Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/c1fe9a373fe2a960114c91faf6aeccaf61ce128f.roa
File:                     c1fe9a373fe2a960114c91faf6aeccaf61ce128f.roa (raw, json)
Hash identifier:          DoClL/oO+GiQ4jOGBH8kmhJ+j/0FcAdfT9RcVhXfy50=
Subject key identifier:   38:57:6C:44:B2:63:EC:52:F0:7C:D7:E2:C8:B9:BA:E7:6E:B3:D9:AB
Certificate issuer:       /CN=9dd6960f203691336ba50cdef7bcec2cfb628603
Certificate serial:       223D4D
Authority key identifier: 71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/c1fe9a373fe2a960114c91faf6aeccaf61ce128f.roa
Signing time:             Wed 28 Jun 2023 10:45:13 +0000
ROA not before:           Tue 27 Jun 2023 10:45:12 +0000
ROA not after:            Sat 28 Jun 2025 10:45:12 +0000
asID:                     273001
IP address blocks:        2803:a5c0::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2243917 (0x223d4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd6960f203691336ba50cdef7bcec2cfb628603
        Validity
            Not Before: Jun 27 10:45:12 2023 GMT
            Not After : Jun 28 10:45:12 2025 GMT
        Subject: CN=c1fe9a373fe2a960114c91faf6aeccaf61ce128f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ff:73:f5:14:5b:47:ec:82:9e:73:26:0b:18:
                    12:88:2b:39:d9:5c:73:19:fc:ed:b4:62:ee:ca:8d:
                    c5:7c:10:30:e8:67:fd:04:90:95:94:59:52:22:ad:
                    a2:e9:cd:d1:dc:63:8e:7c:32:89:d7:0f:d0:87:3f:
                    59:25:55:dc:1b:fc:7b:7f:62:e3:0d:98:ce:05:ac:
                    b1:ea:3d:3f:6f:6a:45:ca:25:e3:e2:c9:9d:62:ed:
                    f8:99:ef:7d:08:b6:89:57:f2:99:5a:d4:fb:c9:5c:
                    5f:59:11:ae:e8:25:66:e8:c2:cb:b1:6b:3b:82:d6:
                    c7:fc:a4:05:0b:54:65:ec:5f:53:16:dc:ad:2e:5f:
                    67:95:fe:6c:b4:eb:a9:e4:ee:f2:5a:99:95:c5:ce:
                    61:19:c7:2d:9b:23:fb:e6:41:b1:62:41:e0:ce:dd:
                    03:fb:41:a7:e4:6e:6c:4d:ff:12:1e:a0:a9:34:90:
                    1e:17:9b:45:4b:5f:18:b5:ee:da:57:47:d4:71:8b:
                    dc:c8:08:ae:a8:d5:b8:b7:eb:3b:bf:ea:b5:fe:e7:
                    c7:41:5f:22:c8:b0:46:c3:c6:d8:d5:eb:b7:d0:00:
                    e8:76:dd:3a:50:fd:db:40:fa:6c:27:1c:6a:12:cc:
                    4d:a1:a5:97:3e:0e:fa:c6:c8:d1:75:48:9c:b0:6f:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:6C:44:B2:63:EC:52:F0:7C:D7:E2:C8:B9:BA:E7:6E:B3:D9:AB
            X509v3 Authority Key Identifier:
                keyid:71:D6:75:E9:58:4C:AA:53:28:75:3D:A0:B0:66:6C:89:50:96:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dd6960f203691336ba50cdef7bcec2cfb628603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/c1fe9a373fe2a960114c91faf6aeccaf61ce128f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d5264185-9235-463a-adc1-4b7fcaf3c2b5/9dd6960f203691336ba50cdef7bcec2cfb628603.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:80:99:19:41:2b:36:7b:82:53:4b:69:3b:a0:ea:86:4b:
         2f:5c:c2:b4:7a:47:b6:82:db:be:92:88:7c:02:01:44:5f:91:
         e3:19:df:0a:c1:ea:1b:dd:0d:11:a8:d3:ba:09:94:64:7b:2e:
         56:8c:41:3d:e5:b2:6b:b0:ee:ee:49:15:98:49:a6:ae:3e:1e:
         60:0f:c7:b7:ef:cb:ad:d9:1f:17:ab:fc:cf:35:9f:bb:d9:c5:
         ba:5d:26:96:16:91:f2:03:38:12:1c:c7:d7:b8:f5:3e:ff:83:
         e1:5a:cb:67:41:00:15:19:52:a5:f7:b4:19:33:9b:fa:a8:31:
         4c:16:8e:f1:4d:00:e6:21:15:2b:a1:3d:ab:a7:ed:84:37:a4:
         d9:70:a2:89:75:2c:85:73:19:2c:26:6e:d7:34:23:5e:ca:b2:
         b7:59:6c:c4:13:ff:b6:af:0c:ec:0e:39:56:5d:c5:19:d0:bc:
         8a:88:f7:fd:5b:fd:55:7b:d5:d9:75:a2:5a:e3:8b:94:e6:d0:
         44:3c:f7:07:e2:e8:17:7c:70:df:7b:82:19:fd:e4:b6:9d:fc:
         07:db:a7:e6:7d:6c:83:0d:33:d7:60:f3:b8:d7:c0:32:fa:54:
         26:4f:26:77:83:89:24:cc:52:ef:27:41:82:64:5d:7e:3c:fb:
         0b:c4:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----