Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4cc00eb2f517c2ee9b2e8b4c9b9fcd460a1c5d63.roa
File:                     4cc00eb2f517c2ee9b2e8b4c9b9fcd460a1c5d63.roa (raw, json)
Hash identifier:          FNlQ+0Frfrau/gpLZu3PjPR803KZF6bK03EbOrPwgOU=
Subject key identifier:   AF:03:DA:0C:9D:49:F0:17:9E:0B:B3:75:6E:4E:10:A9:D6:ED:B4:4D
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1C591C
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4cc00eb2f517c2ee9b2e8b4c9b9fcd460a1c5d63.roa
Signing time:             Thu 16 Mar 2023 15:59:16 +0000
ROA not before:           Wed 15 Mar 2023 15:56:50 +0000
ROA not after:            Sun 16 Mar 2025 15:56:50 +0000
asID:                     20191
IP address blocks:        2001:1310:7171::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857820 (0x1c591c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: Mar 15 15:56:50 2023 GMT
            Not After : Mar 16 15:56:50 2025 GMT
        Subject: CN=4cc00eb2f517c2ee9b2e8b4c9b9fcd460a1c5d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:1e:b1:7a:93:bc:36:19:97:3e:55:20:33:
                    4c:13:74:f7:65:d5:31:4b:8c:69:32:ac:dd:a3:13:
                    86:6e:15:2d:36:78:2a:66:1c:08:3e:b1:2e:94:9a:
                    16:c9:fd:99:2d:71:81:c5:47:c3:48:81:1a:33:7f:
                    fd:4c:6a:aa:73:9d:f3:2e:66:ff:78:f2:e1:76:09:
                    24:ca:39:02:11:92:dc:15:b9:6b:94:cc:52:18:f3:
                    01:3a:19:98:1f:0e:da:d3:63:f6:a6:17:07:6d:c6:
                    c0:b0:36:01:71:a9:47:98:96:9e:0d:c7:fd:35:cc:
                    2b:59:c3:95:82:7c:45:04:62:fa:75:3f:7b:46:0e:
                    0b:c4:3a:3e:ab:69:78:ec:1c:36:60:78:ea:dc:ff:
                    5f:44:38:eb:86:ee:11:e7:8b:1c:cf:ea:fe:07:95:
                    ab:da:ed:48:88:48:b7:f0:0a:26:84:4c:25:8a:e3:
                    37:6b:12:02:a3:ae:03:34:5a:d4:70:93:6c:42:82:
                    c6:72:52:7f:6a:a5:c2:ee:fd:05:a0:b3:80:33:ea:
                    b7:97:be:e2:28:21:06:de:f1:8d:3c:38:fb:49:d0:
                    c4:ab:2c:ac:e3:60:4e:48:22:8c:06:98:d1:8b:14:
                    fb:3a:e8:4c:a3:3c:26:5e:bb:8f:92:c9:23:e4:13:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:DA:0C:9D:49:F0:17:9E:0B:B3:75:6E:4E:10:A9:D6:ED:B4:4D
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/4cc00eb2f517c2ee9b2e8b4c9b9fcd460a1c5d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:7171::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:92:a1:2a:1f:b5:45:6c:03:ec:75:b4:06:67:bf:07:03:23:
         38:af:98:dc:46:c7:c9:28:d9:f5:65:52:f5:86:b0:31:56:50:
         ac:70:31:6e:fe:00:95:fb:58:a6:62:71:99:cc:35:93:08:14:
         f5:99:68:40:5d:0e:6b:3c:8a:ed:7f:9c:98:5b:e0:c8:f0:ef:
         2a:78:ac:f3:bf:1b:39:2f:29:35:be:cd:80:b1:e2:7f:24:2b:
         fc:8a:13:72:e2:f8:74:ef:ad:7d:59:f3:bf:d3:79:c4:b8:fe:
         75:4b:b2:3e:77:43:01:7a:d3:f5:39:3d:8d:de:b5:9c:cd:c1:
         a1:3f:b6:22:3d:fe:a3:7a:63:4f:99:20:e6:cd:e8:1d:fd:d9:
         e1:72:54:17:f0:04:59:fb:0d:01:b7:11:11:5b:3a:80:e8:83:
         1c:c3:8d:b6:3a:83:6b:c5:f7:84:9f:9f:2f:7a:0b:7c:a2:18:
         67:f5:5d:a8:29:42:b6:fc:f8:8a:39:11:77:ac:a9:81:99:4d:
         aa:a1:88:26:34:ca:d4:40:1b:55:af:19:ed:6f:55:59:06:4e:
         b9:78:34:51:b0:a4:76:f5:6a:07:9e:28:e5:1c:be:0c:33:71:
         45:0b:d6:fd:91:38:60:6d:83:98:6b:11:35:a5:73:5b:e1:fc:
         08:63:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----