Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/9d0d788f3691eca0e6606e64780892ee3bf8f84f.roa
File:                     9d0d788f3691eca0e6606e64780892ee3bf8f84f.roa (raw, json)
Hash identifier:          ya6JU4I+/WRHHo/TwoKWD8I7vTDRKgVytalwanq5rPc=
Subject key identifier:   E4:21:B3:AD:53:06:58:4B:23:C6:7C:59:4F:EB:13:FA:8C:8C:39:97
Certificate issuer:       /CN=4765b8b9f74b776a4e530fc87f986c651911f727
Certificate serial:       188B84
Authority key identifier: F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/9d0d788f3691eca0e6606e64780892ee3bf8f84f.roa
Signing time:             Wed 31 May 2023 08:30:03 +0000
ROA not before:           Tue 30 May 2023 08:30:03 +0000
ROA not after:            Thu 29 May 2025 08:30:03 +0000
asID:                     264754
IP address blocks:        2803:3f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608580 (0x188b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765b8b9f74b776a4e530fc87f986c651911f727
        Validity
            Not Before: May 30 08:30:03 2023 GMT
            Not After : May 29 08:30:03 2025 GMT
        Subject: CN=9d0d788f3691eca0e6606e64780892ee3bf8f84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:af:45:a7:77:f5:3a:b4:08:a1:6f:47:de:
                    28:bd:a4:10:6c:58:b0:03:a5:d0:49:77:bf:28:29:
                    60:cb:2e:fc:f4:8c:3f:cc:48:63:e7:c3:6a:ad:ca:
                    1b:39:1d:b6:6d:93:ec:21:93:80:07:a6:9b:09:8d:
                    d1:29:5e:07:84:85:a6:ec:be:5f:c3:6c:1c:66:f0:
                    3a:99:4f:4d:8a:c1:25:e1:19:f9:4e:fd:c0:a1:75:
                    7b:60:d6:26:13:ce:4b:ad:08:da:c3:8b:98:6e:b6:
                    f8:bd:aa:83:92:38:c6:87:b7:bc:87:00:cd:10:57:
                    cb:cf:20:76:9b:3a:4b:09:22:13:45:6c:23:b3:94:
                    ba:35:cf:13:ef:13:e8:d1:bf:3a:85:da:66:c8:9c:
                    88:5b:f4:68:10:ca:3d:4b:1f:83:5c:13:d0:06:4b:
                    82:99:73:64:a4:85:79:61:77:0b:7f:4d:16:41:71:
                    5a:a9:62:d3:09:6b:5a:49:db:c2:30:2d:d0:2f:14:
                    68:63:02:91:ca:7a:19:ac:1a:96:b7:ce:3c:56:08:
                    a2:ce:27:1a:68:2d:5d:91:80:cb:e0:64:42:49:94:
                    70:76:31:8e:c1:38:a2:87:8b:1a:33:f6:f3:83:86:
                    1a:f0:96:5c:a8:1e:b4:30:91:fe:e1:a6:a4:7b:02:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:21:B3:AD:53:06:58:4B:23:C6:7C:59:4F:EB:13:FA:8C:8C:39:97
            X509v3 Authority Key Identifier:
                keyid:F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/9d0d788f3691eca0e6606e64780892ee3bf8f84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/4765b8b9f74b776a4e530fc87f986c651911f727.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:13:80:ad:db:0a:e6:12:d0:5b:ad:ea:66:d5:8f:13:f5:54:
         81:01:1d:95:5e:c4:15:33:c2:61:f3:7d:97:eb:4c:e3:a4:8e:
         bf:40:56:e6:c6:18:6d:f7:e4:83:8e:32:e7:1e:ca:eb:43:d1:
         b7:56:87:02:92:f3:14:7e:e0:4d:f8:89:99:08:6d:a2:be:20:
         73:0f:a5:3d:ab:7e:0d:92:08:5f:c6:37:33:59:9d:b7:56:9f:
         93:80:58:cd:e3:36:b4:df:05:8c:68:e0:a7:28:b9:b1:b7:0a:
         c6:44:bc:a1:d1:16:5d:cf:7f:47:2b:38:51:30:99:63:3f:09:
         f6:3a:6a:52:f0:ef:5b:a7:db:00:f0:28:16:b8:af:4a:04:e4:
         1b:ec:41:3a:d7:c4:68:94:6a:6c:86:b2:00:6b:47:0c:9c:7a:
         9b:13:5c:fb:34:5d:10:16:26:3d:65:ab:5a:cd:bb:fd:f7:85:
         e7:58:7a:2b:03:98:3f:8a:c6:fd:85:c9:3b:13:fc:50:69:5e:
         f2:01:d7:c6:ba:fb:ea:f6:0a:b1:59:c4:a2:67:9b:dd:a7:c3:
         08:ca:29:94:c5:0a:48:60:a8:74:58:42:e0:67:92:59:ef:b2:
         ae:e2:4f:ad:eb:5d:52:a8:77:38:89:b5:da:00:d5:aa:3c:1e:
         02:18:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----