Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/5bd6e18d7e465e1c8f856627f94eb4c40c9f1ff7.roa
File:                     5bd6e18d7e465e1c8f856627f94eb4c40c9f1ff7.roa (raw, json)
Hash identifier:          wpzhl2usF+PAMrPFbvsuW36xh86WTKXwAaRBWfREX+k=
Subject key identifier:   B2:42:47:CC:7D:26:5F:F0:05:0A:6E:83:B6:2D:10:87:F2:AF:D7:82
Certificate issuer:       /CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
Certificate serial:       14FDFA
Authority key identifier: D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/5bd6e18d7e465e1c8f856627f94eb4c40c9f1ff7.roa
Signing time:             Mon 29 May 2023 16:45:20 +0000
ROA not before:           Sun 28 May 2023 16:45:20 +0000
ROA not after:            Thu 29 May 2025 16:45:20 +0000
asID:                     270068
IP address blocks:        2803:a3e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375738 (0x14fdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46769ac4edeccf5ef8d51d86ae34b0546e67293d
        Validity
            Not Before: May 28 16:45:20 2023 GMT
            Not After : May 29 16:45:20 2025 GMT
        Subject: CN=5bd6e18d7e465e1c8f856627f94eb4c40c9f1ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:f4:c8:d4:1a:7e:63:86:35:56:ed:5d:d8:
                    d4:4c:d6:b7:87:eb:d5:48:4b:32:c2:15:b4:da:60:
                    e2:35:83:d7:97:eb:74:53:c8:ec:25:fb:94:46:1e:
                    51:58:db:e7:b1:93:c2:19:76:12:bb:b6:d7:b1:85:
                    c7:e5:bf:ce:27:dc:74:29:ec:13:21:44:82:0f:0f:
                    1a:19:1e:26:fd:64:ee:92:08:ea:d7:26:5b:83:b2:
                    b7:e5:35:2a:14:af:22:b8:7c:fa:48:85:56:4e:63:
                    56:aa:bd:77:66:bb:ce:b9:c4:a0:5b:51:f5:5f:63:
                    f6:af:ef:15:89:47:f8:06:a6:09:d5:2b:73:49:ae:
                    96:a4:cb:17:19:f9:f7:f1:56:ff:19:bc:88:8b:87:
                    25:31:74:e9:65:43:0f:62:06:2c:86:ee:83:fc:4f:
                    19:1f:f0:b4:d2:01:bb:d4:49:b2:f3:86:c2:ee:a4:
                    a3:58:b3:15:da:af:8c:90:ea:ca:92:9e:be:f9:5f:
                    d4:58:7b:0c:8b:97:9f:a6:3d:ea:36:ad:bc:3e:05:
                    d2:27:6d:6d:fc:1c:46:2e:01:b7:a2:9b:b7:53:30:
                    94:81:43:2d:8e:99:8f:49:4d:a4:b8:08:e9:90:c6:
                    ae:21:99:5f:ad:70:a9:fb:0f:c6:9d:bb:9c:0c:bf:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:47:CC:7D:26:5F:F0:05:0A:6E:83:B6:2D:10:87:F2:AF:D7:82
            X509v3 Authority Key Identifier:
                keyid:D5:C0:3B:18:85:95:E4:45:93:0F:AF:4B:97:83:57:52:8F:25:11:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46769ac4edeccf5ef8d51d86ae34b0546e67293d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/5bd6e18d7e465e1c8f856627f94eb4c40c9f1ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8273ed29-e2e8-47be-866f-61abf8cba30b/46769ac4edeccf5ef8d51d86ae34b0546e67293d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:5f:c5:d1:d7:b8:34:03:f9:21:8d:46:13:aa:c8:a5:f8:98:
         dd:81:fb:64:29:af:66:87:ac:20:1a:54:6b:2c:01:40:0a:d1:
         5a:f2:ec:a3:a5:4e:29:81:84:33:05:01:37:e5:2c:2f:d2:a2:
         48:09:9e:77:cb:b6:0e:77:a5:fd:82:6d:90:32:66:19:34:f7:
         b2:80:60:45:71:84:c6:98:c5:7f:15:44:a8:b7:fc:9f:3b:02:
         11:32:10:67:5f:e5:d9:fe:66:91:96:e9:71:b5:be:fc:9f:b6:
         79:1a:c9:3c:0d:74:0c:90:b5:24:cd:fa:64:94:60:f8:bf:b5:
         2a:b1:37:3b:da:79:28:5f:1f:1c:62:80:41:61:a2:df:43:70:
         47:e1:42:ab:a5:a7:d6:ef:d5:ce:a1:23:45:a4:c9:10:ed:3d:
         1e:66:c4:86:d6:de:4b:5c:a7:a2:5c:37:be:44:82:a0:7f:4d:
         83:b5:bc:ef:05:8c:11:6f:5d:95:23:57:f6:0b:cd:f5:26:b7:
         7a:13:c8:a1:c8:37:54:09:9c:67:8e:7d:f9:93:9b:7c:8f:e8:
         bc:7a:99:f8:0e:40:61:79:b8:6d:a0:03:11:fb:53:86:ff:3e:
         0b:d6:ea:e7:0b:e3:15:0d:fd:b8:4a:28:f6:bd:90:63:1c:e5:
         2c:c8:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----