Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/13d0c7adbea2e2d3fd98b886762b6d7b10bf4d8d.roa
File:                     13d0c7adbea2e2d3fd98b886762b6d7b10bf4d8d.roa (raw, json)
Hash identifier:          lnyc5KGeYh8VvzFr9VxjA7aqH229+9ILbFIEQHm0aMs=
Subject key identifier:   3E:5F:9C:47:9D:E5:3D:B3:3E:21:F7:0F:16:59:AA:8E:E3:66:54:D0
Certificate issuer:       /CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
Certificate serial:       01EF2F
Authority key identifier: 7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/13d0c7adbea2e2d3fd98b886762b6d7b10bf4d8d.roa
Signing time:             Tue 22 Aug 2023 23:11:42 +0000
ROA not before:           Mon 21 Aug 2023 23:11:42 +0000
ROA not after:            Fri 22 Aug 2025 23:11:42 +0000
asID:                     267724
IP address blocks:        2803:85a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126767 (0x1ef2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcde2a88e5908b9d297ac64848a8a9e438dc5fcb
        Validity
            Not Before: Aug 21 23:11:42 2023 GMT
            Not After : Aug 22 23:11:42 2025 GMT
        Subject: CN=13d0c7adbea2e2d3fd98b886762b6d7b10bf4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:62:ae:b7:78:7c:2a:7b:a7:ec:2b:e1:90:2a:
                    4d:0f:fe:73:63:ce:bf:51:2b:53:e0:4f:63:20:4c:
                    35:b9:2f:1c:c4:d9:03:60:77:88:ca:d7:df:6f:fe:
                    a4:77:8d:52:d7:e4:ab:cf:9d:34:d5:14:2f:b0:2a:
                    f0:a2:de:5e:a6:c8:53:4d:ce:ee:74:f8:a1:25:f8:
                    0c:77:c2:77:ed:c1:93:7a:3b:e4:8b:e5:1c:dc:b4:
                    10:cf:e6:58:6d:6b:1e:84:4f:38:3e:89:e0:51:8a:
                    c6:60:74:45:dd:21:3f:04:75:d7:65:97:cb:a0:3e:
                    28:a2:5e:6c:4e:20:aa:40:f1:28:96:13:4d:cc:13:
                    72:98:98:06:e3:44:70:76:fc:fe:63:ce:ed:31:a6:
                    ae:cf:1f:6a:20:70:f5:df:10:ea:ff:ea:13:cb:52:
                    f5:9d:15:19:8a:2d:44:28:c5:32:4f:36:ac:5b:70:
                    ae:20:bd:e7:83:8b:28:dd:52:51:ec:85:84:fd:8f:
                    38:20:44:bd:f7:b9:97:b1:08:3a:77:54:73:3a:3d:
                    a0:bc:8f:fa:1e:59:01:ad:22:75:87:3e:d2:af:87:
                    dc:e7:89:50:4f:9e:0a:01:d8:ba:c0:8b:51:80:1f:
                    af:34:38:1e:45:2d:88:29:47:cd:6b:af:bc:a0:71:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5F:9C:47:9D:E5:3D:B3:3E:21:F7:0F:16:59:AA:8E:E3:66:54:D0
            X509v3 Authority Key Identifier:
                keyid:7C:E5:84:0E:13:2C:31:86:BD:04:D6:C7:CE:BC:C5:1A:1D:EC:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/13d0c7adbea2e2d3fd98b886762b6d7b10bf4d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1638494-0b44-45d1-a0b4-f4cc475cb184/bcde2a88e5908b9d297ac64848a8a9e438dc5fcb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:85a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:71:52:62:32:75:f5:b8:e5:97:31:24:16:ab:b9:f6:df:
         a3:57:bc:39:f8:c7:02:c6:3d:90:a9:f5:53:82:86:e7:6a:02:
         e8:1b:83:d2:f5:86:5b:39:38:46:8d:30:31:15:1f:d8:de:2f:
         1a:79:01:22:03:99:8d:dc:10:85:b9:57:34:fa:46:79:4b:01:
         ff:ad:2a:41:d0:e5:21:af:3e:ef:dc:11:d5:6a:e1:8b:c8:ba:
         e3:12:04:33:81:af:53:c0:8c:99:db:78:bc:30:ff:09:9c:62:
         45:26:6f:9c:8e:8d:60:3f:41:e1:fb:2c:b6:24:35:29:74:07:
         f3:0f:4a:6b:34:ce:47:35:2f:9c:7e:2b:c8:c8:e8:ec:ab:e0:
         64:da:f1:1b:52:84:b3:d9:ee:a6:96:83:e6:ca:80:7a:b7:57:
         b9:a6:37:90:a9:1c:41:0e:b3:6c:68:f1:c9:1c:76:58:35:9c:
         e6:83:f3:3e:ad:50:7d:8f:dc:26:9c:a6:36:a9:26:3e:11:36:
         ed:ff:2a:ca:2b:29:1a:2c:05:d1:9a:03:e3:89:71:72:ca:ea:
         53:7f:b5:af:f7:f4:6d:8b:e9:3f:f6:da:35:78:e4:cb:39:8c:
         c5:4c:65:56:c5:2c:f5:db:9b:b6:67:9c:ed:72:f8:2e:af:97:
         2e:0a:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----