Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/6ad601df438ab2668ef027b6e26d03da759fcb5c.roa
File:                     6ad601df438ab2668ef027b6e26d03da759fcb5c.roa (raw, json)
Hash identifier:          WVabjepCPkPNaOMKQZ+OOoQ7bC/djkzW29lpVz54XJo=
Subject key identifier:   85:07:B8:B9:CC:CC:4E:7F:3A:E5:9D:C6:3B:02:7E:DA:E4:08:BC:46
Certificate issuer:       /CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Certificate serial:       2160D6
Authority key identifier: 7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/6ad601df438ab2668ef027b6e26d03da759fcb5c.roa
Signing time:             Wed 05 Jul 2023 02:04:54 +0000
ROA not before:           Tue 04 Jul 2023 02:04:53 +0000
ROA not after:            Sat 05 Jul 2025 02:04:53 +0000
asID:                     52468
IP address blocks:        2803:fc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187478 (0x2160d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
        Validity
            Not Before: Jul  4 02:04:53 2023 GMT
            Not After : Jul  5 02:04:53 2025 GMT
        Subject: CN=6ad601df438ab2668ef027b6e26d03da759fcb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:eb:be:8d:7f:4e:5f:4f:83:e9:fd:18:59:
                    a2:e6:80:11:5e:57:f9:a0:c4:5f:f3:fe:d9:91:e6:
                    83:83:b7:d4:e0:75:3c:e7:3b:b2:81:6a:0d:96:a0:
                    b8:54:f5:b3:2b:4b:af:b7:b2:0f:45:ec:84:06:5b:
                    ed:1a:51:4e:b4:2b:fe:2f:20:e0:51:54:c4:4a:de:
                    b5:80:f4:59:c4:65:33:9b:69:59:59:83:7f:67:2e:
                    5b:1d:3b:54:ac:fd:c5:57:5d:4f:e3:70:bb:b5:3e:
                    d8:42:02:03:a2:88:15:71:14:a8:3e:b8:49:22:76:
                    1b:8d:81:c4:4c:7c:1d:19:49:5d:57:12:8d:aa:e0:
                    26:5a:72:fe:ed:cc:2f:c1:7c:ff:ea:af:0a:b2:15:
                    7c:50:6b:2a:63:34:66:18:22:8d:e5:37:b3:82:86:
                    e1:4d:88:89:a2:77:2b:ff:64:ce:33:be:8f:91:85:
                    cf:20:d4:11:91:bb:4d:be:25:13:59:95:df:26:01:
                    62:55:be:cc:b0:d8:f5:f5:d8:31:4c:02:ba:bc:20:
                    92:79:b8:52:60:ea:cf:04:3e:01:38:10:19:58:86:
                    42:e7:b3:6c:8f:a1:60:f9:44:46:c5:4e:c9:fd:00:
                    4d:39:98:0e:58:b0:9a:eb:97:44:a9:43:69:2c:bf:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:B8:B9:CC:CC:4E:7F:3A:E5:9D:C6:3B:02:7E:DA:E4:08:BC:46
            X509v3 Authority Key Identifier:
                keyid:7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/6ad601df438ab2668ef027b6e26d03da759fcb5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:42:de:4b:9c:ea:dd:86:04:9e:f1:99:ff:73:06:7f:80:13:
         e8:aa:cd:1c:04:b1:11:93:79:ba:d7:1a:78:59:6b:58:94:14:
         17:d6:c2:a6:f7:38:06:85:c3:ba:30:8b:cd:08:18:92:3e:b9:
         2e:47:6c:eb:d7:29:f6:73:48:8a:20:ad:9b:cb:f4:f3:95:23:
         a7:1d:cc:4d:82:ec:30:e1:46:7d:83:9b:00:e7:22:2e:c7:49:
         00:53:50:e0:33:e6:84:3f:fa:ee:b4:c8:45:a3:e5:0a:d5:8d:
         f0:69:43:e9:25:22:62:7c:88:1f:cd:02:b1:d9:7a:db:d7:72:
         ba:3b:41:a0:b3:a4:02:35:90:1c:cc:51:31:24:e2:fe:ab:8d:
         d0:7a:57:b0:45:02:54:5d:aa:c5:23:3c:2b:5b:01:5f:99:d8:
         b5:5e:f8:62:a7:b3:5e:3a:dc:a1:63:b3:1b:1b:52:cf:2f:e2:
         a9:ed:66:e1:77:54:d4:63:3f:c1:75:c8:b8:90:09:51:72:42:
         cb:33:5d:98:34:ef:e4:6d:d6:98:4e:99:98:74:00:78:b8:d3:
         11:24:93:22:d2:b7:7a:23:ef:37:96:60:31:28:31:7c:b3:0e:
         5e:d6:4d:56:44:07:f2:f7:41:47:53:06:72:03:15:5d:eb:77:
         86:56:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----