Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/06dc222ad12b7bb78faa7f0ee9d12dc1a017db3a.roa
File:                     06dc222ad12b7bb78faa7f0ee9d12dc1a017db3a.roa (raw, json)
Hash identifier:          bqH2VRN23jATQuSuUpIniJnsmuPCIePAiSnHv2atlBQ=
Subject key identifier:   D9:2F:50:A8:D5:61:19:CC:56:59:E7:4A:8C:3C:D1:DB:9F:50:12:5A
Certificate issuer:       /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial:       22D26B
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/06dc222ad12b7bb78faa7f0ee9d12dc1a017db3a.roa
Signing time:             Tue 11 Jul 2023 13:35:31 +0000
ROA not before:           Mon 10 Jul 2023 13:35:31 +0000
ROA not after:            Fri 11 Jul 2025 13:35:31 +0000
asID:                     61508
IP address blocks:        2803:f240::/32 maxlen: 34
                          2803:f240::/36 maxlen: 36
                          2803:f240:1000::/36 maxlen: 36
                          2803:f240:2000::/36 maxlen: 36
                          2803:f240:3000::/36 maxlen: 36
                          2803:f240:4000::/36 maxlen: 36
                          2803:f240:5000::/36 maxlen: 36
                          2803:f240:6000::/36 maxlen: 36
                          2803:f240:7000::/36 maxlen: 36
                          2803:f240:8100::/40 maxlen: 40
                          2803:f240:9000::/36 maxlen: 36
                          2803:f240:a000::/36 maxlen: 36
                          2803:f240:b000::/36 maxlen: 36
                          2803:f240:c000::/36 maxlen: 36
                          2803:f240:d000::/36 maxlen: 36
                          2803:f240:e000::/36 maxlen: 36
                          2803:f240:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282091 (0x22d26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
        Validity
            Not Before: Jul 10 13:35:31 2023 GMT
            Not After : Jul 11 13:35:31 2025 GMT
        Subject: CN=06dc222ad12b7bb78faa7f0ee9d12dc1a017db3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:70:f2:3a:0b:2c:7e:bb:03:0f:2e:59:57:
                    94:17:be:45:e7:ea:73:98:66:a2:c4:c6:90:5b:58:
                    00:62:5b:26:e6:09:af:40:c6:c8:20:f6:d3:88:4a:
                    cf:1c:8b:8b:3e:13:f4:cb:fe:29:af:f3:22:14:92:
                    a2:09:8e:63:e7:0c:87:c1:78:05:9b:0c:08:77:3b:
                    9a:2a:4f:16:db:1f:a0:2e:df:3b:f5:0d:01:b2:e5:
                    b7:01:e0:16:fa:84:1b:a9:09:00:35:d9:d4:72:26:
                    35:89:cf:a4:ce:80:5c:aa:87:37:90:d0:96:f4:ab:
                    b9:24:0c:bf:b7:ef:a4:f6:7a:8a:c5:ab:d5:e0:a9:
                    f5:ed:39:57:a9:14:39:fa:74:9b:19:df:fc:30:fe:
                    0d:fd:be:a2:9f:ba:7e:8b:a3:1c:96:07:a3:8e:a4:
                    05:34:0a:f0:ca:ba:06:97:1b:2b:8a:7e:18:f3:d2:
                    7f:20:4e:33:b3:a4:3a:bf:9b:04:01:f8:26:ee:8c:
                    8b:86:90:77:02:ca:0c:5f:fe:46:54:c2:ad:f1:cf:
                    4a:c1:8b:4e:4e:76:fc:11:79:d4:28:b7:bc:4e:10:
                    fa:dd:09:a5:db:a3:fb:45:58:24:2a:4f:51:cb:05:
                    73:f1:63:7b:dc:95:a1:cb:10:c1:06:f6:57:f3:6a:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2F:50:A8:D5:61:19:CC:56:59:E7:4A:8C:3C:D1:DB:9F:50:12:5A
            X509v3 Authority Key Identifier:
                keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/06dc222ad12b7bb78faa7f0ee9d12dc1a017db3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:ea:e1:4a:fa:6a:f5:80:c6:e6:1c:b8:71:fc:65:c7:9d:dd:
         6b:07:d3:58:5a:48:54:ec:0d:65:7e:f1:58:95:a9:86:89:99:
         1c:3b:b9:13:61:c2:09:30:be:97:ca:4c:b6:e6:fe:8e:04:f7:
         36:ce:f1:30:02:e0:0e:dd:2d:3c:2c:1a:32:15:47:a3:6c:fd:
         05:6e:9f:20:ac:1c:85:5d:8f:db:50:8e:fd:47:58:5d:53:0a:
         eb:7a:96:7d:a6:cd:97:ed:13:ca:f5:9c:0e:e5:f3:f2:58:be:
         2e:39:21:f0:54:29:4f:21:50:b7:d6:67:62:fc:c7:12:52:d5:
         f7:dc:1b:94:c5:bc:cc:9b:6b:60:dc:8c:c0:ed:e8:a5:f1:d7:
         48:d7:87:53:37:da:f2:47:87:05:a8:bf:aa:aa:3b:37:e9:45:
         ef:60:15:6b:1e:62:53:e0:e7:04:9c:77:32:9b:39:9b:a4:63:
         05:b4:51:8e:dc:d1:c8:3f:04:89:04:0b:4a:e9:02:c6:7b:7b:
         25:22:93:5e:3a:c3:9b:b6:b1:29:c2:9a:50:b6:ad:c8:95:56:
         7b:90:67:54:00:7f:e7:11:5d:e8:59:d4:88:ab:4e:6b:c4:ea:
         d6:4d:77:75:1a:22:ec:ec:e3:f3:ab:07:7a:0f:2c:cf:37:38:
         6f:5f:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----