Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566.roa
File:                     694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566.roa (raw, json)
Hash identifier:          bGNDMAvfJRQi/jM0cwaonuJI1tI1O8xxyUFYpf+Ew1Y=
Subject key identifier:   E2:C0:3E:60:8F:7F:E6:E7:98:43:D0:21:7C:BF:B4:41:2F:B7:1F:85
Certificate issuer:       /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial:       1E005A
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566.roa
Signing time:             Mon 08 May 2023 18:18:34 +0000
ROA not before:           Sun 07 May 2023 18:18:29 +0000
ROA not after:            Thu 08 May 2025 18:18:29 +0000
asID:                     20191
IP address blocks:        2001:1310:7171::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966170 (0x1e005a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
        Validity
            Not Before: May  7 18:18:29 2023 GMT
            Not After : May  8 18:18:29 2025 GMT
        Subject: CN=694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:77:d5:02:57:e1:af:0a:ed:df:d6:5a:c2:
                    82:04:67:5e:7a:11:cc:77:98:af:d5:98:c8:69:50:
                    bd:1c:44:47:44:40:92:33:d1:d1:9a:15:b0:44:2c:
                    f7:71:04:fe:5a:75:01:ab:9f:10:f1:85:2b:5c:c8:
                    5c:eb:84:eb:4b:fa:ec:08:da:fd:7a:70:5c:3c:c5:
                    0f:1d:99:87:9a:96:b4:5c:b8:b0:46:bf:58:21:43:
                    53:01:34:46:b8:d7:bd:ca:bb:83:dc:27:c5:d4:84:
                    c0:b8:98:78:07:6f:ee:2c:ca:74:0f:7a:ad:2a:cf:
                    d6:a5:7e:3b:4d:f6:4b:03:a3:92:75:74:2c:1f:fb:
                    04:90:08:02:f2:77:e8:04:69:04:0d:1b:8f:54:40:
                    11:38:f1:ce:64:f6:f8:7d:14:94:c7:d0:be:18:c8:
                    b3:d7:eb:be:80:85:d6:12:ed:07:9f:9b:e2:cb:b8:
                    f2:1a:6f:95:a2:e7:7c:49:6d:8b:d6:89:bc:b9:84:
                    9d:6d:ed:c1:4a:11:74:4e:39:62:42:aa:24:a3:ce:
                    d1:5d:8f:0c:bd:08:c9:d6:d5:f6:0a:9f:52:09:52:
                    a0:12:35:22:d9:61:49:3b:c5:25:fe:d3:18:9c:53:
                    5d:40:2e:f3:22:da:8f:d2:55:bd:7e:0d:20:16:a1:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:3E:60:8F:7F:E6:E7:98:43:D0:21:7C:BF:B4:41:2F:B7:1F:85
            X509v3 Authority Key Identifier:
                keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/694c519f5ed37e5b34e8fb07fc7b4a19b8ef5566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1310:7171::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:17:f8:cd:06:57:f5:c6:56:ec:cc:ba:57:33:0d:0a:9c:9b:
         9c:ca:bc:77:1a:b0:2b:07:e7:c7:dd:82:84:86:43:7d:28:d3:
         4b:07:2d:90:88:da:fa:e6:cf:a1:92:2f:62:ae:48:03:95:8c:
         c3:a1:f7:e7:d9:87:59:11:f6:9c:13:dc:4f:64:84:1e:5c:e4:
         36:2b:78:1b:85:2c:6d:f4:69:3f:1a:38:ba:c4:7a:de:83:8e:
         5b:f1:a8:57:80:b0:c9:86:de:b8:42:f0:74:60:cf:1e:66:07:
         29:40:24:cb:ef:4b:ae:d1:eb:1a:4d:7c:3d:c8:3c:ca:fb:e4:
         3b:f2:a9:33:86:3b:c0:30:45:f7:ad:6a:2c:87:29:1b:89:0d:
         e6:9a:ec:67:a4:57:bc:f1:d7:87:b0:c5:49:9b:43:03:24:bc:
         3b:52:7c:47:84:48:33:d5:f8:56:c0:35:ca:54:53:42:d2:28:
         ca:49:4e:ee:5a:37:56:cb:d6:9c:5d:1f:1a:99:c2:dd:34:92:
         14:b1:3b:9e:13:04:cf:26:26:2d:9d:a7:47:cf:09:29:0a:15:
         42:f6:a5:43:bf:27:52:47:ba:40:c2:1b:89:a7:9c:13:bc:d0:
         bf:4f:bd:a5:3a:52:ab:d5:76:52:23:4f:39:56:4d:f3:d1:5a:
         72:5d:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----