Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/6e94e0f7291fedacbfd980ccab65406eea7e5301.roa
File:                     6e94e0f7291fedacbfd980ccab65406eea7e5301.roa (raw, json)
Hash identifier:          HO2ezrMPDmK4fq3aeKXinvMrT5C+hJ9FpC5PSSW6Q6g=
Subject key identifier:   D8:32:70:8C:8D:D5:DE:09:25:1C:20:63:41:CC:98:99:27:7F:32:F5
Certificate issuer:       /CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
Certificate serial:       0C555C
Authority key identifier: 19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/6e94e0f7291fedacbfd980ccab65406eea7e5301.roa
Signing time:             Thu 25 May 2023 20:44:54 +0000
ROA not before:           Wed 24 May 2023 20:44:54 +0000
ROA not after:            Sun 25 May 2025 20:44:54 +0000
asID:                     272056
IP address blocks:        2803:bd10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808284 (0xc555c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
        Validity
            Not Before: May 24 20:44:54 2023 GMT
            Not After : May 25 20:44:54 2025 GMT
        Subject: CN=6e94e0f7291fedacbfd980ccab65406eea7e5301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:e1:3a:08:2a:84:bb:67:7d:65:26:6a:9f:
                    a4:76:4c:49:4b:27:3e:18:f3:12:7a:62:58:73:9b:
                    ef:fa:ca:5d:f6:51:ab:dd:50:ab:3f:07:16:32:b7:
                    68:7f:6c:05:5d:9a:3c:37:ef:81:d1:e6:de:da:4f:
                    ba:15:57:37:ae:bb:fd:d3:ab:38:12:dc:d0:65:5a:
                    9f:49:7b:4e:81:53:b2:fb:c4:c7:e6:11:04:b0:a0:
                    cf:82:aa:5d:3e:73:fc:f3:66:81:fb:ab:df:a3:e6:
                    98:16:2a:d2:ab:2c:18:52:91:ad:81:63:9a:20:22:
                    78:6a:bc:fa:1d:5e:dd:20:d6:fb:cc:1e:63:99:78:
                    31:75:44:cb:0e:12:7d:aa:98:b8:e2:6b:82:e7:75:
                    05:fa:05:c6:48:9a:77:d8:d1:46:7b:0a:41:39:64:
                    d9:ec:dc:93:7a:61:79:4d:74:7c:b7:0d:b6:c0:3c:
                    41:37:93:f3:e5:6b:c9:aa:95:fb:a7:5c:94:1e:45:
                    f2:18:26:24:b3:1d:50:3e:a1:7b:40:fa:ab:19:fd:
                    22:c1:67:96:c1:ec:79:3c:13:5f:7b:46:21:c0:e7:
                    9c:32:c7:7d:ef:94:33:65:0c:e7:b2:ff:91:99:ef:
                    86:db:48:77:bf:46:10:2a:31:b9:9d:11:63:a2:52:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:32:70:8C:8D:D5:DE:09:25:1C:20:63:41:CC:98:99:27:7F:32:F5
            X509v3 Authority Key Identifier:
                keyid:19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/6e94e0f7291fedacbfd980ccab65406eea7e5301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/d907662ec76d6ba4a1e2cdb479e31012f43c1385.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd10::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:a0:bc:d8:67:17:f6:0b:a3:79:6f:1b:01:ab:e0:d9:e3:
         f1:4e:8b:3b:00:5b:64:27:36:25:93:f8:41:00:31:45:90:96:
         16:69:9d:17:a4:1e:45:a0:e2:af:03:f4:fa:ce:40:a1:cf:28:
         b6:c7:6f:a1:12:89:5f:91:2f:9b:95:de:ec:87:84:5f:f1:0c:
         7e:86:34:14:17:35:29:4d:47:7c:c8:e8:81:7e:96:0f:b3:d1:
         51:9d:29:c9:11:cf:01:f3:1b:5d:58:90:8a:8b:14:8b:97:11:
         74:86:94:7d:fa:e2:ec:f1:7a:a4:5a:67:b4:7f:c2:f8:13:33:
         63:0e:cc:8f:a7:62:e0:89:6e:00:ab:b2:8f:32:d3:2d:ed:c8:
         68:a6:a4:d8:e3:01:fe:e0:84:c3:da:3b:a5:77:1d:cb:db:95:
         37:7c:71:ac:1e:7e:94:3e:f3:41:a6:87:3f:b7:ea:26:2c:7b:
         be:6a:62:22:08:ea:27:3e:ab:17:e6:86:01:7f:b1:02:7d:cd:
         ae:29:3a:ad:71:be:c1:5a:6d:00:c5:f9:54:1f:c7:fb:3e:3c:
         5d:49:21:60:ef:ed:8c:ac:35:37:05:ec:52:a9:3d:bc:81:54:
         0e:5c:d8:3a:20:34:fd:e4:46:ee:84:f0:f3:48:b6:2e:af:1e:
         36:70:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----