Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/863e1793a392c88b2ea4f63cc95ce3d4e277d26d.roa
File:                     863e1793a392c88b2ea4f63cc95ce3d4e277d26d.roa (raw, json)
Hash identifier:          WspSyNvyD6L1lDIV7Drnt8EK/JSkShMAsPoy8BlhFVA=
Subject key identifier:   57:E9:3E:64:76:48:E2:46:C9:DA:82:7F:EB:2F:0C:7B:8F:16:78:8C
Certificate issuer:       /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial:       2435CC
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/863e1793a392c88b2ea4f63cc95ce3d4e277d26d.roa
Signing time:             Mon 11 Sep 2023 19:17:44 +0000
ROA not before:           Sun 10 Sep 2023 19:17:44 +0000
ROA not after:            Thu 11 Sep 2025 19:17:44 +0000
asID:                     10617
IP address blocks:        2803:6380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373068 (0x2435cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
        Validity
            Not Before: Sep 10 19:17:44 2023 GMT
            Not After : Sep 11 19:17:44 2025 GMT
        Subject: CN=863e1793a392c88b2ea4f63cc95ce3d4e277d26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:62:a6:ee:7a:d3:03:20:37:cc:aa:2c:2d:
                    01:1b:6a:a4:26:16:32:79:e5:a7:b9:0d:38:6c:e8:
                    f7:94:da:d5:e6:64:8d:be:88:ff:a7:25:cc:7a:a3:
                    c5:f3:f3:1d:a5:71:c7:24:86:5e:9a:d6:40:1f:6e:
                    7c:22:05:20:78:9f:93:ad:43:b6:f0:c4:88:17:d6:
                    54:fb:08:75:f7:cd:19:c8:6e:c2:10:2a:ff:00:a8:
                    4b:1f:9d:ec:80:1b:dc:72:7f:9f:8d:11:45:38:f7:
                    71:55:7d:65:0c:aa:f2:e3:82:f5:06:8f:08:fe:3f:
                    ab:64:7e:84:73:67:0c:0b:8a:c4:94:a1:a1:e9:75:
                    e9:f0:da:02:80:bb:80:1c:84:07:c1:a0:9b:c6:0b:
                    2c:dc:3d:39:2a:73:db:be:9c:68:0c:b1:c4:95:66:
                    ce:02:4d:0d:3b:b6:6f:7a:b3:3b:91:2b:f6:a9:13:
                    d1:9c:49:16:68:ab:97:25:c6:bb:3c:75:69:20:01:
                    1d:f0:c0:39:7a:d9:60:08:04:7a:75:1d:0b:0d:f5:
                    7b:01:b8:b1:fb:4d:c9:2d:04:f0:82:c1:33:6b:26:
                    8a:c6:62:66:6f:96:0a:b5:ae:90:6c:f4:14:bf:2c:
                    74:12:09:be:1f:c5:f5:52:fb:71:f8:43:c7:96:dd:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:3E:64:76:48:E2:46:C9:DA:82:7F:EB:2F:0C:7B:8F:16:78:8C
            X509v3 Authority Key Identifier:
                keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/863e1793a392c88b2ea4f63cc95ce3d4e277d26d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:e9:5f:b8:92:a8:a8:db:03:0e:fa:6f:7a:69:e8:62:dd:
         b4:4b:23:b5:3b:28:64:62:53:ac:c1:97:cd:7e:3c:14:58:91:
         df:5d:0a:0d:ce:b0:a1:65:51:d5:6f:f4:63:bc:c3:46:fa:43:
         ed:ed:5a:c5:4e:60:b1:35:53:59:9f:52:f2:ae:fb:31:bc:1c:
         af:f0:f7:b2:6a:7f:2c:30:a0:b0:d9:ae:4a:ee:2d:1f:c5:9a:
         1e:c8:6f:4a:65:76:1f:46:f7:94:76:ef:9e:37:51:cd:b1:72:
         52:b2:cb:22:13:f7:76:7d:75:d5:4b:f2:63:85:53:b0:31:fd:
         e9:2e:34:4b:b6:51:24:f3:28:fc:43:f6:9f:97:c8:81:df:70:
         c2:1d:17:01:10:df:89:d3:31:a3:93:00:ee:69:8a:fa:49:1f:
         99:c3:0b:11:ab:30:0b:68:c8:11:95:ae:e0:a4:00:16:62:f9:
         35:f3:86:50:ee:3d:c9:af:0d:97:6d:e0:3f:ed:39:d0:ea:5e:
         ee:d2:a4:ed:d5:29:ce:06:b8:cc:32:f4:b8:ec:e1:a9:48:a0:
         0e:c3:f9:ba:f8:81:26:e8:87:3b:10:42:71:ff:56:95:18:3e:
         ca:9b:41:83:6c:ef:77:ce:67:17:38:ee:69:17:6b:ec:57:dc:
         a8:6f:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----