Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/83ff8583e4da00716f8f4c619d2b190376714c0e.roa
File:                     83ff8583e4da00716f8f4c619d2b190376714c0e.roa (raw, json)
Hash identifier:          AvWDQolLQ2Xkdy43R5d50ODr8sdx1vo7L8W92Xvbx08=
Subject key identifier:   7C:EE:60:8F:EA:17:BA:14:61:3F:FD:77:A3:45:49:0C:7B:62:27:20
Certificate issuer:       /CN=14ca70169ff8886e815bd50416068dfdf2827fa6
Certificate serial:       2396B6
Authority key identifier: 47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/83ff8583e4da00716f8f4c619d2b190376714c0e.roa
Signing time:             Thu 20 Jul 2023 00:46:00 +0000
ROA not before:           Wed 19 Jul 2023 00:46:00 +0000
ROA not after:            Sun 20 Jul 2025 00:46:00 +0000
asID:                     264744
IP address blocks:        2803:b4c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332342 (0x2396b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ca70169ff8886e815bd50416068dfdf2827fa6
        Validity
            Not Before: Jul 19 00:46:00 2023 GMT
            Not After : Jul 20 00:46:00 2025 GMT
        Subject: CN=83ff8583e4da00716f8f4c619d2b190376714c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:7f:8c:50:aa:dc:ff:cd:a8:b1:4e:2a:91:
                    c5:ef:69:f3:e2:c6:8c:2c:24:12:8b:fd:00:3a:0f:
                    30:21:1a:d9:14:b9:19:e6:cc:ef:43:e3:51:41:80:
                    af:30:2b:c2:06:ea:eb:48:40:69:b7:6e:78:0b:51:
                    3c:ce:ca:2b:f4:12:8a:0a:c5:4e:55:36:31:85:a2:
                    49:1b:3b:8d:4d:d3:ca:17:e2:aa:2b:95:8d:ca:b3:
                    b9:52:9d:a1:72:ee:24:65:83:df:85:89:38:2d:0d:
                    9a:6d:b0:98:40:6c:84:ee:84:da:c2:92:28:ad:e1:
                    a6:7c:a7:2c:1c:38:ce:29:a8:18:55:7e:b1:1c:12:
                    84:fb:70:9c:91:10:e3:bb:e3:a3:e7:59:77:5d:11:
                    ec:97:67:8b:a4:e8:07:82:a7:14:32:43:8e:76:f7:
                    4d:a3:a5:04:d2:9a:4d:9d:c9:83:8a:57:d3:b1:c6:
                    ef:e9:6c:96:39:7d:b9:42:1e:99:38:0e:c5:2b:a9:
                    2a:57:00:54:8b:88:55:48:53:5a:cb:ec:e6:7b:ed:
                    b5:0c:b8:19:7b:9f:00:e9:ce:8c:b3:d1:af:88:aa:
                    ab:da:ec:bd:a7:c5:d6:97:75:61:2c:98:7a:56:87:
                    f2:4a:07:7b:2d:a4:6c:74:5e:a2:28:a7:d1:5d:28:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EE:60:8F:EA:17:BA:14:61:3F:FD:77:A3:45:49:0C:7B:62:27:20
            X509v3 Authority Key Identifier:
                keyid:47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/83ff8583e4da00716f8f4c619d2b190376714c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:78:5d:ed:3c:9e:61:26:de:5c:3c:9f:9f:f6:56:71:99:0c:
         01:e0:97:83:96:1a:ef:bd:58:40:e3:37:7b:eb:87:30:94:66:
         1d:42:46:05:4b:d8:21:ce:c9:ea:44:59:08:f8:36:2b:4e:d8:
         2a:4b:d9:d7:0a:a9:6c:c8:91:f6:bc:51:d7:ac:cb:ff:52:69:
         35:f1:70:9d:a9:a9:4c:45:c7:1e:0f:f5:4f:28:04:99:5f:58:
         f3:18:19:28:94:eb:a6:e8:22:77:f2:9c:13:6f:55:76:7a:f3:
         70:ef:4d:6e:a1:c4:52:65:61:ca:14:85:4e:42:db:18:42:98:
         1f:dc:e9:f9:ba:56:73:5b:04:c4:d9:ad:7e:0c:04:b0:11:4c:
         60:36:68:c3:e2:d6:ca:d1:46:13:c2:25:84:ef:80:9e:b7:50:
         ff:ad:41:53:9e:5a:02:fa:43:0a:51:aa:ce:f6:c6:9f:65:ef:
         a8:7d:8c:99:e6:50:db:98:ad:51:1e:b0:9c:c3:e3:c9:7e:6b:
         b9:01:34:eb:ee:fd:8f:a1:ac:64:05:e9:eb:82:ae:1d:2b:fb:
         f9:99:24:59:a5:6f:ef:f4:9e:da:68:98:c3:03:28:88:32:f8:
         f1:cb:34:ef:29:f6:47:44:ea:51:3c:eb:1a:8f:6d:9e:21:97:
         31:5d:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----