Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/8f8f0b6dbe0fdc2096c44c8af77575afe5c0656f.roa
File:                     8f8f0b6dbe0fdc2096c44c8af77575afe5c0656f.roa (raw, json)
Hash identifier:          jt69u5zAAeBXTkSUAXN/agdH+BxQN7CNaNKbAg+HhcM=
Subject key identifier:   F7:51:56:7A:95:1C:8D:97:B9:7F:27:E1:14:80:E3:26:C6:BA:AD:D1
Certificate issuer:       /CN=cc94d447332088d6f7a8cefa79077c4d15556a3c
Certificate serial:       0E2DA7
Authority key identifier: 98:BD:9A:EC:77:20:D3:85:2F:22:A6:D4:1F:A8:8D:EE:AD:25:4A:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc94d447332088d6f7a8cefa79077c4d15556a3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/8f8f0b6dbe0fdc2096c44c8af77575afe5c0656f.roa
Signing time:             Tue 02 May 2023 22:53:57 +0000
ROA not before:           Mon 01 May 2023 22:53:57 +0000
ROA not after:            Fri 02 May 2025 22:53:57 +0000
asID:                     202400
IP address blocks:        2803:2910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929191 (0xe2da7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc94d447332088d6f7a8cefa79077c4d15556a3c
        Validity
            Not Before: May  1 22:53:57 2023 GMT
            Not After : May  2 22:53:57 2025 GMT
        Subject: CN=8f8f0b6dbe0fdc2096c44c8af77575afe5c0656f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:40:fb:59:29:48:b9:03:72:4a:42:e6:3b:
                    62:77:d0:50:ce:c4:70:db:7a:d2:0d:a1:32:da:06:
                    94:66:30:da:b8:e1:5e:f5:81:ef:f3:ae:da:06:5e:
                    a0:88:52:69:dd:f8:39:76:56:51:e3:ff:ee:5e:f5:
                    ba:bf:bd:4c:56:bf:05:48:78:e0:39:70:d3:02:c9:
                    35:7a:da:c4:51:5d:9a:63:dc:dc:ea:c6:78:a8:87:
                    10:fe:06:89:0e:13:49:c9:cd:e8:98:f3:1d:3a:24:
                    7d:3e:e1:7d:dc:15:a2:3d:2e:41:aa:e8:a7:38:3f:
                    0e:d8:74:f4:60:8e:d0:b3:33:ef:68:96:1d:73:32:
                    b2:2f:8d:21:fa:02:98:84:b1:16:b8:b2:4f:4b:91:
                    fc:ed:96:42:a4:42:00:04:80:a5:0d:8f:17:85:ec:
                    50:e6:4f:e7:7b:5c:49:23:1e:8b:df:e0:9a:8b:7f:
                    e0:66:b5:70:39:5a:47:c0:ae:09:c8:0b:7c:1a:76:
                    01:ec:3e:00:51:06:df:8b:07:17:5d:c4:c7:fa:b1:
                    3d:cb:7f:4a:79:ac:0e:dd:60:75:24:62:23:cb:e9:
                    c3:42:a1:04:af:85:75:ef:34:49:4d:f1:cc:d5:02:
                    4d:3b:9f:9c:01:6b:f5:23:09:49:65:b8:cd:da:16:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:51:56:7A:95:1C:8D:97:B9:7F:27:E1:14:80:E3:26:C6:BA:AD:D1
            X509v3 Authority Key Identifier:
                keyid:98:BD:9A:EC:77:20:D3:85:2F:22:A6:D4:1F:A8:8D:EE:AD:25:4A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc94d447332088d6f7a8cefa79077c4d15556a3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/8f8f0b6dbe0fdc2096c44c8af77575afe5c0656f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb79e9bc-0d61-417b-b73e-8fb8872a6b4a/cc94d447332088d6f7a8cefa79077c4d15556a3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:88:2f:36:4b:0b:1d:ba:7a:34:5a:15:04:cd:0e:8b:a8:72:
         fd:6d:13:dc:c3:fd:1d:aa:7c:c9:01:95:77:bf:51:d4:9c:c7:
         be:b6:26:8d:b9:c2:d3:2f:6d:d4:ba:f4:79:3e:5a:27:86:84:
         e2:35:49:aa:09:c5:fe:bd:61:4f:f0:94:68:49:b4:00:43:ae:
         88:8a:39:cb:4a:62:e5:61:fe:d3:c2:0d:75:6a:24:c2:2a:32:
         f1:d9:2c:03:75:e7:08:36:21:1c:14:9e:ae:14:64:7b:ca:78:
         58:71:9b:05:bc:c6:ec:41:22:30:61:a7:1e:10:d2:cd:1d:fb:
         67:49:fc:28:88:85:f6:7a:db:b3:39:88:f4:90:f6:8a:68:14:
         b3:74:7c:87:e5:ed:a8:00:35:9d:d4:8a:12:41:7a:13:ac:69:
         c9:8b:ba:51:28:07:84:5b:7b:c2:af:18:93:7d:58:da:f7:1f:
         40:f5:13:d3:f1:78:8e:46:4a:e8:56:8b:a6:f4:df:b1:6c:50:
         70:cb:41:45:29:3e:50:96:c5:ec:ba:31:c7:1b:0d:b1:03:e9:
         bf:5b:97:d1:b5:2d:c0:41:db:5b:44:2f:ef:7d:4c:63:56:de:
         f3:66:4b:27:61:ff:53:19:54:12:e5:80:92:7d:94:4e:56:aa:
         74:b4:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----