Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/6bf229d7d2eb01c1615a20c5c6f394e0cdd75346.roa
File:                     6bf229d7d2eb01c1615a20c5c6f394e0cdd75346.roa (raw, json)
Hash identifier:          R1TOVtO3p498VVNYhYaO3Wm77qq9EB9dWOL4QWBP9p0=
Subject key identifier:   A3:9A:6D:58:97:78:77:B9:3A:61:31:89:76:72:F0:97:E2:3E:27:18
Certificate issuer:       /CN=64041944442f461f5c8e752eaa61df259bbf573e
Certificate serial:       050854
Authority key identifier: 93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/6bf229d7d2eb01c1615a20c5c6f394e0cdd75346.roa
Signing time:             Thu 01 Jun 2023 02:57:30 +0000
ROA not before:           Wed 31 May 2023 02:57:30 +0000
ROA not after:            Sun 01 Jun 2025 02:57:30 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329812 (0x50854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64041944442f461f5c8e752eaa61df259bbf573e
        Validity
            Not Before: May 31 02:57:30 2023 GMT
            Not After : Jun  1 02:57:30 2025 GMT
        Subject: CN=6bf229d7d2eb01c1615a20c5c6f394e0cdd75346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:b6:05:a8:10:ce:bc:51:f5:cc:fc:9f:13:
                    3c:b2:1a:fc:e7:93:f4:ab:10:c5:0c:66:86:78:6a:
                    52:35:b8:5e:80:d2:44:f7:74:70:4e:b6:15:07:1c:
                    fc:5e:34:47:2f:da:9a:f4:0c:48:90:ad:b1:32:ff:
                    35:b3:0b:73:25:03:50:02:75:81:18:27:ab:ab:42:
                    03:2d:47:60:a6:a9:b7:83:92:48:ce:89:df:04:9e:
                    76:68:6f:c8:01:96:b3:b8:35:71:f1:1e:4f:b3:20:
                    8c:f5:e5:b7:8a:e0:2e:c8:be:f3:91:8c:6c:95:07:
                    6e:22:bc:e1:09:3d:77:4f:a6:b0:2c:74:a3:20:1f:
                    dc:a0:ee:22:4e:48:24:2c:9c:28:41:2f:be:87:f7:
                    bb:af:af:06:25:3b:c0:84:2e:54:e2:3d:01:40:b2:
                    cd:a4:56:54:c5:4e:36:0b:37:f4:4a:60:08:8d:f9:
                    7b:c4:58:67:3e:59:da:06:3a:88:25:21:30:3c:87:
                    f9:77:4d:da:dc:be:88:98:78:04:30:95:b0:4c:8e:
                    b6:82:d3:2d:78:db:51:13:b2:7f:db:ed:42:fd:89:
                    17:ae:9a:86:ee:74:19:e9:ac:a2:4c:c0:6c:79:84:
                    d0:cf:fe:62:c2:5f:b8:d1:a1:a4:8d:1f:44:fb:86:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9A:6D:58:97:78:77:B9:3A:61:31:89:76:72:F0:97:E2:3E:27:18
            X509v3 Authority Key Identifier:
                keyid:93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/6bf229d7d2eb01c1615a20c5c6f394e0cdd75346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/64041944442f461f5c8e752eaa61df259bbf573e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:ed:33:48:c1:5e:05:e2:a9:95:e8:5f:34:29:a3:f6:a2:
         a5:a2:be:00:90:d6:21:27:37:96:d4:82:c3:0f:f6:f3:21:04:
         28:9a:82:82:7b:c3:23:60:0b:ce:da:c1:82:bf:d7:44:f3:e3:
         e9:9f:e3:36:32:66:7e:e9:01:52:a3:3b:39:ba:58:79:50:87:
         a7:81:d7:1d:8b:b6:ae:da:42:c7:58:df:f0:de:f1:2c:7c:6f:
         f5:e4:1c:1b:d3:eb:ad:25:03:53:cc:89:46:72:5f:8e:4b:50:
         74:bf:fa:3f:64:f9:6e:98:b8:43:91:e4:86:e7:ad:34:2f:3e:
         c9:25:b8:72:82:af:6d:ce:c2:fb:ce:14:98:5d:ae:45:35:59:
         76:c5:36:97:01:07:0a:6c:f2:09:94:44:c7:36:e5:4c:0a:ae:
         d6:e0:a4:01:a6:02:02:68:72:56:0f:53:9d:06:5d:6d:2c:7c:
         1c:0d:15:61:f6:d1:da:ac:6f:f4:92:80:20:1a:bd:b9:29:0e:
         11:26:a9:41:d1:37:2f:98:ca:b3:60:b3:2f:77:27:7a:49:09:
         11:85:96:3a:8f:f0:09:fe:87:f1:8c:9c:f4:c9:e1:49:2d:f5:
         15:d7:df:31:29:8d:a0:89:a4:2c:6b:02:54:04:4e:86:23:6a:
         e8:cc:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----