Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/d403ac237f117ead5b2e57122a1877957109fc07.roa
File:                     d403ac237f117ead5b2e57122a1877957109fc07.roa (raw, json)
Hash identifier:          88FAUSDPfCdAS1vic/i7VZ8Se7frz9UaTC6bPD8AXiw=
Subject key identifier:   6C:E3:2F:E3:19:81:88:1B:0B:DE:79:D8:83:F1:04:D3:4B:4E:1F:F1
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       04D238
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/d403ac237f117ead5b2e57122a1877957109fc07.roa
Signing time:             Mon 31 Jul 2023 04:50:41 +0000
ROA not before:           Sun 30 Jul 2023 04:50:41 +0000
ROA not after:            Thu 31 Jul 2025 04:50:41 +0000
asID:                     272937
IP address blocks:        2803:3190::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315960 (0x4d238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Jul 30 04:50:41 2023 GMT
            Not After : Jul 31 04:50:41 2025 GMT
        Subject: CN=d403ac237f117ead5b2e57122a1877957109fc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:a8:25:22:b4:e7:73:ca:0b:ef:03:7b:64:
                    6e:83:3d:70:4e:b3:59:25:b8:94:49:9f:4b:4a:c6:
                    92:36:a5:42:82:a2:fb:d8:a0:c3:5f:94:59:99:d2:
                    df:50:fd:c7:4a:e4:d2:bb:40:43:48:25:71:df:7a:
                    dd:8d:a8:83:10:5c:a6:02:da:01:3c:87:8b:ce:97:
                    85:84:c7:70:0a:f4:38:38:d1:a4:12:b9:54:a3:21:
                    97:28:0a:2f:bf:be:41:13:80:d9:3e:3b:72:c9:f2:
                    fd:4e:56:8c:8f:7a:89:4f:93:41:cb:4a:af:e6:67:
                    5f:47:20:80:bd:cc:15:18:ca:12:17:65:82:f4:e1:
                    fa:60:f2:ca:b9:06:32:91:65:8f:38:81:37:6b:0e:
                    fa:12:b6:8c:30:99:45:57:35:7a:2c:5d:b8:b3:01:
                    b9:d6:31:0a:6b:61:ac:c4:09:ea:19:4f:35:1c:32:
                    45:7e:12:bb:63:0d:0e:2e:2d:3d:d4:9f:68:7b:b1:
                    c5:7a:6b:71:1a:77:4f:64:1c:85:ff:ae:1e:29:43:
                    7a:ab:3a:c3:e8:9f:a2:de:6e:83:bb:db:af:c0:9b:
                    72:0f:13:10:ba:86:b5:5d:a7:83:1b:f1:21:57:ac:
                    08:f4:c7:ef:00:a6:d3:bb:41:61:4e:52:be:0f:b8:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:2F:E3:19:81:88:1B:0B:DE:79:D8:83:F1:04:D3:4B:4E:1F:F1
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/d403ac237f117ead5b2e57122a1877957109fc07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:c5:84:fb:4e:89:0b:b7:90:cb:ae:bd:ea:33:3e:f5:b7:
         d5:1d:86:4c:66:9a:db:6d:76:00:4c:b0:dd:69:76:39:9d:e1:
         d5:cd:b3:30:bb:bc:5f:79:7c:ea:18:ac:99:b4:06:d0:e0:6d:
         7a:1c:a4:c2:d6:c4:2a:0c:a9:3d:bc:43:06:bb:8b:b4:54:7d:
         42:b7:b2:a3:66:b4:1a:c4:90:a0:26:85:79:a5:cd:bf:c2:15:
         18:fe:53:b4:c9:74:41:0d:15:07:c7:56:97:18:ce:ad:c4:cc:
         a0:2c:32:7b:1b:70:fa:51:0c:4f:f1:6e:dc:eb:e8:9d:30:ea:
         4b:6e:7c:12:1f:75:56:cc:79:e9:a4:ce:56:0c:13:c9:bc:aa:
         1b:58:6d:9c:89:da:c3:94:7d:9e:a6:03:2f:d3:6d:f3:5d:3c:
         b2:1e:57:d3:a2:4f:b7:cd:c7:98:9b:ee:90:34:4d:73:6e:42:
         a6:f7:3f:80:c1:8a:a2:e3:5b:6b:eb:72:cb:04:99:78:2d:59:
         01:91:db:00:58:11:b9:73:2a:5b:5c:87:21:f6:ad:38:70:eb:
         19:9a:84:46:89:0f:da:3b:61:8f:35:50:51:30:b9:e8:7e:c0:
         95:1a:6d:3d:fe:45:cd:ca:2c:80:4e:68:e2:85:36:b5:5c:a5:
         a3:a5:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----