Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/eef075b835136f0244f42d5ec64ebc24dc97044d.roa
File:                     eef075b835136f0244f42d5ec64ebc24dc97044d.roa (raw, json)
Hash identifier:          6mYn/gVDyc2HvZcocZ1PkiPpxwZdYRA/RJJK6lDUEX8=
Subject key identifier:   AF:82:D6:BF:A3:2B:1A:E4:8F:C4:DD:F5:CE:6A:8D:CC:CA:3E:9D:A3
Certificate issuer:       /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial:       22D75D
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/eef075b835136f0244f42d5ec64ebc24dc97044d.roa
Signing time:             Tue 11 Jul 2023 13:35:32 +0000
ROA not before:           Mon 10 Jul 2023 13:35:32 +0000
ROA not after:            Fri 11 Jul 2025 13:35:32 +0000
asID:                     61508
IP address blocks:        2803:f240:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283357 (0x22d75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
        Validity
            Not Before: Jul 10 13:35:32 2023 GMT
            Not After : Jul 11 13:35:32 2025 GMT
        Subject: CN=eef075b835136f0244f42d5ec64ebc24dc97044d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:db:b2:da:13:64:ca:7d:96:e8:df:56:55:
                    ed:60:2f:d4:32:96:62:4e:6f:4f:05:cf:61:51:96:
                    77:20:87:48:32:6b:19:7b:b5:7b:a5:c4:88:d1:97:
                    5e:62:99:c0:04:bb:6f:7c:89:9e:ba:b7:a3:62:25:
                    fc:ba:3b:67:b0:d8:0e:d0:af:dd:ed:17:7c:bb:ac:
                    cf:b6:90:57:26:df:79:22:34:b6:4f:25:5b:05:a5:
                    b9:11:e4:9a:30:e5:30:9b:96:b1:ef:fe:7e:bf:2e:
                    c2:dd:bb:f6:bf:7c:7b:59:04:8c:19:cc:e3:8b:4c:
                    3e:95:b1:fe:1e:dd:2d:90:6c:35:f5:34:64:01:5c:
                    e9:a0:f1:de:54:50:9d:ac:f2:6a:30:95:9d:5c:3b:
                    7b:3d:52:e1:76:72:c0:18:54:32:b5:0f:0c:59:39:
                    30:23:79:f7:c4:e2:db:f5:4f:e4:a7:03:4b:40:a9:
                    33:01:24:84:b1:7e:f1:35:a0:d6:67:e2:f5:e2:a9:
                    cd:2b:56:07:b2:47:79:25:e4:3e:5c:7a:20:ed:69:
                    6a:d2:71:c2:17:6d:f3:58:bd:d8:9b:86:6d:dc:9e:
                    2f:cb:fe:28:df:26:0a:df:44:45:2b:0e:60:be:b1:
                    4d:63:86:e8:ad:cf:7f:9e:ea:3e:21:a0:fb:0a:ae:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:D6:BF:A3:2B:1A:E4:8F:C4:DD:F5:CE:6A:8D:CC:CA:3E:9D:A3
            X509v3 Authority Key Identifier:
                keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/eef075b835136f0244f42d5ec64ebc24dc97044d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:88:4b:12:ed:b1:e5:74:6e:da:75:32:a8:ec:75:1e:7a:
         a2:b1:55:2c:6b:43:3c:e0:af:c4:d7:eb:6f:c2:24:a5:79:53:
         10:4d:3f:ec:68:28:46:85:bc:04:e5:03:d0:63:27:fa:79:6d:
         2e:d1:0c:b3:9c:d2:1d:86:85:e6:3b:74:83:f6:17:6d:1e:af:
         d5:ea:e0:e3:aa:d0:fc:da:41:21:b7:ec:94:51:08:cc:76:88:
         9f:c0:f9:35:e9:ed:19:8a:d1:33:e9:dd:ec:e0:ca:5f:29:7e:
         46:b3:6f:75:07:64:20:30:47:a2:c4:6e:f5:b1:49:a6:e5:fb:
         2d:73:a0:1d:97:0b:86:b2:ed:36:13:7f:0a:ad:8a:91:cc:dd:
         ea:77:7d:27:b8:b0:1c:ef:e8:c7:55:71:44:6f:c9:c1:ac:05:
         db:fa:42:43:ee:7b:a0:8c:db:00:42:dd:17:f7:f8:88:9c:e1:
         7c:22:41:c8:d5:68:dc:19:a8:95:90:f5:b0:98:05:b9:91:dd:
         59:80:91:8a:6a:bc:50:b7:db:85:f9:17:bd:71:00:91:07:bf:
         7d:c0:d7:c6:b2:af:41:41:99:d9:71:40:19:fc:a9:21:6a:2e:
         7e:85:75:84:dc:cf:bb:a8:57:02:62:23:8c:45:85:39:fc:eb:
         f3:a5:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----