Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa
File:                     5335d41954132eea38a9a5e152d7b70046717d43.roa (raw, json)
Hash identifier:          rYdGBK6l/jFPS4dlNSzXptfcXMG4tsIE2qwCNDDjflI=
Subject key identifier:   2B:26:E5:7D:D9:4B:EE:86:3E:73:D2:6F:F7:5A:98:94:52:1C:8E:CA
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       198F62
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa
Signing time:             Mon 12 Jun 2023 08:42:25 +0000
ROA not before:           Sun 11 Jun 2023 08:42:21 +0000
ROA not after:            Thu 12 Jun 2025 08:42:21 +0000
asID:                     54235
IP address blocks:        2803:5ce0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675106 (0x198f62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jun 11 08:42:21 2023 GMT
            Not After : Jun 12 08:42:21 2025 GMT
        Subject: CN=5335d41954132eea38a9a5e152d7b70046717d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:6a:65:6b:70:81:13:2a:0c:06:ad:4e:dd:
                    77:1e:c6:fd:17:04:cd:8a:c7:fa:26:f8:26:b2:f3:
                    1d:0a:ac:b3:1c:de:e3:41:67:66:c4:86:80:97:e6:
                    5c:b4:a4:8c:49:44:37:16:f0:d7:22:0c:99:5e:dd:
                    8c:27:a5:5d:3e:8d:16:2b:17:94:8c:ee:cb:0e:81:
                    d0:5e:52:69:14:33:6c:cc:6a:8b:d2:db:bf:be:28:
                    2c:2a:b0:0a:30:34:47:b4:34:f7:42:a6:98:b3:75:
                    22:8e:4e:e9:05:d0:d7:be:1c:df:c4:73:8b:44:dd:
                    4b:9b:75:92:28:d5:1a:bd:20:af:42:fb:9e:f1:36:
                    b4:c5:d5:9d:8b:a9:7c:8a:59:81:ac:a4:46:6a:f9:
                    7c:2d:35:9c:f4:2b:f1:ea:9c:88:c9:c8:e3:3f:19:
                    4a:d8:54:7f:23:a3:79:00:9e:b0:d0:4a:d7:ce:ca:
                    ff:a6:0d:12:10:f9:b2:92:0a:8b:5e:77:7c:8d:36:
                    14:7f:88:75:69:f7:6b:4a:f3:c3:23:d1:b2:42:67:
                    6e:fd:1b:95:3e:08:42:41:43:33:62:ed:68:c8:ee:
                    c3:f2:6d:2b:3a:00:cc:2b:05:9f:76:2b:d5:56:6b:
                    47:e8:5e:0e:9d:f6:f3:16:5a:76:aa:6a:52:dd:75:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:E5:7D:D9:4B:EE:86:3E:73:D2:6F:F7:5A:98:94:52:1C:8E:CA
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/5335d41954132eea38a9a5e152d7b70046717d43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:5b:e0:ca:88:90:3f:4b:7d:75:58:48:01:81:82:92:a0:
         dd:37:6d:61:83:b4:1e:1d:3c:f8:b4:fd:31:bc:38:95:57:54:
         aa:ac:57:cd:97:3d:09:49:82:d0:58:79:c6:5e:2e:4e:7f:3c:
         a2:39:1e:21:86:1c:3e:61:94:4a:1a:dc:b2:92:e0:a3:f9:dd:
         e3:6e:2d:68:c0:e3:9a:33:2e:cb:22:ef:ad:c1:eb:84:7f:9f:
         7a:a5:06:63:1f:f9:0e:b5:39:0d:f2:fa:7b:6e:3c:07:bd:1c:
         61:cd:b0:8a:3f:3c:d8:d2:05:e8:50:22:75:aa:da:32:75:ad:
         3a:1b:0c:af:45:f5:a0:65:87:19:0a:b7:77:66:78:57:9b:1e:
         42:37:88:0e:e2:46:c8:81:a3:40:7d:a5:91:fb:96:58:f7:d8:
         23:54:7a:8e:1a:0b:5c:15:ef:34:2d:f0:a0:c2:24:1e:40:44:
         9d:cc:52:34:33:8c:31:f9:f8:57:0c:b9:d2:6a:4a:5b:a9:14:
         23:d7:67:7c:d2:4e:25:d6:be:de:9b:f6:f3:d6:db:14:63:5c:
         23:77:9b:2a:26:60:c7:0a:d2:98:ce:be:5c:f1:88:a9:c9:44:
         0f:89:63:0e:c7:6e:2e:ac:98:4e:d9:ed:58:d4:bd:8e:42:43:
         dd:d5:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----