Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/e6a1123b327a5e180fa6dd7388b338857246a43e.roa
File:                     e6a1123b327a5e180fa6dd7388b338857246a43e.roa (raw, json)
Hash identifier:          tstJXpxEVvzgdR/BVfmkHg8TloDBt15Prid4POQA/fw=
Subject key identifier:   00:14:80:0C:21:A8:A6:A7:0B:E9:C8:BE:F3:40:30:DF:82:79:05:2F
Certificate issuer:       /CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Certificate serial:       2178D8
Authority key identifier: AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/e6a1123b327a5e180fa6dd7388b338857246a43e.roa
Signing time:             Wed 05 Jul 2023 02:04:50 +0000
ROA not before:           Tue 04 Jul 2023 02:04:50 +0000
ROA not after:            Sat 05 Jul 2025 02:04:50 +0000
asID:                     52468
IP address blocks:        2803:b420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193624 (0x2178d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222a52d30ba3eec506c4b1db1e0d991b13603988
        Validity
            Not Before: Jul  4 02:04:50 2023 GMT
            Not After : Jul  5 02:04:50 2025 GMT
        Subject: CN=e6a1123b327a5e180fa6dd7388b338857246a43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:7c:02:3b:2d:a2:37:ab:80:53:5d:a4:26:
                    2d:35:c0:bf:06:3a:74:19:5d:e1:79:b1:f6:9b:29:
                    48:1b:d8:28:97:f3:b1:8d:ba:bf:fc:91:dd:c8:51:
                    1e:90:1b:01:a2:60:82:f9:3a:ea:20:ad:30:fd:eb:
                    1a:fd:14:6f:88:de:37:19:37:77:86:ba:39:78:34:
                    7c:33:d4:cb:cc:39:57:65:5c:2a:36:e7:20:1a:cf:
                    3f:fb:86:1e:f5:da:ba:68:fe:d6:2e:fc:47:3e:93:
                    49:dd:0e:ee:27:ea:bb:66:f5:e1:94:44:75:81:9e:
                    5f:5e:76:21:6d:da:6f:81:ab:48:fa:ed:e6:f4:73:
                    d2:19:f8:70:ed:e5:66:c5:95:af:8d:2b:b6:66:fa:
                    8e:1d:1f:6b:10:cd:79:e4:cc:ee:cc:ea:31:80:13:
                    25:08:6b:07:f8:69:66:56:50:99:dd:4f:9a:a1:bd:
                    97:92:76:bc:17:dd:4e:4a:b0:e4:c9:16:bb:5c:3d:
                    03:65:29:23:fa:eb:73:56:15:9f:1b:34:f8:8e:8d:
                    bc:33:b6:5c:b9:ac:87:ef:f9:de:31:18:03:9e:0b:
                    b7:0e:03:61:4d:5a:f1:0f:82:10:f7:83:7b:bf:cc:
                    4a:2f:b3:7f:fc:91:c3:2e:cc:33:e1:00:04:e6:53:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:80:0C:21:A8:A6:A7:0B:E9:C8:BE:F3:40:30:DF:82:79:05:2F
            X509v3 Authority Key Identifier:
                keyid:AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/e6a1123b327a5e180fa6dd7388b338857246a43e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/222a52d30ba3eec506c4b1db1e0d991b13603988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:14:75:97:ba:e1:18:5e:45:15:7e:76:97:97:f0:2b:23:
         87:69:f0:4d:79:00:94:f3:5d:63:0c:23:61:a1:ab:25:1e:44:
         c4:7f:28:44:be:b8:e7:3f:2a:5b:6a:c8:41:64:3c:d6:8b:9b:
         64:0c:3e:21:75:d2:f8:c8:bb:69:f4:6f:58:4f:b2:24:01:81:
         2e:f7:67:92:d3:07:80:f3:98:11:ad:ef:b3:eb:a8:86:27:18:
         3c:65:43:74:15:05:9a:10:e5:dc:c6:28:1a:0e:3a:dd:6b:91:
         84:48:35:24:34:d5:5b:d2:52:b2:f6:d2:33:fa:c7:fe:84:08:
         53:6c:76:76:38:c6:2d:a9:8e:44:53:2a:6d:f9:f1:35:0b:af:
         45:de:5a:66:25:ed:21:51:74:51:c3:25:33:8f:26:a1:cc:b6:
         d0:77:12:c3:89:fd:2d:ed:51:f8:1d:6f:72:7d:73:38:c9:27:
         9a:48:33:a5:04:dd:b2:72:49:7a:e5:23:44:c4:97:05:6e:86:
         8b:b8:2f:64:a2:ca:fb:7e:61:e9:18:3f:7d:a0:40:d1:8e:ed:
         13:94:e1:be:18:86:80:8f:a3:81:84:34:58:28:a0:ef:9c:e7:
         31:b3:7f:d5:4c:6e:2d:3d:a2:27:1c:29:be:69:17:68:f8:16:
         87:16:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----