Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/84745e08c65e2133e9d5c0c4a47cbf8bac3152a1.roa
File:                     84745e08c65e2133e9d5c0c4a47cbf8bac3152a1.roa (raw, json)
Hash identifier:          1u++cQuBVIHxs5SafoeCEkFTjEhaOrj4IBtVGJ5fW5k=
Subject key identifier:   80:48:89:FB:63:43:51:EF:69:2D:3B:BA:AE:61:86:C2:4D:EC:D8:07
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       04D56F
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/84745e08c65e2133e9d5c0c4a47cbf8bac3152a1.roa
Signing time:             Mon 31 Jul 2023 04:51:43 +0000
ROA not before:           Sun 30 Jul 2023 04:51:43 +0000
ROA not after:            Thu 31 Jul 2025 04:51:43 +0000
asID:                     272937
IP address blocks:        2803:3190:f000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316783 (0x4d56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Jul 30 04:51:43 2023 GMT
            Not After : Jul 31 04:51:43 2025 GMT
        Subject: CN=84745e08c65e2133e9d5c0c4a47cbf8bac3152a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:d9:ec:7c:4f:06:d0:80:82:68:70:8d:16:
                    f6:14:8c:4c:ce:30:9a:33:f0:9c:ed:97:97:06:63:
                    9a:52:1a:3b:49:5b:98:6b:80:19:f0:c7:ca:f4:6a:
                    50:0f:dc:fc:18:d9:27:12:da:2a:18:e0:4e:b8:96:
                    b3:48:f2:c4:28:04:87:2f:a2:19:c3:2d:76:a3:1f:
                    96:b9:b1:4b:59:67:c7:d1:52:67:2e:42:3b:39:c4:
                    8f:b5:cc:9c:30:aa:51:52:ec:b6:6b:89:9c:ce:bc:
                    c8:5c:88:3a:2c:42:e4:e7:e4:09:f7:9e:43:d2:83:
                    aa:d0:2e:cc:fe:16:fb:9c:e3:d7:01:1e:87:85:7d:
                    2f:ff:6d:b1:df:65:8f:35:ab:f0:8d:e9:8d:18:79:
                    94:4c:cc:34:d1:3c:b9:e3:47:89:4a:52:ce:39:f8:
                    8c:ae:5b:3c:be:0f:5a:5c:be:83:c5:53:52:e4:52:
                    0a:9a:a1:6e:2f:da:03:2d:e0:75:4b:8c:46:1a:85:
                    ef:a4:bc:5e:e7:25:5d:bc:c5:46:9e:f1:4c:17:5b:
                    44:08:43:9f:d9:f6:1a:3d:f0:9b:7c:19:32:e2:21:
                    71:94:3b:de:e0:8c:aa:23:5b:28:e8:d5:a0:56:5c:
                    a9:13:f1:99:c2:e5:ef:0b:ae:c9:b0:e9:e4:ad:ba:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:89:FB:63:43:51:EF:69:2D:3B:BA:AE:61:86:C2:4D:EC:D8:07
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/84745e08c65e2133e9d5c0c4a47cbf8bac3152a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:c3:67:20:16:0c:66:16:ee:24:67:b9:42:92:fa:43:57:
         4c:25:cd:fd:b8:f2:8d:2d:6b:9e:36:7a:91:34:23:e2:06:e7:
         83:1f:07:0a:4b:bd:af:d8:75:c1:89:93:8d:91:06:f7:df:7b:
         21:3c:66:fc:34:3b:d5:6a:e3:0e:8f:5c:6b:b7:96:9e:f7:7f:
         ab:8e:d5:e8:05:cd:f4:f2:28:c3:90:04:f5:d4:6b:9c:bc:54:
         86:37:74:ec:8e:ed:c9:9c:66:ea:62:80:88:c6:a0:27:72:c1:
         0c:07:68:8e:88:6a:c0:76:5d:cc:c1:ba:b0:bf:11:a2:ef:fd:
         90:19:b6:0a:81:d3:b0:54:aa:d0:b0:3e:e8:fe:a2:24:17:13:
         2b:73:b3:4a:22:2e:85:f2:8c:1c:bf:29:43:70:a4:2a:78:7b:
         ce:97:76:d7:5a:0c:d7:68:88:c6:a4:a0:a0:6f:3c:2b:4b:4a:
         e3:3d:d7:94:73:7d:4e:fa:fd:b9:b7:a6:7d:37:89:00:a7:45:
         82:f8:cb:35:46:aa:ee:58:c0:da:5d:27:49:0c:38:02:37:93:
         ac:55:65:67:3c:e6:19:f0:cb:60:83:6e:a8:cf:bf:68:30:4a:
         d7:41:40:2c:90:2f:6e:13:a1:f6:ec:e2:cd:09:5b:ae:ce:74:
         71:7e:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----