Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/54cd87d14f423d73b4cb647a293785e96e8f194b.roa
File:                     54cd87d14f423d73b4cb647a293785e96e8f194b.roa (raw, json)
Hash identifier:          f99Wk82gKnsBPuJ7pT2cXk7bIRpj5shJ+neXOocA62o=
Subject key identifier:   9D:F1:91:2B:4B:E9:D7:27:A3:E4:E6:7E:76:16:B9:87:F2:D2:FD:51
Certificate issuer:       /CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
Certificate serial:       21DA60
Authority key identifier: 04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/54cd87d14f423d73b4cb647a293785e96e8f194b.roa
Signing time:             Wed 05 Jul 2023 02:04:57 +0000
ROA not before:           Tue 04 Jul 2023 02:04:57 +0000
ROA not after:            Sat 05 Jul 2025 02:04:57 +0000
asID:                     52468
IP address blocks:        2803:9c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218592 (0x21da60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703d633e7a2b67d615adbb1d951e9d1eaa29daa
        Validity
            Not Before: Jul  4 02:04:57 2023 GMT
            Not After : Jul  5 02:04:57 2025 GMT
        Subject: CN=54cd87d14f423d73b4cb647a293785e96e8f194b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:e3:23:cf:5b:a6:27:b7:5a:e0:e9:d7:4a:
                    26:30:75:d5:30:c2:83:8b:20:28:b7:89:34:0c:9f:
                    ea:a6:07:b5:1c:6f:37:e4:a4:94:27:0a:11:91:59:
                    99:bb:3d:59:42:65:6c:6d:d0:64:70:ca:d9:4d:e2:
                    82:89:01:5a:34:a0:77:28:10:5a:6d:b5:4d:51:e9:
                    6c:62:19:56:5e:98:cd:60:a5:09:0e:88:05:ec:8b:
                    ae:8a:24:2b:1f:4c:cf:4a:50:1e:65:ea:f3:a4:9f:
                    d9:ca:a5:ef:5c:81:f0:59:fd:87:1d:5b:d8:52:d6:
                    19:81:ce:aa:92:c8:8e:dc:f6:c0:2f:92:3f:97:29:
                    19:87:9f:ba:c3:5d:ce:59:90:25:fe:9f:fe:d2:87:
                    3d:00:aa:8e:f4:31:38:f4:72:45:d5:20:e3:e4:f1:
                    52:0c:24:11:97:3c:5f:20:dd:23:1d:4c:b1:2b:79:
                    04:77:87:08:5d:68:c0:cc:2a:58:98:27:f2:cb:84:
                    e9:c8:90:a4:cf:4e:f8:c3:7d:13:74:c3:0a:38:6f:
                    64:b6:60:bb:ee:62:f4:f3:7c:9c:9f:90:5b:a4:c8:
                    24:e8:9a:3b:48:86:a6:63:cd:52:ed:bb:7f:a0:f4:
                    c6:c0:2e:2c:69:6d:ae:9c:ee:22:7a:7e:e7:bb:b5:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F1:91:2B:4B:E9:D7:27:A3:E4:E6:7E:76:16:B9:87:F2:D2:FD:51
            X509v3 Authority Key Identifier:
                keyid:04:41:4F:86:F1:25:24:A2:1F:C1:D2:05:B7:A7:F8:E4:50:EB:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/54cd87d14f423d73b4cb647a293785e96e8f194b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a92b3012-ad59-4aae-8777-4e6aff1a2166/4703d633e7a2b67d615adbb1d951e9d1eaa29daa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:21:64:bc:10:5e:ac:84:0c:2a:a2:e4:7b:cd:a4:fe:31:59:
         7f:6e:54:87:75:13:4f:2e:05:5a:ba:c4:6b:1b:f8:97:65:4e:
         ae:12:33:60:72:3f:a5:65:dd:1a:cd:64:96:cc:8c:03:45:74:
         b2:ae:c5:de:d0:10:57:c6:8b:fb:78:c8:63:98:a5:13:91:9c:
         e0:6b:15:79:87:14:6a:7e:55:d2:f2:40:2e:44:ce:3e:80:c6:
         1a:bb:da:8e:5e:94:a9:13:30:14:5c:c3:e2:50:29:32:21:32:
         f8:11:e4:06:41:36:b8:7e:aa:bf:93:ac:fa:6b:bb:3d:4d:3b:
         a8:7d:34:e6:2a:66:4b:0b:8e:30:22:83:5c:4e:d3:3c:22:65:
         7f:c2:8c:cd:2a:47:02:ce:6e:55:2a:6a:d3:da:1b:95:32:c7:
         c2:2b:d2:f4:60:66:fb:73:b3:b1:5b:1b:5d:d8:4d:c3:e0:ad:
         c2:fb:0e:f0:a8:11:58:6a:c4:b0:95:a1:cc:44:6f:aa:21:2d:
         92:6e:ce:7f:d4:9e:73:a8:3d:e8:3b:23:f1:12:d8:5a:cb:89:
         66:59:6a:5c:49:7b:86:6f:0c:fa:33:c4:4e:c6:12:b9:83:01:
         93:62:49:0c:2a:f1:b0:45:ca:bf:35:45:9a:c6:39:1a:0b:23:
         28:d4:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----