Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/81c5803288149f2d5df8b59e46a26a1951246968.roa
File:                     81c5803288149f2d5df8b59e46a26a1951246968.roa (raw, json)
Hash identifier:          jxv9HyiGKajcZtgEIgtsnihA+73dco3ZKZo5MJPGDSU=
Subject key identifier:   8C:F3:99:E3:03:27:AF:76:E0:C4:58:4F:71:33:88:36:10:AF:14:4A
Certificate issuer:       /CN=8a5b0be2b83d31931f58011a4ff6a710bbccd0aa
Certificate serial:       1D78BD
Authority key identifier: 06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/81c5803288149f2d5df8b59e46a26a1951246968.roa
Signing time:             Mon 03 Apr 2023 20:31:30 +0000
ROA not before:           Sun 02 Apr 2023 20:29:46 +0000
ROA not after:            Thu 03 Apr 2025 20:29:46 +0000
asID:                     269734
IP address blocks:        2803:f160::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931453 (0x1d78bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5b0be2b83d31931f58011a4ff6a710bbccd0aa
        Validity
            Not Before: Apr  2 20:29:46 2023 GMT
            Not After : Apr  3 20:29:46 2025 GMT
        Subject: CN=81c5803288149f2d5df8b59e46a26a1951246968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:ca:ff:e5:22:1b:09:62:85:e0:1a:00:1d:
                    99:57:6d:27:e7:d8:cc:5d:a3:00:38:76:61:1c:97:
                    0b:69:c0:c5:c2:9b:a3:84:b7:ac:89:09:f7:0e:16:
                    96:b5:a1:65:56:7c:25:5c:51:82:e6:02:8b:62:0c:
                    8e:ed:04:9b:25:26:23:ca:85:cc:1d:5f:b6:d5:51:
                    54:c8:2c:2e:12:b3:bb:8c:de:d3:ba:42:e2:73:1c:
                    78:6d:31:41:b1:5d:e5:ce:05:7d:fa:1a:a3:c0:8d:
                    e8:18:77:48:61:d7:5c:6f:7f:8d:43:66:ca:a6:c6:
                    29:ba:21:fe:9f:7b:82:25:65:4c:2e:60:ea:e8:fa:
                    04:c6:e5:9c:b6:7d:d6:48:2d:31:45:4c:ae:0d:bd:
                    b7:25:5a:60:de:8c:72:a8:18:cd:b2:c2:f4:b2:ef:
                    3c:72:f9:6f:03:8d:c9:d0:03:84:d0:f2:02:cd:be:
                    86:41:d3:fb:de:39:9c:7a:e3:e3:dd:af:38:7a:8f:
                    a8:ba:b2:c8:fe:47:4c:86:13:47:59:83:82:fa:78:
                    d9:20:2e:34:46:ff:0f:e4:39:0b:b1:5e:6b:21:c2:
                    bb:7c:ab:05:9d:f7:02:b1:c6:e7:1f:71:9c:6e:36:
                    71:66:8b:9d:db:6c:0e:89:7f:be:c3:9e:49:35:1d:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:99:E3:03:27:AF:76:E0:C4:58:4F:71:33:88:36:10:AF:14:4A
            X509v3 Authority Key Identifier:
                keyid:06:37:D9:3C:2F:AB:14:CB:DF:82:2A:F0:DC:67:51:1A:2A:BF:9D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/81c5803288149f2d5df8b59e46a26a1951246968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d39a610d-70f0-4304-9fc0-3485014e2367/8a5b0be2b83d31931f58011a4ff6a710bbccd0aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f160::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:a7:88:41:fc:89:7b:66:fd:c6:42:9f:20:57:30:44:b9:
         98:04:67:5b:72:94:0a:17:c4:80:10:ee:67:b6:9d:25:12:c2:
         b4:7d:ed:bf:76:4e:d3:59:96:50:67:8b:61:0c:c6:d6:72:e8:
         b6:95:a8:d8:62:94:9d:f1:57:af:90:1b:29:63:02:3c:73:93:
         a6:1d:c8:a3:ce:87:e5:9f:b2:ef:6f:bb:84:55:cb:2e:f9:f1:
         2b:35:ab:55:82:84:4d:5e:e0:46:29:37:d0:47:e6:45:74:c7:
         d7:f6:75:22:31:6e:74:64:ea:c6:12:09:08:18:65:c3:21:d8:
         05:82:ae:53:21:1e:56:3c:8b:ec:a4:83:4b:6b:67:ad:0f:bc:
         23:62:99:30:68:4e:66:4b:64:f2:bf:cd:d8:ae:09:a4:0b:cb:
         a1:d2:65:17:73:10:90:05:73:ad:e2:b4:d7:36:cf:e4:86:39:
         c6:b3:f8:fc:47:93:1c:71:df:c5:aa:7e:f1:2e:ee:5d:6e:d6:
         61:1c:df:f8:80:47:6f:d2:0f:43:7c:5d:41:a7:c7:5a:10:fd:
         41:97:c8:c9:62:25:44:7b:bc:71:3f:fd:a1:cb:c9:ae:30:50:
         9f:9d:7a:bc:4e:a5:ba:62:70:02:09:9a:a0:6d:73:9a:cc:04:
         20:3d:11:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----