Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/74e78a4684a41cc238d4c1a6dbb1d32e742be6c8.roa
File:                     74e78a4684a41cc238d4c1a6dbb1d32e742be6c8.roa (raw, json)
Hash identifier:          CKZG6umD6/5T+kutVEY8j2pS7aOtBaxmTUzGEd4W3xY=
Subject key identifier:   D5:C2:F5:DB:7A:93:94:E0:60:EE:C7:67:3E:2D:F3:B9:1B:F1:68:BE
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       21DE6F
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/74e78a4684a41cc238d4c1a6dbb1d32e742be6c8.roa
Signing time:             Tue 19 Sep 2023 03:40:33 +0000
ROA not before:           Mon 18 Sep 2023 03:40:31 +0000
ROA not after:            Fri 19 Sep 2025 03:40:31 +0000
asID:                     262589
IP address blocks:        2803:bfa0:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219631 (0x21de6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Sep 18 03:40:31 2023 GMT
            Not After : Sep 19 03:40:31 2025 GMT
        Subject: CN=74e78a4684a41cc238d4c1a6dbb1d32e742be6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:9b:64:10:b8:74:28:d8:f3:d8:de:5d:12:
                    80:5b:1b:a0:b8:de:57:c2:e8:0a:64:f3:94:87:c4:
                    91:30:ba:b7:4d:03:8a:24:28:65:7d:6e:47:e7:27:
                    09:d8:84:b8:ac:e3:c9:ad:e0:f9:88:fb:47:dc:0d:
                    2d:33:b4:bf:65:85:05:78:77:87:7b:31:41:86:8a:
                    04:f7:6c:77:05:03:c3:3c:5f:9b:b9:81:88:90:6c:
                    58:8f:48:19:6e:9c:b4:cb:47:85:b6:e7:d6:26:f0:
                    c3:fd:bd:98:b4:da:2c:14:3a:e0:4b:e7:30:4f:f4:
                    c6:a8:65:3b:05:90:38:fc:14:26:db:ee:6d:d3:7c:
                    b2:dc:3e:35:6d:ee:7c:50:8f:de:9c:ae:30:91:c1:
                    37:10:0b:cb:76:54:08:b3:4b:9c:50:e2:a0:9e:da:
                    af:04:61:d6:4f:15:42:ad:63:7d:87:6c:2b:14:6c:
                    b0:1c:f9:59:3c:98:03:50:49:9f:f8:c9:cf:b6:64:
                    05:75:68:9c:1f:06:90:e0:1a:c6:24:6d:5b:b4:ab:
                    44:17:c0:1a:84:69:a7:5e:45:b6:f5:8c:04:4f:71:
                    df:3f:17:84:30:a3:49:de:b3:b5:c1:fc:c7:5d:cd:
                    fa:2d:70:47:a3:7f:31:70:60:21:06:be:84:7c:86:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:F5:DB:7A:93:94:E0:60:EE:C7:67:3E:2D:F3:B9:1B:F1:68:BE
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/74e78a4684a41cc238d4c1a6dbb1d32e742be6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:50:cd:de:38:7a:b5:f9:0a:15:5d:08:70:90:1f:80:ea:
         b6:02:eb:e0:f4:12:b6:35:06:db:b2:30:90:69:5e:26:92:b9:
         dc:67:72:d5:f6:f1:aa:25:c0:4c:d8:73:0f:e7:4c:f9:3e:9c:
         0c:d8:8b:90:e1:eb:d9:1c:3e:41:97:cb:40:d2:a5:7c:76:24:
         56:ed:36:e5:0e:e3:93:a8:9a:be:e7:40:b5:93:33:d2:a9:65:
         8a:b6:b5:12:44:4b:55:cc:b6:65:d6:af:b9:c1:4d:3b:37:28:
         70:35:bf:9b:87:79:8b:96:c1:9e:ff:1d:fd:ab:7e:5c:e2:f6:
         35:a2:cf:a7:0a:6e:72:fd:d2:bd:4a:ad:5b:de:eb:30:4f:55:
         60:01:3b:2a:d2:47:86:c4:22:02:3a:f8:c8:67:68:37:ef:52:
         99:96:44:22:01:f8:3a:43:4b:0e:83:77:26:5a:03:a1:0a:97:
         7d:9b:11:1f:bf:36:cf:f8:fb:06:f2:8d:bf:8f:13:94:e8:79:
         66:85:52:36:a9:c4:14:c8:86:6e:3f:a7:5c:7f:3f:59:c9:0d:
         f8:0b:ff:15:b0:82:b5:14:a6:b4:fa:d1:f5:90:6b:f6:76:3f:
         b2:c2:b6:54:a2:38:76:34:59:75:61:e1:a5:9f:18:46:fb:46:
         57:a8:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----