Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/459789af01224dbb0cce694d71c4654e3641fabf.roa
File:                     459789af01224dbb0cce694d71c4654e3641fabf.roa (raw, json)
Hash identifier:          FXkrkC3RC7mGIizAkCpRLDJe6iCuDszmbJdZWbUqsZI=
Subject key identifier:   40:9F:07:FA:50:E1:37:F0:96:24:79:B6:E7:7E:CD:11:10:39:06:41
Certificate issuer:       /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial:       22937A
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/459789af01224dbb0cce694d71c4654e3641fabf.roa
Signing time:             Thu 13 Jul 2023 14:54:54 +0000
ROA not before:           Wed 12 Jul 2023 14:54:54 +0000
ROA not after:            Sun 13 Jul 2025 14:54:54 +0000
asID:                     52468
IP address blocks:        2803:cc20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265978 (0x22937a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
        Validity
            Not Before: Jul 12 14:54:54 2023 GMT
            Not After : Jul 13 14:54:54 2025 GMT
        Subject: CN=459789af01224dbb0cce694d71c4654e3641fabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:b0:f1:2a:f4:7c:36:cf:5b:e1:cd:f3:75:
                    77:1d:51:5a:c2:f0:a8:af:5d:ec:f6:05:77:df:c6:
                    a0:1a:0a:cc:24:6a:ce:3e:72:b9:a8:28:17:49:65:
                    01:ea:de:37:5d:f4:f1:b9:c6:cc:59:64:08:09:31:
                    71:4a:18:29:37:33:69:a0:6e:11:b3:36:fc:16:be:
                    cf:ef:8b:19:1a:71:38:85:4f:0d:de:c7:1e:b2:41:
                    6a:fb:82:2a:01:b8:4c:ae:54:6f:84:ea:a4:3e:5d:
                    0f:fc:2a:ab:22:9b:92:ba:9b:f6:b4:94:8b:f2:15:
                    59:b9:6b:2d:13:48:48:f4:c4:76:c2:e7:c2:c1:9d:
                    35:29:a5:86:18:81:b4:48:af:09:bd:e2:41:59:be:
                    bd:6e:1d:0b:2e:a1:df:51:fa:5f:15:80:1c:e8:ff:
                    e9:08:9b:c4:82:4a:70:94:57:51:e0:84:e2:1e:9b:
                    16:e8:6e:bf:43:f0:70:70:c3:a2:b5:71:9f:94:ed:
                    be:52:33:e4:73:0f:cc:de:26:fc:6b:93:82:81:a1:
                    68:06:d8:0a:ab:15:fc:f8:b7:40:6f:b1:12:1e:53:
                    a3:56:c0:b4:4d:94:e8:74:45:72:d0:c3:3d:fb:7f:
                    05:a0:c4:9d:c4:49:6f:55:fe:a7:ef:97:b9:8f:82:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9F:07:FA:50:E1:37:F0:96:24:79:B6:E7:7E:CD:11:10:39:06:41
            X509v3 Authority Key Identifier:
                keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/459789af01224dbb0cce694d71c4654e3641fabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:ad:d9:61:51:6a:94:f7:fd:46:eb:5c:d6:22:12:7e:51:
         78:f0:a7:b1:30:f9:a5:04:e1:cc:b9:a4:29:b8:7f:85:45:cd:
         a8:31:a4:9b:7b:dc:b3:c9:54:1e:26:25:fc:1d:3d:70:c5:92:
         3c:06:86:25:14:99:17:93:e3:d7:e9:58:66:cb:d6:5d:67:4e:
         37:67:76:78:b4:7f:30:51:06:77:5c:f1:5d:59:8f:69:d5:43:
         22:6b:09:aa:fa:f6:d6:49:9e:f7:b4:31:c1:85:3c:3d:10:2f:
         77:43:65:50:be:05:ec:e3:b2:28:1a:bd:14:e9:3c:d1:91:15:
         ec:fe:5f:6d:61:bb:cb:5a:df:fa:57:b1:ff:3a:93:6c:ff:b2:
         17:fd:1f:a4:b9:a2:ac:d8:d7:da:51:4c:95:ac:c7:c2:5d:fc:
         ff:63:0d:46:1a:64:d1:d8:d6:0f:72:93:26:5b:66:69:56:de:
         6e:39:36:c5:d1:ce:b2:ba:87:2b:b8:03:ae:65:fd:81:72:62:
         dd:c4:2c:35:7c:0a:52:0e:96:46:e7:b1:5d:87:86:22:22:b3:
         62:92:5d:79:13:6f:34:8b:eb:a2:9e:98:a3:15:48:b6:e5:ea:
         ce:22:0b:92:fb:c6:e0:81:6b:5b:90:03:dc:37:5d:81:2a:8a:
         5e:b9:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----