Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/e692bf1eba17bdeb86a44704f3e30c4c804a2d63.roa
File:                     e692bf1eba17bdeb86a44704f3e30c4c804a2d63.roa (raw, json)
Hash identifier:          ZoRjNUMGYtCKLE16OCi2sBnqnkUmqijidl59wQ0Y1SM=
Subject key identifier:   5F:5D:D8:B1:33:41:C7:5E:A4:88:70:E5:A6:C0:44:5A:01:68:59:B4
Certificate issuer:       /CN=fb2a328489ce9d41f7b97d77b70ab1b89edc349f
Certificate serial:       77AA
Authority key identifier: C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/e692bf1eba17bdeb86a44704f3e30c4c804a2d63.roa
Signing time:             Tue 25 Apr 2023 19:04:07 +0000
ROA not before:           Mon 24 Apr 2023 19:04:07 +0000
ROA not after:            Fri 25 Apr 2025 19:04:07 +0000
asID:                     272961
IP address blocks:        2803:7990::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30634 (0x77aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2a328489ce9d41f7b97d77b70ab1b89edc349f
        Validity
            Not Before: Apr 24 19:04:07 2023 GMT
            Not After : Apr 25 19:04:07 2025 GMT
        Subject: CN=e692bf1eba17bdeb86a44704f3e30c4c804a2d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:fa:a6:b0:b3:87:e0:c0:87:95:f9:1b:ba:
                    11:2e:db:5c:5b:ee:8a:b8:9b:d0:03:10:c3:83:55:
                    75:50:fc:69:d8:d2:ab:18:ad:9e:98:67:c5:94:b8:
                    c9:8c:f8:62:f5:93:bd:bd:63:d5:d8:bb:e7:99:96:
                    9f:07:2d:7b:d7:6e:03:59:e6:4a:93:fd:25:1b:17:
                    e7:2c:5c:ba:8d:11:f7:b0:6c:07:68:98:f0:de:04:
                    d0:3a:0e:7c:e6:99:ec:5c:98:79:63:19:28:3d:46:
                    8f:74:e5:8a:30:b1:7a:83:d3:04:25:80:87:65:5d:
                    cb:9e:02:3b:c4:b0:01:13:9e:b6:a9:cd:89:45:5a:
                    8a:38:79:c8:89:77:e5:63:5e:ef:13:d9:e3:68:dc:
                    86:1e:95:1e:e7:ff:de:b7:3c:82:d9:de:b8:99:66:
                    2f:7f:9a:81:77:06:2f:cf:34:a3:c0:e8:78:7d:4f:
                    d9:7f:b7:1b:55:f2:8a:1a:c0:66:2c:9f:42:5e:28:
                    ee:a4:9a:37:a3:9d:c2:ce:35:5d:bf:00:5a:af:66:
                    c5:e8:e5:0b:12:b1:48:88:39:0d:82:37:77:e3:69:
                    86:be:85:3c:1a:5a:8e:a5:76:3f:84:9a:fa:9a:75:
                    74:ef:72:0f:bf:7e:32:29:52:5d:da:14:90:f8:60:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:D8:B1:33:41:C7:5E:A4:88:70:E5:A6:C0:44:5A:01:68:59:B4
            X509v3 Authority Key Identifier:
                keyid:C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/e692bf1eba17bdeb86a44704f3e30c4c804a2d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7990::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:21:c0:16:07:bb:35:fa:cc:e6:ad:dc:84:3b:ea:cf:1d:d1:
         89:69:9f:7e:29:d7:2e:c0:dd:e4:39:15:e2:3f:c6:15:1a:92:
         2b:6a:0f:86:18:c5:e6:eb:ad:74:15:5e:22:74:19:9b:84:45:
         d3:17:6f:c8:41:3c:a0:ed:26:83:a3:c6:55:a6:77:fd:91:99:
         60:55:68:d9:57:e5:bb:aa:91:fc:b1:35:b6:ce:1f:60:aa:84:
         56:49:e0:bb:31:2c:46:68:ba:0e:12:8d:d9:09:2b:4a:aa:ef:
         49:98:34:27:b3:fe:92:f7:6a:2e:97:2a:f6:81:5d:3c:7d:20:
         74:60:e8:f6:3d:b4:8b:cf:5f:f0:54:a2:09:e5:58:8d:fc:5f:
         2c:fe:d3:56:05:e1:76:fb:73:5b:7d:cc:80:9f:0c:74:06:1a:
         e2:9f:06:47:ce:f7:e5:16:f8:e6:84:98:63:c4:95:75:e2:15:
         c6:39:41:a0:20:7f:36:8f:01:97:1c:0f:07:ef:13:e4:f4:f6:
         b2:83:58:d0:a3:c1:7c:75:ad:44:28:bc:55:06:2e:e2:d2:4a:
         a3:c9:0f:d6:19:bf:96:c9:1a:e3:d2:77:5b:cb:e0:6e:85:b6:
         de:41:ec:56:bb:e1:dd:bc:88:a9:5c:fb:ce:ac:70:8e:9b:9c:
         4f:13:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----