Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e68a92e83b0e8b659c941a80d2a1483c3194c55c.roa
File:                     e68a92e83b0e8b659c941a80d2a1483c3194c55c.roa (raw, json)
Hash identifier:          G/I5M9yYESG9lsbOwcrgn3Jdeo2kXrtLaAWjfypdT9k=
Subject key identifier:   76:79:94:13:98:22:03:7B:AD:B5:EE:B7:48:0B:0B:C1:0E:C7:2C:51
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       012BBA
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e68a92e83b0e8b659c941a80d2a1483c3194c55c.roa
Signing time:             Wed 02 Nov 2022 13:14:04 +0000
ROA not before:           Tue 01 Nov 2022 13:11:05 +0000
ROA not after:            Sat 02 Nov 2024 13:11:05 +0000
asID:                     8163
IP address blocks:        2803:fd00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76730 (0x12bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Nov  1 13:11:05 2022 GMT
            Not After : Nov  2 13:11:05 2024 GMT
        Subject: CN=e68a92e83b0e8b659c941a80d2a1483c3194c55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:12:a7:55:56:58:1c:4c:27:b1:34:7a:3b:
                    d8:88:ab:05:d0:64:57:be:70:13:a2:6e:2b:a0:82:
                    44:78:9a:24:36:c3:8a:cc:27:11:2b:46:43:ca:82:
                    31:c9:b0:e8:ba:c9:a0:99:a4:a1:46:71:3c:0b:ab:
                    4e:a6:4d:11:9e:1c:28:5f:41:e5:f1:7b:83:d0:d9:
                    a9:c4:08:54:6b:78:38:ad:76:ad:eb:d4:6e:ef:97:
                    7a:df:33:51:e6:b8:55:69:05:30:07:4b:3d:b7:b7:
                    6c:26:4c:d2:06:15:b6:14:62:8f:6f:0b:df:29:04:
                    c3:50:37:a4:4f:34:dd:56:ef:3c:68:5e:29:86:2b:
                    11:c7:c3:5d:f1:b3:8f:e6:23:51:4c:ad:9c:14:88:
                    19:63:da:05:31:a6:7d:f8:83:13:49:67:b0:a5:ef:
                    44:10:8c:98:e9:6f:c9:6e:12:4e:8f:57:46:cd:c9:
                    ed:0f:6a:a7:7e:bb:6d:bb:f0:32:27:5b:19:91:1a:
                    83:88:ff:61:f2:2d:ee:3e:ff:d1:7d:d9:5a:a4:13:
                    30:d1:c6:53:b0:9e:04:29:21:e3:60:a1:5b:26:42:
                    47:2f:48:fb:bd:7f:c4:26:7d:e0:a9:39:1c:bd:88:
                    85:8e:7e:6e:fb:b8:5d:c1:26:45:a2:f0:0e:2a:8a:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:94:13:98:22:03:7B:AD:B5:EE:B7:48:0B:0B:C1:0E:C7:2C:51
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e68a92e83b0e8b659c941a80d2a1483c3194c55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:57:da:a7:31:41:15:98:74:ff:44:a5:f3:09:fe:a0:66:
         c9:ab:8e:d5:1f:80:73:53:d8:d8:f8:6a:a1:7d:bf:19:87:d1:
         2c:a6:5f:b2:0b:36:32:05:73:41:e3:78:06:c1:2c:1a:fb:91:
         4a:aa:38:e1:db:34:43:f5:61:4b:49:c6:0e:6e:84:bc:a8:c3:
         55:81:99:e4:1f:19:28:21:c6:6f:8d:19:45:2b:ce:c8:0e:e9:
         46:16:6b:69:b7:28:cf:49:5c:98:3b:4b:de:1b:35:65:82:e8:
         af:aa:59:df:4b:22:b7:cb:e4:c6:e2:90:f8:38:81:01:e4:cd:
         97:7d:2c:3d:46:e7:ca:86:e8:16:3f:1e:59:36:5e:a2:53:b6:
         a1:9c:52:57:28:53:33:13:5d:e0:9e:f2:cb:42:6d:09:92:c4:
         55:4e:e1:37:75:b0:3a:a4:33:67:24:bd:40:b7:ec:c7:3c:0f:
         33:35:bd:50:a8:4e:d0:e5:50:3e:c6:f8:bd:71:b2:ff:96:ae:
         c6:41:6c:10:55:a6:66:b6:90:48:01:cd:58:eb:9b:c2:e6:2e:
         65:24:10:30:dd:c5:ad:1f:b2:24:17:42:75:7f:6c:6c:4f:5f:
         1d:b2:90:63:8c:20:31:98:cc:c7:f3:47:c8:8c:a3:9d:1b:c1:
         f7:37:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----