Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/310316623e62c80fa5f7f3061508e21eb792da5e.roa
File:                     310316623e62c80fa5f7f3061508e21eb792da5e.roa (raw, json)
Hash identifier:          28lNDeTVNi40jlKOGgVKwdMQnVczXAIvLBR2Eh+Ot8Q=
Subject key identifier:   3D:D5:EA:99:ED:88:E9:64:DF:63:A0:5B:5E:29:0F:3E:BF:21:8E:68
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       1994B6
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/310316623e62c80fa5f7f3061508e21eb792da5e.roa
Signing time:             Mon 12 Jun 2023 08:42:26 +0000
ROA not before:           Sun 11 Jun 2023 08:42:21 +0000
ROA not after:            Thu 12 Jun 2025 08:42:21 +0000
asID:                     272799
IP address blocks:        2803:5ce0:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676470 (0x1994b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jun 11 08:42:21 2023 GMT
            Not After : Jun 12 08:42:21 2025 GMT
        Subject: CN=310316623e62c80fa5f7f3061508e21eb792da5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:fb:ed:15:4f:b0:e3:0e:c9:5b:2d:01:ca:
                    ef:d3:36:3c:75:53:0f:a3:e3:0e:18:22:b5:33:10:
                    80:34:0d:c2:f4:c0:7e:30:92:19:f1:66:d8:b9:38:
                    64:97:e5:15:8e:2e:84:a6:66:84:c5:01:28:c4:e8:
                    b7:32:d6:88:e2:e2:c4:f5:4b:b3:2c:27:43:1f:6e:
                    0c:6a:6e:6f:90:93:09:f1:88:df:6e:dd:65:25:18:
                    b9:41:27:b7:8d:57:83:e3:de:b8:b6:4a:4e:d5:32:
                    59:8b:3c:b9:7c:5b:0c:9f:f8:38:6d:33:94:6a:e1:
                    63:8b:97:f4:26:56:f9:54:d5:28:09:34:6a:5f:7f:
                    99:b3:c9:6e:80:9a:94:fb:7a:7c:15:57:e6:13:6a:
                    84:a2:67:df:76:77:58:40:e1:4c:02:9f:a5:51:ac:
                    05:56:d6:17:14:fe:d5:40:a2:f7:38:a6:0a:5a:7c:
                    77:03:e5:c0:72:9d:11:5f:a2:b4:10:41:cc:98:a6:
                    d6:92:c3:8c:56:bc:27:2d:12:82:5d:dc:23:97:d7:
                    5a:b4:74:1c:e0:f3:e8:ed:0c:83:70:0d:bf:b5:7a:
                    84:a2:6c:ff:41:24:2d:77:1b:21:dc:2a:90:d6:c8:
                    e1:2c:e3:65:ff:22:fd:34:f1:d7:2b:7d:be:b4:28:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:EA:99:ED:88:E9:64:DF:63:A0:5B:5E:29:0F:3E:BF:21:8E:68
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/310316623e62c80fa5f7f3061508e21eb792da5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:32:48:56:c0:35:66:2b:71:0a:3f:1f:3c:d5:33:e3:9d:d2:
         e6:82:f6:b6:c9:2f:6e:f9:bd:67:22:d8:9a:68:8d:76:43:c3:
         54:58:2c:00:40:d0:98:f3:2c:35:85:8d:56:fb:28:f5:12:a0:
         38:56:0b:be:bf:12:54:a3:43:2b:81:98:3e:51:cd:cb:08:9e:
         36:47:d9:98:1f:6b:78:f0:9f:89:79:71:8c:fa:44:8f:2b:62:
         e3:10:f1:d1:65:e5:45:13:32:c5:ba:4a:53:96:f7:00:6d:81:
         c3:1c:41:c7:f5:a8:72:f6:eb:28:37:f4:2e:43:a5:7c:09:1a:
         b3:3a:7d:cc:21:7e:e3:84:5f:ed:27:2d:de:ec:a7:76:93:a2:
         9f:41:d7:d8:05:7d:83:69:21:48:08:e3:4b:50:41:4d:94:b1:
         16:0b:fa:bc:02:97:16:d7:6f:ad:44:5d:b3:fd:bb:88:d5:cc:
         2a:30:ee:08:fa:1b:9e:e9:0f:4a:7c:e5:de:69:c3:59:a4:24:
         f4:b7:ae:93:c6:37:b2:ef:3f:69:1a:63:32:b3:5e:44:f3:3f:
         69:35:bd:be:41:6c:09:81:96:64:d9:54:5f:89:a1:cf:23:d7:
         26:bb:d3:3a:60:ef:d2:2f:7c:b0:ea:15:76:b6:66:b5:5f:3b:
         35:ac:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----