Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/cd31ba73fff0173c0065d9675e0343d682f7d3cc.roa
File:                     cd31ba73fff0173c0065d9675e0343d682f7d3cc.roa (raw, json)
Hash identifier:          7pW3TKFc8M8IW7BTAyNwhab5hwhfCDzrR+0A7T/eyA0=
Subject key identifier:   64:3D:54:92:C7:5D:1A:71:9E:F0:5A:1E:C0:88:A7:A2:0C:72:75:17
Certificate issuer:       /CN=64041944442f461f5c8e752eaa61df259bbf573e
Certificate serial:       05115B
Authority key identifier: 93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/cd31ba73fff0173c0065d9675e0343d682f7d3cc.roa
Signing time:             Thu 01 Jun 2023 13:13:41 +0000
ROA not before:           Wed 31 May 2023 13:13:41 +0000
ROA not after:            Sun 01 Jun 2025 13:13:41 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332123 (0x5115b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64041944442f461f5c8e752eaa61df259bbf573e
        Validity
            Not Before: May 31 13:13:41 2023 GMT
            Not After : Jun  1 13:13:41 2025 GMT
        Subject: CN=cd31ba73fff0173c0065d9675e0343d682f7d3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:09:40:85:fd:f3:57:9f:3b:76:84:86:b4:
                    41:a7:47:1f:59:d2:be:51:db:e5:5d:a5:4a:73:c9:
                    cd:bf:b0:1b:2b:6d:63:d5:c9:c5:50:f8:5c:54:b1:
                    d8:fd:4d:19:14:d2:f4:b1:83:40:29:99:b3:26:ae:
                    99:95:7d:cd:8c:04:cc:0b:bb:59:fa:e2:98:b2:88:
                    12:17:cd:19:c7:e1:8e:8a:8a:b9:54:dd:23:a4:5f:
                    9c:cd:bc:99:07:7c:2b:d5:02:6a:09:86:50:90:a4:
                    7c:a5:e3:b3:81:80:ce:51:ef:31:ac:98:76:d4:15:
                    2b:9e:00:86:07:6e:80:85:75:72:f9:72:8c:f0:41:
                    29:63:52:96:10:38:d6:b0:7a:de:f6:62:60:f9:de:
                    0a:e4:02:4d:03:12:7a:33:12:98:b2:1d:0e:9d:78:
                    c8:8c:cc:b9:f7:36:5b:f3:85:11:e8:9d:0a:a8:7a:
                    c3:4f:e4:e8:f3:8f:58:d1:19:c2:7f:4c:49:a9:96:
                    71:a4:cb:df:c3:c5:65:28:58:05:a5:2a:6b:c6:5e:
                    46:0b:6b:18:1c:85:b6:e5:ca:cc:87:91:83:1f:08:
                    96:98:7d:0e:76:d9:0a:03:1d:61:1b:dc:bd:d4:64:
                    c6:e2:3c:11:b9:43:65:59:b6:6d:11:ac:f7:3a:38:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3D:54:92:C7:5D:1A:71:9E:F0:5A:1E:C0:88:A7:A2:0C:72:75:17
            X509v3 Authority Key Identifier:
                keyid:93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/cd31ba73fff0173c0065d9675e0343d682f7d3cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/64041944442f461f5c8e752eaa61df259bbf573e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:f6:2f:44:38:a0:f3:0a:ee:c8:bb:46:7a:cc:d5:a5:c9:
         69:83:ed:1c:13:95:89:5c:2a:fc:d7:a1:fa:a1:6b:07:e7:d1:
         41:65:02:f2:9f:e6:f9:05:53:8e:e5:70:21:f3:ff:79:e2:46:
         19:bc:74:e9:fb:ed:c4:7b:22:1f:6c:50:d6:81:63:05:b5:12:
         d1:e3:9b:ec:d0:00:ee:93:93:e8:3d:29:ea:03:d6:55:ee:9a:
         c5:c0:f6:16:38:9f:cb:5d:64:8e:a8:17:6c:42:88:a0:62:eb:
         4e:dc:c9:7f:40:68:24:78:57:7c:e8:33:34:e0:e3:c5:9c:ba:
         7d:22:46:4c:9d:87:8d:73:98:33:da:79:0e:f7:61:74:d0:84:
         1c:76:d0:67:82:69:61:9d:a1:e7:a2:8c:d4:6c:71:8d:a3:1d:
         12:a7:08:4a:d2:c9:95:6d:60:26:b1:96:19:dc:fb:4f:ee:5b:
         8f:8d:0b:56:2d:d0:98:d9:4a:38:f3:78:e4:a8:73:c5:eb:84:
         24:0d:0f:71:11:3b:2a:d2:3d:b0:28:f5:1c:28:0f:77:20:c6:
         56:5b:e1:cc:7d:57:ad:b4:60:cb:c0:02:ab:8d:05:94:07:99:
         3e:66:58:c5:93:9d:81:19:92:0f:f3:62:5c:d6:6a:3e:1b:67:
         c6:f4:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----