Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/3c16cdb757e59f526fd47c1d523b499faf7d33bc.roa
File:                     3c16cdb757e59f526fd47c1d523b499faf7d33bc.roa (raw, json)
Hash identifier:          ncmX/ChGWR1z3EnJBbfo+FtqN63LX7T1hRBWFq3UiRk=
Subject key identifier:   73:A8:F3:2A:FC:7D:19:C3:94:32:D5:EF:54:B1:6A:79:A0:39:48:16
Certificate issuer:       /CN=8146f7d7fea1af093a2862ea298e92cca3ce04d5
Certificate serial:       014949
Authority key identifier: 0B:45:3C:D9:F5:50:68:12:3E:8D:DC:04:B3:28:12:32:16:3C:C1:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8146f7d7fea1af093a2862ea298e92cca3ce04d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/3c16cdb757e59f526fd47c1d523b499faf7d33bc.roa
Signing time:             Tue 20 Jun 2023 19:20:35 +0000
ROA not before:           Mon 19 Jun 2023 19:20:35 +0000
ROA not after:            Fri 20 Jun 2025 19:20:35 +0000
asID:                     272110
IP address blocks:        2803:7710::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84297 (0x14949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8146f7d7fea1af093a2862ea298e92cca3ce04d5
        Validity
            Not Before: Jun 19 19:20:35 2023 GMT
            Not After : Jun 20 19:20:35 2025 GMT
        Subject: CN=3c16cdb757e59f526fd47c1d523b499faf7d33bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:0d:07:28:4a:cd:07:c6:56:0a:73:50:0c:
                    a0:2d:03:7a:b2:07:3d:f9:cc:6c:53:7a:36:7e:33:
                    75:73:a2:1b:ec:a4:80:be:55:63:83:c1:7c:25:67:
                    f2:27:c2:83:57:41:75:02:b9:25:d1:58:78:b4:ef:
                    f3:42:86:2f:d6:5a:2c:d3:00:73:a4:dc:40:41:60:
                    02:6f:a9:41:95:87:1d:f2:67:1c:ac:0a:57:d1:31:
                    75:c6:14:35:27:ab:8f:06:41:82:c7:b2:fc:c7:84:
                    a0:7d:0a:37:d9:d9:ce:63:4e:55:65:57:df:d6:6b:
                    38:5e:7a:cd:b6:15:12:59:88:84:a9:6d:4e:ae:09:
                    4b:b4:1a:e9:dc:dd:e0:63:91:c7:5f:49:b4:7b:a5:
                    03:fd:a3:41:20:7f:73:68:4f:f7:4d:2c:e4:de:01:
                    a8:ce:ea:cd:11:cb:19:cc:32:db:13:0f:99:ab:35:
                    69:c2:bf:f1:e2:0e:e6:a1:e9:b4:f3:da:8a:03:b6:
                    2e:83:26:1d:87:6f:a6:bc:e0:68:90:a8:41:a4:9d:
                    e7:e4:aa:94:a2:1c:f4:1a:41:8b:c7:e7:18:c4:3e:
                    b1:f4:e1:53:0a:b0:9c:96:44:e7:4f:a4:49:5f:77:
                    d4:97:d5:95:57:af:24:ad:6e:b6:a0:19:90:67:ad:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:F3:2A:FC:7D:19:C3:94:32:D5:EF:54:B1:6A:79:A0:39:48:16
            X509v3 Authority Key Identifier:
                keyid:0B:45:3C:D9:F5:50:68:12:3E:8D:DC:04:B3:28:12:32:16:3C:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8146f7d7fea1af093a2862ea298e92cca3ce04d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/3c16cdb757e59f526fd47c1d523b499faf7d33bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d4ece4f-56b4-4020-a687-8c08f4759f42/8146f7d7fea1af093a2862ea298e92cca3ce04d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7710::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:ec:64:6e:df:b0:c2:90:48:08:8c:1d:64:87:0b:6f:30:
         85:2b:23:40:21:3c:4b:0c:ac:5d:35:93:31:71:4f:94:bb:fa:
         04:47:3f:3d:7b:4c:14:50:3b:89:05:5f:e6:8f:e0:1f:ff:f9:
         7b:78:36:98:8b:1e:79:6d:22:f5:fd:88:f4:d4:26:62:ba:c4:
         0e:8e:02:d8:c4:28:6f:66:d0:f5:fd:ed:62:55:00:83:30:43:
         da:f9:72:2f:f4:53:5c:3e:f7:12:ae:ea:e5:ba:33:b3:d8:ce:
         27:a1:5d:54:88:fe:fc:9b:9a:57:c0:d4:3f:1d:cc:cf:71:c2:
         87:b7:29:48:ab:84:b0:ec:21:9e:72:87:e8:30:ca:24:4e:12:
         f5:d4:18:2b:ba:75:32:2d:6a:39:27:97:74:9f:6c:c5:af:dd:
         57:9f:d7:ba:6a:4b:93:32:f7:12:ab:15:1a:dc:89:e7:35:c3:
         15:c5:db:8f:eb:f7:4a:f5:09:46:64:d5:9f:7c:ea:e1:12:bd:
         1e:d8:ad:53:cf:1e:fe:15:37:28:e6:19:f8:69:fe:5c:2c:e1:
         e7:57:e9:91:9b:42:2a:a9:1e:f2:d8:45:ea:5d:d9:30:4d:d9:
         56:ae:58:c9:3e:3f:d0:08:d3:55:b3:a3:8e:0a:1f:62:05:7c:
         63:04:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----