Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/f5f1fe52e665f7796177360dc96b25d5f8f6c3a7.roa
File:                     f5f1fe52e665f7796177360dc96b25d5f8f6c3a7.roa (raw, json)
Hash identifier:          Grir7FQCfp9g5dhaMpyXwLoycLLIjzeg0j7CpPjZONs=
Subject key identifier:   78:B4:86:BF:AB:C9:C7:2B:7D:3F:AB:14:0F:00:7D:C0:2D:20:E3:67
Certificate issuer:       /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial:       04F88B
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/f5f1fe52e665f7796177360dc96b25d5f8f6c3a7.roa
Signing time:             Fri 04 Aug 2023 15:59:24 +0000
ROA not before:           Thu 03 Aug 2023 15:59:24 +0000
ROA not after:            Mon 04 Aug 2025 15:59:24 +0000
asID:                     272854
IP address blocks:        2803:c290::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325771 (0x4f88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Validity
            Not Before: Aug  3 15:59:24 2023 GMT
            Not After : Aug  4 15:59:24 2025 GMT
        Subject: CN=f5f1fe52e665f7796177360dc96b25d5f8f6c3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:55:24:4f:cf:01:3a:80:98:39:66:19:49:
                    97:61:43:c9:65:a1:8b:ba:8c:47:e9:68:4d:50:86:
                    cf:24:e8:87:71:52:38:4c:39:24:95:88:09:9c:97:
                    e1:50:74:e5:0d:32:ce:90:fc:30:d3:0c:b9:28:d7:
                    6e:82:30:b0:03:08:fc:31:04:82:52:35:58:d3:3d:
                    78:e4:ae:63:16:1c:47:22:a7:ed:94:2c:c5:47:c5:
                    5d:2e:dd:f1:23:c9:bc:62:a5:5b:ce:20:b7:81:0e:
                    79:45:9f:a5:63:b0:3a:db:7e:5b:48:45:9a:e3:5b:
                    71:9f:65:97:40:76:53:60:e7:d2:43:98:6b:7b:fd:
                    39:4e:ee:fe:1a:ba:a2:14:5c:07:31:cf:66:2c:40:
                    62:1f:6f:05:16:ad:16:d6:12:1b:3f:d8:c9:38:87:
                    ea:a8:61:1e:83:4e:8e:83:fd:b8:d2:d6:4e:8c:d1:
                    ca:ea:eb:b8:27:1f:55:af:32:91:28:0d:08:51:cc:
                    7b:18:3b:ab:fc:99:8d:93:e5:f2:ba:c3:a6:a8:6c:
                    5e:1a:00:07:19:93:8a:83:07:fb:fb:61:cc:07:b0:
                    64:b0:d0:fd:7c:d0:5c:3a:74:7c:bc:dd:92:48:26:
                    6e:f6:ba:c1:4a:c6:e0:44:94:2d:ce:a4:36:2d:a9:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:86:BF:AB:C9:C7:2B:7D:3F:AB:14:0F:00:7D:C0:2D:20:E3:67
            X509v3 Authority Key Identifier:
                keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/f5f1fe52e665f7796177360dc96b25d5f8f6c3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:33:65:1c:c3:a0:e4:a2:3b:bb:f6:54:e9:c4:44:0e:33:fe:
         f4:62:30:f4:74:9c:a6:cb:d2:6e:c6:56:0e:e3:83:31:d4:92:
         11:26:2f:58:3d:55:f5:af:e6:0a:b2:08:8c:fb:ef:a5:ca:7c:
         6a:eb:ca:a6:cd:0f:3c:9f:a3:02:09:ba:fd:f0:d6:27:02:df:
         ff:0d:b4:1c:7d:69:13:63:4c:67:f0:e5:a1:09:87:0f:0f:43:
         35:4c:3d:35:3b:05:5b:c3:ea:f2:28:5e:08:93:21:2e:49:e6:
         ea:a8:12:75:63:de:84:91:9e:2d:3c:86:e5:1b:68:ce:5d:48:
         0f:36:c7:c8:b9:02:99:8f:18:ea:36:10:2b:7a:07:68:e0:23:
         53:b2:45:98:71:4d:91:8d:b6:40:d1:16:8f:42:f8:8c:a7:01:
         9c:58:b4:3d:6c:e2:92:9f:86:a6:54:11:6a:c7:cf:91:b6:ab:
         52:77:f2:f7:b6:84:d3:33:b2:91:cf:e6:e1:e1:ca:10:44:b2:
         0f:4b:84:0d:71:b1:69:b3:ea:c8:b5:9d:eb:90:b3:e0:e1:38:
         84:9b:32:2a:fc:f2:2b:2b:f1:fa:6f:a4:82:80:8b:aa:2b:40:
         dd:c1:9b:12:79:6a:a1:0b:9d:dc:9d:ff:c5:72:21:2f:86:fa:
         5d:6d:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----