Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/8382741615b7cd66e8909947e1c9a89922b9e90f.roa
File:                     8382741615b7cd66e8909947e1c9a89922b9e90f.roa (raw, json)
Hash identifier:          7K4TQVC3QmZVwpFr1hJCwClwin1CUqcouC0rbsZgN/c=
Subject key identifier:   5E:CF:8F:0A:09:48:4F:F5:AA:11:F6:4A:FE:EF:F2:BA:34:E8:A5:30
Certificate issuer:       /CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
Certificate serial:       2229A0
Authority key identifier: 47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/8382741615b7cd66e8909947e1c9a89922b9e90f.roa
Signing time:             Tue 11 Jul 2023 19:30:37 +0000
ROA not before:           Mon 10 Jul 2023 19:30:37 +0000
ROA not after:            Fri 11 Jul 2025 19:30:37 +0000
asID:                     20207
IP address blocks:        2803:1dc0::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238880 (0x2229a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf
        Validity
            Not Before: Jul 10 19:30:37 2023 GMT
            Not After : Jul 11 19:30:37 2025 GMT
        Subject: CN=8382741615b7cd66e8909947e1c9a89922b9e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:a0:96:da:78:22:85:82:5f:c0:60:2d:b0:
                    a8:c6:9f:4d:1e:f4:d2:6a:73:2f:ca:25:9e:ee:f7:
                    c9:57:6a:03:cc:4c:09:f2:5c:37:08:77:3d:b4:47:
                    c6:44:b7:dc:cb:1b:2e:62:76:44:ea:a9:02:c1:34:
                    6e:21:77:c3:bd:eb:4f:ac:be:9b:bc:b2:cf:e9:b3:
                    93:d3:43:f5:96:13:6c:79:ec:22:e6:75:61:31:6d:
                    d8:5a:98:d1:39:70:d1:23:6c:6a:1c:d5:8b:d2:1d:
                    87:39:eb:08:0e:7c:4d:4c:28:4a:32:11:e9:de:0c:
                    a7:8d:a0:86:7d:2b:ec:65:5c:88:a0:08:5c:8f:91:
                    c4:f3:3c:e8:cc:1a:5f:50:cf:14:20:ac:03:71:c7:
                    82:32:21:f4:b5:35:52:3b:4f:23:ec:a0:c5:ab:5c:
                    ce:ff:0a:0a:fc:8b:bb:bb:09:ef:b0:bf:fc:6e:f2:
                    54:eb:71:84:21:a8:e8:a0:7f:79:74:36:df:b1:a9:
                    d3:1b:c9:75:48:89:31:98:21:4d:d8:27:9d:b0:e3:
                    82:b8:c3:32:2f:df:2f:b3:38:24:13:51:9e:b4:d0:
                    00:e3:ef:f8:e3:84:2e:36:f1:17:3c:68:6e:cf:6b:
                    9e:ba:d7:04:7e:e7:c8:c2:04:a2:23:72:be:b6:13:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:8F:0A:09:48:4F:F5:AA:11:F6:4A:FE:EF:F2:BA:34:E8:A5:30
            X509v3 Authority Key Identifier:
                keyid:47:55:C7:65:5D:72:76:16:EF:5F:7C:59:7F:0A:43:0A:37:2E:2B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/8382741615b7cd66e8909947e1c9a89922b9e90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e7fe4d8-a3dd-4a2a-8394-f2f2033f5abb/6ae79cea0993a29ea0f00ceb5d8b9be8e9cfadbf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:79:2e:8a:b3:13:2a:c1:71:2c:cd:58:bf:44:4f:dc:9c:3a:
         e4:9c:2c:ac:c3:7a:50:5b:f8:94:2f:98:9e:f1:f4:89:a8:6c:
         e6:25:c7:2b:18:92:7e:7a:fd:32:9c:d2:e4:e2:d1:33:96:43:
         7e:9a:a8:ba:04:d1:46:91:76:06:43:63:20:eb:ab:8b:5d:3d:
         cd:5f:ea:5c:fd:c5:a7:d2:4c:a2:8c:03:e6:52:f7:cf:29:3c:
         f6:93:50:87:ab:6f:c6:3c:18:02:e1:9b:83:e8:99:a0:c1:0b:
         d6:bc:a2:39:6e:32:6a:39:a9:ba:c2:65:cc:ce:04:34:a8:5a:
         9f:db:b9:2d:17:d5:ae:fc:0f:78:b6:9c:16:20:9f:61:69:48:
         1a:85:23:cc:69:d2:48:04:c4:f5:c8:67:84:82:fd:69:e7:dc:
         4f:8c:a7:ff:2f:81:8e:d1:c1:7d:a7:d3:10:9c:66:49:b7:93:
         82:4b:72:3d:e9:87:f6:c2:e0:93:4f:c4:42:a3:19:f6:70:ac:
         3e:0d:e4:7f:82:4d:82:ad:c8:55:04:79:65:b5:b7:27:5a:bd:
         2b:cc:50:06:15:39:07:32:ac:1c:d3:61:68:a4:41:00:eb:6c:
         7e:80:5e:8b:65:c1:90:ca:b8:cd:d6:9a:7f:9e:fd:26:13:4d:
         9f:d1:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----