Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/026e1922bac84240842d1341f6cd919f37d06390.roa
File:                     026e1922bac84240842d1341f6cd919f37d06390.roa (raw, json)
Hash identifier:          1WOFtskErL24/CaDUD0d3xETLcCvSgqSorHqbaM5mrE=
Subject key identifier:   CE:2A:23:A6:8A:91:20:46:1C:1C:F4:4A:5D:3C:E7:CC:EF:AF:75:73
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       204FE6
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/026e1922bac84240842d1341f6cd919f37d06390.roa
Signing time:             Sat 29 Apr 2023 14:00:18 +0000
ROA not before:           Fri 28 Apr 2023 14:00:18 +0000
ROA not after:            Tue 29 Apr 2025 14:00:18 +0000
asID:                     3549
IP address blocks:        2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117606 (0x204fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr 28 14:00:18 2023 GMT
            Not After : Apr 29 14:00:18 2025 GMT
        Subject: CN=026e1922bac84240842d1341f6cd919f37d06390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c6:c9:c0:d0:bf:43:3f:b7:99:57:32:37:9b:
                    b3:fc:1c:da:c7:7e:1f:51:36:97:07:10:07:76:99:
                    c1:b8:11:9c:4f:50:43:93:85:8c:cb:0f:b3:ac:da:
                    35:97:fe:39:16:81:82:ec:e7:25:f7:0d:76:c0:8b:
                    f9:c2:16:27:40:e7:d4:d5:d9:c0:79:11:c0:41:79:
                    67:6f:f2:ce:83:46:fc:d3:70:a5:6a:5a:d6:92:f2:
                    29:d6:72:65:99:ef:95:1d:cc:0d:19:43:68:03:51:
                    af:ad:d9:02:36:35:0e:c7:e4:00:53:35:69:23:1e:
                    20:ff:39:c3:58:b2:a3:2f:8f:ae:13:5e:68:9d:b9:
                    05:53:98:2e:32:2a:d9:d0:42:b7:b8:82:d8:86:30:
                    b0:51:b9:af:02:ec:cc:26:74:06:75:a0:bf:1c:53:
                    28:17:74:cc:e9:17:ef:ab:14:0f:e0:77:df:be:30:
                    8a:58:10:98:ec:70:6b:1c:71:7f:fc:a3:fb:95:69:
                    2f:25:9b:38:82:0f:c6:95:dd:a1:b2:3e:b6:90:54:
                    8b:37:21:56:59:ea:b9:e1:6b:5b:f9:42:d6:a5:92:
                    58:75:76:b2:c4:a9:c7:90:b0:1c:aa:54:8c:aa:13:
                    56:48:ea:7d:8d:ac:9b:67:29:8d:5a:32:d8:38:68:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:23:A6:8A:91:20:46:1C:1C:F4:4A:5D:3C:E7:CC:EF:AF:75:73
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/026e1922bac84240842d1341f6cd919f37d06390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:66:e4:48:03:fa:8c:0a:4d:c4:b4:5f:c1:67:6e:7a:9a:
         db:0c:97:1f:2f:2d:ed:bc:b0:f8:d7:7f:29:07:1f:cb:50:33:
         75:66:ee:5f:b3:6f:c3:4c:b0:6f:3b:79:9b:23:b1:82:17:09:
         46:b5:77:b0:ce:56:82:11:22:fe:44:84:19:06:d0:af:7c:34:
         fc:91:84:13:0b:35:09:db:a6:14:2e:7f:f5:b0:96:c6:51:59:
         fb:a8:c3:3d:28:51:32:d5:fa:61:64:ca:55:94:24:c6:46:62:
         65:50:35:af:4e:ac:c6:ad:e8:bf:0b:4c:c4:75:1e:87:2a:f7:
         40:84:a5:b7:27:e0:33:a6:22:a0:01:94:d5:e2:4e:1b:d9:ac:
         2c:1b:2f:9d:5a:e5:12:5a:89:9c:3e:a9:8d:58:57:3f:31:90:
         5c:0c:6c:08:84:b0:b1:e7:14:48:8b:f7:41:fe:db:36:e3:c3:
         c0:42:b5:cf:19:fc:f3:ca:14:57:f9:10:af:07:02:2d:b0:9e:
         cf:f4:b2:30:0d:a1:e7:e5:dd:7c:8b:af:a0:70:b0:d3:c3:ac:
         98:a9:05:7f:52:ee:d6:4b:6d:0f:0e:8b:6a:e2:f3:e8:87:ad:
         b0:f4:af:ae:d4:95:ca:07:d8:6d:ca:45:01:ec:6c:47:cf:cd:
         10:d4:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----