Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/510528d8f17c52ce822c503d48489e323b7049c9.roa
File:                     510528d8f17c52ce822c503d48489e323b7049c9.roa (raw, json)
Hash identifier:          OydiZ/tdnFExvr6qrKeBaajYhIaVUyeDOsljypJp6HI=
Subject key identifier:   E4:6B:47:88:9A:49:AB:1C:B6:ED:19:73:45:8F:4C:18:42:07:0A:22
Certificate issuer:       /CN=14ca70169ff8886e815bd50416068dfdf2827fa6
Certificate serial:       2391D0
Authority key identifier: 47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/510528d8f17c52ce822c503d48489e323b7049c9.roa
Signing time:             Thu 20 Jul 2023 00:42:50 +0000
ROA not before:           Wed 19 Jul 2023 00:42:49 +0000
ROA not after:            Sun 20 Jul 2025 00:42:49 +0000
asID:                     27919
IP address blocks:        2803:b4c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331088 (0x2391d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ca70169ff8886e815bd50416068dfdf2827fa6
        Validity
            Not Before: Jul 19 00:42:49 2023 GMT
            Not After : Jul 20 00:42:49 2025 GMT
        Subject: CN=510528d8f17c52ce822c503d48489e323b7049c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:8c:c0:e8:be:31:18:de:08:34:c1:9c:49:
                    35:d6:a3:c5:68:29:7e:c6:12:35:a6:28:6f:ec:b1:
                    fa:ce:4d:37:45:7f:ec:67:61:bf:8d:16:95:ce:8a:
                    62:5e:91:6d:44:18:c1:df:ae:86:df:b0:e6:a7:35:
                    39:be:15:a8:50:cb:3a:e8:8e:ff:f8:97:ab:03:81:
                    18:5d:bc:b9:00:d5:c3:32:f3:21:75:25:cf:e7:ae:
                    e2:4a:df:c0:ed:40:5d:d3:88:cf:32:3b:2a:c3:a3:
                    75:ac:d6:49:df:0a:91:1f:a6:0c:28:82:9f:cd:04:
                    1a:c8:cb:df:a9:06:0d:3e:f9:49:d3:ab:02:2c:1b:
                    10:e5:4c:32:8d:9b:dc:b8:b7:09:cf:31:c6:77:af:
                    2a:cd:95:e4:57:a4:27:73:b2:aa:cb:dd:b8:2c:8e:
                    7f:f9:23:95:3d:4c:3c:cd:52:b7:9d:ba:f7:3e:01:
                    1f:67:e5:0c:d0:21:31:dd:8c:59:f0:82:b4:64:52:
                    33:13:ef:bd:43:34:fa:bb:1e:83:6b:dc:04:ae:97:
                    d8:bf:27:48:8c:33:29:97:68:28:35:61:f0:3b:6e:
                    79:46:63:14:70:c2:0c:18:b9:4e:0b:af:46:81:51:
                    b2:c5:5e:75:2c:85:1b:ab:61:50:e5:cf:c4:d9:b5:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:47:88:9A:49:AB:1C:B6:ED:19:73:45:8F:4C:18:42:07:0A:22
            X509v3 Authority Key Identifier:
                keyid:47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/510528d8f17c52ce822c503d48489e323b7049c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:3e:8d:a7:80:58:41:76:b7:e5:14:a4:c1:0b:e0:d6:6a:
         67:38:44:fc:3b:80:b3:7c:c2:30:ba:1a:8b:ae:a4:8b:f1:c7:
         4b:e4:2e:d1:80:fd:b5:90:67:d4:60:0f:85:29:b6:94:ba:e0:
         ce:97:3f:0f:64:e0:4f:12:af:bf:a0:02:5e:96:3a:77:f0:68:
         f3:b9:17:85:b4:6c:4b:e7:73:fd:b8:16:4f:54:39:cb:34:2e:
         16:dd:ae:67:11:6e:ae:fe:62:ad:f9:ad:45:fe:fa:fc:fa:6c:
         32:fc:aa:bc:11:c6:5c:10:3a:ce:19:ad:8f:bb:e7:ef:87:81:
         35:31:a6:bd:dc:08:98:98:57:02:65:17:af:ea:e3:49:00:4d:
         2f:1b:b3:92:3e:9b:7b:36:d4:5f:c0:5f:83:58:c4:b6:ef:89:
         10:34:8c:33:4b:09:49:ba:0b:1b:b7:07:24:27:ee:dc:0a:09:
         f9:df:08:f5:6d:78:2e:9d:1c:b1:7a:48:e8:d4:49:75:46:a8:
         f0:8b:8a:12:72:3b:67:02:90:f0:25:5a:fc:8c:45:79:2f:1b:
         e8:76:ba:78:5a:cc:92:03:4b:47:7b:42:3c:f8:d7:d0:f6:75:
         11:91:2f:85:79:f4:fc:ef:45:80:c5:97:b2:e2:76:ba:a5:64:
         5e:3f:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----