Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/e5e7785d6aa52a03fc00c48a490edae59b62e532.roa
File:                     e5e7785d6aa52a03fc00c48a490edae59b62e532.roa (raw, json)
Hash identifier:          8FS48D/SzP4nCQtcHEr42aEf0BMh9Kf2XxZjtK7t2Vc=
Subject key identifier:   D1:93:72:04:BC:2A:80:26:01:83:94:72:FE:05:59:20:7A:7C:D6:74
Certificate issuer:       /CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Certificate serial:       20AE1F
Authority key identifier: BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/e5e7785d6aa52a03fc00c48a490edae59b62e532.roa
Signing time:             Fri 21 Apr 2023 15:09:02 +0000
ROA not before:           Thu 20 Apr 2023 15:09:02 +0000
ROA not after:            Mon 21 Apr 2025 15:09:02 +0000
asID:                     263170
IP address blocks:        2803:2080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141727 (0x20ae1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
        Validity
            Not Before: Apr 20 15:09:02 2023 GMT
            Not After : Apr 21 15:09:02 2025 GMT
        Subject: CN=e5e7785d6aa52a03fc00c48a490edae59b62e532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:b5:bb:eb:61:26:35:10:3c:1e:53:cc:01:
                    e9:d6:03:3b:40:8c:60:98:90:1f:31:de:06:32:f4:
                    af:28:7a:7e:78:b1:0a:bc:d0:f9:3f:00:a3:3b:dc:
                    29:73:03:c1:a3:8d:a2:5e:9f:98:5d:db:8c:22:40:
                    67:48:a5:18:ef:9d:f4:18:1a:68:3b:ff:47:3a:ed:
                    29:01:d1:9c:d4:fd:ff:6b:ee:dd:a3:c0:75:6e:e5:
                    41:34:1e:3f:9a:a5:18:9a:c8:d6:0f:cf:e5:fb:fc:
                    6b:dd:dd:e0:f9:41:db:a1:92:a0:e6:ce:f5:86:78:
                    7e:8f:c6:bf:4a:2c:fd:75:c1:c3:d0:5c:76:a5:38:
                    55:1d:3c:f1:c8:5b:df:5a:47:eb:1e:92:e3:14:af:
                    f9:50:f0:cc:53:1a:37:46:76:08:36:02:4f:d3:d9:
                    28:bf:7f:63:f2:5b:ed:ef:f0:87:9a:c3:38:45:a1:
                    1e:2b:8b:1e:21:c2:ab:b9:88:35:9f:e7:ae:6a:a2:
                    e3:87:31:9a:11:f3:44:ef:12:14:ec:e7:cc:b8:0a:
                    e4:74:6b:ae:a3:f9:5e:10:7a:95:6b:1b:0e:4d:d0:
                    30:2c:62:77:0c:c6:9d:92:0a:6f:84:64:35:3f:7d:
                    7f:cb:4d:bd:90:88:ca:46:67:a9:ed:bf:16:eb:69:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:93:72:04:BC:2A:80:26:01:83:94:72:FE:05:59:20:7A:7C:D6:74
            X509v3 Authority Key Identifier:
                keyid:BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/e5e7785d6aa52a03fc00c48a490edae59b62e532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/978e7d88424415725f3aaf2277c4a6e9a5313d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2080::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:36:f7:7a:90:bf:fc:00:80:f9:bc:51:be:b6:9e:39:60:97:
         71:88:0b:01:ae:23:9e:d0:0f:21:cb:23:12:06:3a:cf:9a:42:
         80:4a:1b:e2:f1:b4:fb:1f:3c:12:a7:40:19:8c:6c:20:ff:79:
         55:0d:60:07:02:f3:73:ef:f2:61:e5:12:9b:7c:d4:d9:f1:9c:
         cb:7b:ba:87:b1:96:21:0b:93:77:2e:11:3a:6f:95:32:3e:e3:
         99:da:66:14:19:7b:94:9f:77:59:7e:18:3c:ae:b9:22:2e:0b:
         5c:42:27:7c:e2:c5:46:e9:e3:c5:f1:f1:fc:f9:38:eb:de:68:
         8c:f7:69:6c:f2:8d:b5:05:7d:90:a4:9d:e0:70:b1:33:ef:19:
         94:a0:57:22:a2:79:ff:31:87:2c:b3:56:e8:ea:79:da:d8:7e:
         a4:73:1d:94:b4:20:ff:64:68:98:87:d7:62:44:37:50:d5:81:
         c3:7a:66:86:cd:ad:39:e0:b7:6b:65:fd:71:92:ed:5c:09:87:
         14:9d:fe:af:24:8a:1c:89:88:3d:db:c0:59:3c:54:5b:36:6d:
         01:6b:ad:7e:2c:dc:46:1b:ed:4a:ba:d0:e3:a4:4a:a3:72:86:
         86:c5:ec:76:c9:9b:34:86:a8:5a:36:18:e1:67:e4:5c:a9:7d:
         8d:c0:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----