42:e5:ea:7c:da:7d:ef:bb:
                    3e:47:ed:5b:b5:05:8c:23:4b:b6:6d:36:2f:f8:d6:
                    f2:fb:de:88:33:cc:fb:1b:31:9f:84:9a:74:87:00:
                    5c:38:63:0d:90:a2:3e:89:39:19:14:24:5a:d6:a9:
                    50:c6:38:91:c9:33:99:58:2a:dc:97:16:1e:18:6d:
                    12:ba:44:bd:d2:bd:fa:73:cd:f2:8e:9d:43:29:bc:
                    4e:71:65:7a:a7:80:8d:e9:e2:3f:2c:47:c3:27:cf:
                    05:37:58:af:de:9d:d1:92:02:8d:74:a2:ac:df:64:
                    b2:b4:37:98:8d:e4:fa:c6:f6:36:cf:b5:fc:23:dd:
                    dd:86:b0:50:e8:22:c0:81:64:41:d9:ae:ae:a3:6d:
                    c7:c1:04:0a:ec:87:85:38:97:1a:d6:16:67:43:3c:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:D8:F6:D6:19:A5:92:8E:B5:6F:B4:D1:73:48:ED:28:E9:CD:F3
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/2833ed8c38b37cf1812717e82ede0abeb67ccc03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080::/35

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:51:a5:cb:e9:0e:48:11:c2:09:5e:b0:11:42:c6:7a:4b:
         00:e1:f2:2e:2e:c9:20:4f:d7:aa:ab:5c:5f:b5:59:3f:8d:1e:
         8e:cc:80:30:db:58:45:52:4f:08:e9:f1:d1:ba:af:2a:7a:27:
         38:38:c2:50:7e:e5:90:a8:64:79:5d:f3:85:99:c4:20:23:23:
         5b:ef:ee:57:47:27:06:69:50:44:41:49:cb:8d:4c:29:98:72:
         04:63:19:c1:fd:65:79:57:96:b1:a0:2a:f2:22:43:14:70:46:
         73:ed:bb:99:69:7c:19:64:19:5e:a3:91:0d:21:2e:d3:99:4e:
         31:3b:a8:dd:e8:c8:c4:04:13:3f:db:09:79:e2:6e:67:7d:82:
         42:96:9c:77:56:c5:a7:4f:c1:dd:f4:35:d1:ab:c2:8b:4e:9e:
         18:73:4f:a3:9f:2e:65:ea:2b:1d:86:94:94:03:4f:30:c1:d3:
         67:db:2c:d3:87:f2:49:4f:4a:ad:92:74:2a:54:bf:68:98:22:
         15:a3:86:87:5c:0c:9c:77:fb:00:9f:7b:68:d0:3e:51:e9:5e:
         a8:2b:4f:72:b9:a3:80:2e:90:7c:58:a1:2a:6b:21:f3:1d:d1:
         0e:83:7b:c8:5d:73:7a:a3:51:b8:2d:bb:ea:af:bc:49:df:b4:
         14:c0:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----