Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/e3b906597799558f77c3845fec6ccfbd8636f94f.roa
File:                     e3b906597799558f77c3845fec6ccfbd8636f94f.roa (raw, json)
Hash identifier:          MynYQcD5DoXEtPPH0Fm5EXMeMqnGmI1ceDltpyz7sxo=
Subject key identifier:   7D:3C:B4:E7:B4:EB:7A:16:98:03:0E:B0:8C:15:3D:94:17:94:CF:D3
Certificate issuer:       /CN=64041944442f461f5c8e752eaa61df259bbf573e
Certificate serial:       04118F
Authority key identifier: 93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/e3b906597799558f77c3845fec6ccfbd8636f94f.roa
Signing time:             Mon 24 Apr 2023 15:35:45 +0000
ROA not before:           Sun 23 Apr 2023 15:35:45 +0000
ROA not after:            Thu 24 Apr 2025 15:35:45 +0000
asID:                     272847
IP address blocks:        2803:6c90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266639 (0x4118f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64041944442f461f5c8e752eaa61df259bbf573e
        Validity
            Not Before: Apr 23 15:35:45 2023 GMT
            Not After : Apr 24 15:35:45 2025 GMT
        Subject: CN=e3b906597799558f77c3845fec6ccfbd8636f94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:f8:7d:e2:3b:ac:34:4e:0d:08:8f:24:17:
                    ff:b5:1e:a7:63:b5:ac:51:a4:ac:64:71:93:c2:7e:
                    9f:ee:48:68:ac:c8:9b:9b:2a:71:e1:dc:d6:35:10:
                    61:0d:45:af:93:bd:51:ff:1f:5f:80:40:34:16:bb:
                    43:46:56:e8:9b:03:44:d1:8d:3a:7c:10:d5:a4:08:
                    55:68:96:e4:c4:98:f2:96:17:e5:25:91:c5:47:c6:
                    10:9d:b2:09:80:5a:91:5d:c7:6d:d9:07:25:30:13:
                    e9:08:c8:13:57:42:b1:e4:9d:21:d8:92:ec:b0:f5:
                    6e:15:3e:e6:b9:f8:87:3f:bf:d7:69:5f:cc:90:d1:
                    10:b5:ec:4d:08:2e:6c:55:0f:5d:cc:7b:7f:22:1f:
                    00:88:10:27:a2:9b:96:97:b7:d7:fa:15:d9:64:ee:
                    fd:9a:9c:6f:cf:d9:a9:a3:15:10:f8:33:b5:5c:22:
                    4a:b9:84:5e:06:81:dd:38:3f:29:57:4a:60:dc:04:
                    ce:b3:37:29:c5:76:37:a7:a3:bb:a4:56:ad:94:a5:
                    e4:15:36:0b:8e:ab:bc:79:b8:18:50:c4:e6:a7:fd:
                    25:75:17:fb:7e:f0:dc:5e:f6:3b:2f:f8:75:64:fa:
                    8e:26:26:63:f9:30:f1:b6:90:99:a2:e5:fc:ce:ee:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:B4:E7:B4:EB:7A:16:98:03:0E:B0:8C:15:3D:94:17:94:CF:D3
            X509v3 Authority Key Identifier:
                keyid:93:5B:33:97:35:B3:FD:28:E3:3F:29:ED:12:A8:D4:5B:C2:4B:75:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64041944442f461f5c8e752eaa61df259bbf573e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/e3b906597799558f77c3845fec6ccfbd8636f94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfe9123f-e239-4258-9c57-73b262f917bb/64041944442f461f5c8e752eaa61df259bbf573e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b1:d1:2f:73:e6:fd:84:ef:08:60:62:3e:25:89:95:0a:a3:
         1a:2a:ba:e6:4a:bd:b8:77:69:1e:dd:14:a3:61:2d:64:37:98:
         9b:5a:ee:10:1c:ee:0e:1a:2b:4a:d5:5f:eb:5b:c6:ea:00:d3:
         cb:40:7c:2e:71:51:22:c6:bc:25:1d:fc:ab:73:b0:e5:57:72:
         61:44:7a:31:53:ed:70:d1:31:56:9e:04:f6:98:fd:d4:fd:78:
         6a:9b:86:05:a6:cf:79:87:96:fe:d0:92:1c:d8:b5:2c:01:fe:
         19:9c:64:fe:f1:67:72:ff:76:bd:6c:84:cf:6c:be:b5:94:64:
         7f:38:86:7e:51:4b:9e:fb:13:9e:f0:ab:a7:d8:fc:12:c6:7a:
         25:86:50:4a:58:2f:5c:72:69:69:26:dd:e1:00:a0:0d:6d:94:
         8d:e3:0f:ae:3d:a3:49:e7:74:9d:26:81:43:62:8f:b8:30:2e:
         ab:12:a9:5e:53:b2:d2:62:d5:2e:54:43:f8:04:6b:54:90:a4:
         4a:21:4c:2b:14:e4:ea:d9:41:22:7b:a7:b5:34:ed:25:a4:8e:
         39:f4:2e:74:e3:54:d5:d8:9b:83:1c:0b:6b:2c:da:cd:8b:c5:
         d5:5f:24:73:33:d5:ef:ab:0a:e9:f3:7b:65:1d:bf:5a:40:15:
         5b:c2:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----