Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2c353720b6c15ec3a46c6443d7010f7ac9c8736a.roa
File:                     2c353720b6c15ec3a46c6443d7010f7ac9c8736a.roa (raw, json)
Hash identifier:          2KUjIB3j0oRiNg9SOR15Af08J+yO6DmhJkmV24LMCT4=
Subject key identifier:   85:32:83:32:36:20:37:45:FB:A5:F6:39:62:D5:08:2A:67:53:2D:79
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1F9EDC
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2c353720b6c15ec3a46c6443d7010f7ac9c8736a.roa
Signing time:             Thu 25 May 2023 00:46:43 +0000
ROA not before:           Wed 24 May 2023 00:46:43 +0000
ROA not after:            Sun 25 May 2025 00:46:43 +0000
asID:                     272848
IP address blocks:        2803:5200:6412::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072284 (0x1f9edc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 24 00:46:43 2023 GMT
            Not After : May 25 00:46:43 2025 GMT
        Subject: CN=2c353720b6c15ec3a46c6443d7010f7ac9c8736a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:72:86:3a:f1:6a:4b:a3:01:9f:56:aa:2a:
                    6f:5b:16:9f:71:d5:5c:d9:57:30:01:3e:1e:dc:15:
                    ef:9b:4e:49:0b:5f:3e:38:24:46:b2:0a:9f:be:6b:
                    99:5d:21:ec:5d:7c:c1:97:b4:d4:e4:14:b1:d9:9e:
                    0b:de:ae:8a:8f:01:4f:2f:b6:39:39:10:98:f8:5c:
                    28:9d:cd:ae:35:55:6c:21:34:f2:6e:78:bd:3c:8a:
                    75:d2:f1:38:0d:fa:05:29:1a:9d:3b:e5:02:26:2a:
                    19:c2:2e:b8:65:16:3b:11:9f:4a:8d:41:53:2c:20:
                    da:1e:07:73:a9:80:fc:de:09:35:99:54:0e:70:a9:
                    03:28:09:c0:07:44:ee:60:b0:c0:8d:83:4b:8a:55:
                    f5:31:0d:43:d5:14:83:22:ec:67:69:f6:b3:53:0a:
                    68:bf:8f:bf:52:e9:f9:f8:a3:ae:1d:a4:47:6d:53:
                    c2:0c:c2:b7:34:a7:8d:b0:cc:93:95:50:0d:9c:b7:
                    32:39:6a:e3:88:8e:63:95:f6:f2:73:15:58:a1:78:
                    25:be:89:63:36:5b:a5:a8:a2:aa:e5:2e:f6:59:bb:
                    57:19:e6:12:4a:66:ba:3d:72:13:b0:c6:98:22:e5:
                    9c:79:b6:3d:cb:50:ac:33:60:d1:d6:e8:8a:82:aa:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:83:32:36:20:37:45:FB:A5:F6:39:62:D5:08:2A:67:53:2D:79
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2c353720b6c15ec3a46c6443d7010f7ac9c8736a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6412::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:26:ef:34:c2:d8:f0:ff:b7:da:e8:e2:b4:b1:f9:bf:c6:42:
         fb:2e:c7:92:db:c8:16:d1:1c:c6:df:a3:aa:e3:dd:76:96:e7:
         b0:d4:db:f3:8b:90:b6:0a:dc:21:4d:e6:ab:29:a1:a2:62:cb:
         6c:b9:3d:2c:cd:2f:44:cf:3a:ae:af:10:8d:06:62:93:e6:60:
         00:dd:84:45:81:dd:b9:fe:53:bc:b0:26:74:44:b5:75:a3:7e:
         fd:94:cb:cd:b3:4d:01:6c:51:ef:2a:a9:89:63:eb:04:a5:fa:
         97:34:01:17:1b:44:3b:4c:70:3c:7c:8f:47:28:fd:39:10:b1:
         84:ef:70:b0:2b:c3:a0:78:fe:fd:7f:a2:89:97:0f:a1:02:5b:
         14:d2:52:9c:b2:20:ec:71:6b:15:4d:68:e7:2d:1c:13:ce:25:
         ea:95:1f:b4:eb:df:33:68:c6:26:a9:8a:19:a5:b2:a4:3f:2b:
         82:72:0d:ce:f7:d9:32:dc:42:08:fd:32:2b:35:77:02:48:89:
         9d:d3:45:50:41:25:a6:e6:b1:07:8a:6e:9d:6a:cc:e1:b5:c8:
         a0:7d:69:da:3d:31:d6:a8:68:61:92:47:be:d2:c2:69:5c:c7:
         84:8c:69:ac:7f:c5:e9:f9:a8:9f:97:aa:45:98:3a:f1:f8:35:
         af:ad:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----