Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/5f60725e127912461a1bc1308a4d2446d83ec924.roa
File:                     5f60725e127912461a1bc1308a4d2446d83ec924.roa (raw, json)
Hash identifier:          eH7XCGq9QS09hfjlPJ+o4Iw2vgnwDprSqOi4nZqgoHQ=
Subject key identifier:   66:CE:82:70:65:7A:B8:44:D6:A4:BE:57:1C:FB:54:37:D1:DA:68:A5
Certificate issuer:       /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial:       242859
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/5f60725e127912461a1bc1308a4d2446d83ec924.roa
Signing time:             Thu 14 Sep 2023 04:27:23 +0000
ROA not before:           Wed 13 Sep 2023 04:27:22 +0000
ROA not after:            Sun 14 Sep 2025 04:27:22 +0000
asID:                     262234
IP address blocks:        2803:db00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369625 (0x242859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Validity
            Not Before: Sep 13 04:27:22 2023 GMT
            Not After : Sep 14 04:27:22 2025 GMT
        Subject: CN=5f60725e127912461a1bc1308a4d2446d83ec924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:1f:5f:53:5b:1f:5b:52:65:b5:46:cb:ed:
                    1e:fd:77:d7:74:2f:61:a1:f0:e6:cc:09:e8:b6:6c:
                    36:88:09:ac:63:56:2b:ea:b8:03:85:cd:ec:ba:ca:
                    e2:f3:a1:71:18:2f:e2:ba:07:1c:a5:1f:db:b1:6b:
                    3d:44:61:4e:95:36:98:f9:d1:45:1d:17:1a:aa:97:
                    73:1a:01:69:c8:70:89:d9:e8:bb:ae:01:d9:02:48:
                    e3:68:1f:1b:20:1a:d1:9a:bb:94:b7:da:81:69:eb:
                    d7:07:9a:00:00:61:5d:1b:aa:28:fe:88:c9:fd:e8:
                    81:1e:2d:09:02:53:ed:ea:9b:e4:92:ca:a7:43:d5:
                    3d:18:58:de:cd:d1:72:4e:91:09:88:6a:13:57:0f:
                    ad:83:c2:90:17:36:af:1e:0d:8f:03:69:91:8a:1c:
                    d4:f4:02:dd:91:bf:92:94:f1:49:fb:62:04:85:91:
                    b4:4f:97:70:6a:22:7f:bb:12:81:cc:ba:e4:58:8a:
                    40:7b:75:07:0a:e9:55:f3:c9:32:6d:cb:c3:b9:ad:
                    e5:6e:f2:df:cf:76:81:10:ae:30:ab:24:b8:3e:8d:
                    30:99:9c:de:9a:ba:6c:cc:4f:ee:33:c7:71:fc:a1:
                    47:36:94:db:d1:52:39:10:58:ef:ac:58:7e:02:92:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:82:70:65:7A:B8:44:D6:A4:BE:57:1C:FB:54:37:D1:DA:68:A5
            X509v3 Authority Key Identifier:
                keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/5f60725e127912461a1bc1308a4d2446d83ec924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:cc:f3:3c:4b:19:30:12:33:cc:d5:9c:45:c6:27:62:28:
         3b:5a:8f:58:98:b9:32:30:3d:69:10:02:6c:f4:c3:d7:96:bb:
         77:47:ff:63:61:3a:42:94:5e:df:48:f9:13:69:04:d6:8d:7f:
         dd:e9:fe:e4:7c:ff:63:e0:ef:19:7c:93:e7:a9:25:32:e8:87:
         c2:37:aa:1d:12:eb:e5:40:14:8f:7f:8c:46:74:38:79:0e:e7:
         c5:a8:ae:74:c0:3b:52:94:17:35:bc:b5:aa:7f:29:ad:04:f0:
         d3:46:25:3a:05:93:e2:e7:77:d3:f6:46:00:89:05:13:72:99:
         bf:8d:af:15:a1:c7:a2:ce:09:79:68:90:d1:da:ac:55:51:10:
         c1:b2:6e:99:b5:8a:e1:1b:cb:01:11:54:80:9d:bd:c4:38:bb:
         33:9c:1d:fe:50:f9:57:72:79:fe:89:88:d8:28:50:2d:d1:c1:
         b9:9d:87:17:91:f0:c2:0b:1c:c2:40:4d:24:cc:3f:f1:53:f8:
         d3:82:fc:69:bf:e2:13:0d:fe:96:cd:2d:1e:34:27:ef:3f:b1:
         d4:c9:7c:0d:f9:ee:dc:10:68:94:82:bc:39:62:75:9d:fc:59:
         54:0d:ad:49:50:03:55:f5:ee:5e:10:9a:06:92:b7:4d:15:28:
         4f:fd:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----