Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/cc66561bcc294493c8654b539ae92568656ce89d.roa
File:                     cc66561bcc294493c8654b539ae92568656ce89d.roa (raw, json)
Hash identifier:          yAvsmMGc5YPSIzA0xBli5medhXT09SSZD6uJgl1deAA=
Subject key identifier:   7A:5D:30:68:A0:96:0C:E9:24:0D:78:23:A2:29:24:A7:5F:ED:59:1B
Certificate issuer:       /CN=905b46fff5683184231e0110f383972f42161459
Certificate serial:       0F9DCE
Authority key identifier: F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/cc66561bcc294493c8654b539ae92568656ce89d.roa
Signing time:             Sun 16 Apr 2023 18:45:45 +0000
ROA not before:           Sat 15 Apr 2023 18:45:45 +0000
ROA not after:            Wed 16 Apr 2025 18:45:45 +0000
asID:                     271941
IP address blocks:        2803:c610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023438 (0xf9dce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905b46fff5683184231e0110f383972f42161459
        Validity
            Not Before: Apr 15 18:45:45 2023 GMT
            Not After : Apr 16 18:45:45 2025 GMT
        Subject: CN=cc66561bcc294493c8654b539ae92568656ce89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:6c:7d:b3:1c:f2:c0:d0:51:e5:1a:6f:09:
                    7d:f7:12:0d:41:e3:fd:bd:c0:ae:28:fd:8a:29:07:
                    67:87:ed:5f:7e:a1:75:37:94:ae:e0:cb:4a:8e:bb:
                    d4:39:40:17:54:0e:52:01:d8:9f:02:fc:46:ff:8d:
                    e7:d0:00:82:c9:08:96:cb:da:7b:06:7e:29:b2:31:
                    a9:41:bc:b5:f3:bc:ea:0e:ee:4d:02:84:95:84:d7:
                    d3:ef:57:18:98:90:62:ce:53:54:5b:ff:88:54:5e:
                    fb:73:33:3b:ea:5a:a0:84:fe:a5:1c:aa:dd:a5:9d:
                    af:98:94:43:1c:16:34:57:f0:ec:d5:95:53:67:aa:
                    cc:47:3d:9b:e8:36:b5:b4:2d:8f:d5:75:5a:c6:ee:
                    a3:a4:ae:a1:f4:bd:f6:fc:c7:c0:c6:50:55:31:c7:
                    b1:53:b1:4a:a5:ae:be:9f:3f:cc:35:a6:11:48:d0:
                    0c:50:87:16:0e:69:0e:03:eb:7b:cb:a5:68:4c:a4:
                    5a:0b:1b:a4:da:8d:71:5c:f9:f1:6a:2e:f9:2a:b9:
                    7a:52:36:58:14:e1:db:a2:71:82:56:4b:ea:5c:0f:
                    9c:c6:2a:01:9a:8a:f2:53:84:18:c7:92:ed:bc:1a:
                    c2:f5:e8:11:1b:79:3e:4c:fe:71:f5:a0:30:49:4d:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5D:30:68:A0:96:0C:E9:24:0D:78:23:A2:29:24:A7:5F:ED:59:1B
            X509v3 Authority Key Identifier:
                keyid:F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/cc66561bcc294493c8654b539ae92568656ce89d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/905b46fff5683184231e0110f383972f42161459.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:cb:7a:2d:ae:c1:0b:e0:57:d3:5d:77:0f:7b:66:76:9f:cd:
         bf:9d:d6:6e:92:a3:52:64:0b:59:a5:fd:69:b2:f8:c8:66:2c:
         43:c1:92:be:43:35:f6:a3:e9:a5:6f:a0:01:54:d5:2d:7e:ac:
         a8:9c:be:7e:ab:68:37:f4:7d:1f:fc:b3:b7:19:b3:06:76:78:
         e1:e7:b7:92:ad:ab:c9:41:3a:31:aa:71:87:ef:4f:a8:38:63:
         4c:ed:40:d3:a6:33:ac:ef:9d:de:1f:dc:84:57:d8:bc:45:5d:
         c3:3d:66:78:86:96:29:98:bc:72:9e:8d:c0:3d:dc:25:f7:06:
         83:e5:2a:11:93:b7:e2:0e:e0:2a:0a:05:e7:e2:97:68:b3:7d:
         6c:8c:9d:7d:cc:25:db:c7:19:2f:14:f9:00:66:32:81:06:7f:
         f7:53:14:38:97:aa:ef:21:ef:48:f7:d4:11:70:4e:a3:16:ec:
         19:8f:17:ae:e9:bd:5a:9c:ea:f1:45:a1:1a:8a:ef:c4:d3:3c:
         b2:b6:5c:7b:48:67:dd:39:8a:7a:86:67:e8:66:5f:3b:3f:b9:
         8f:60:53:2a:46:4a:23:62:7f:d6:40:37:34:10:01:92:7e:d9:
         76:bb:0a:08:99:53:50:6f:c8:e1:c7:ef:88:55:a6:a2:28:c6:
         da:19:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----