Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/c7a233d1e5892a2b6545a4894305de76ff119814.roa
File:                     c7a233d1e5892a2b6545a4894305de76ff119814.roa (raw, json)
Hash identifier:          3UrWQ/5vOperJpOQhzzCEI3h7TD4ihLR8fW25utqc4U=
Subject key identifier:   77:13:C3:C2:B5:C8:C8:7F:9D:C6:A0:E1:8D:86:45:0A:AC:0D:CA:C5
Certificate issuer:       /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial:       26D6D8
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/c7a233d1e5892a2b6545a4894305de76ff119814.roa
Signing time:             Thu 28 Dec 2023 23:02:57 +0000
ROA not before:           Thu 28 Dec 2023 23:02:57 +0000
ROA not after:            Sun 28 Dec 2025 23:02:57 +0000
asID:                     265775
IP address blocks:        2803:c280::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2545368 (0x26d6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
        Validity
            Not Before: Dec 28 23:02:57 2023 GMT
            Not After : Dec 28 23:02:57 2025 GMT
        Subject: CN=c7a233d1e5892a2b6545a4894305de76ff119814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:14:0c:cf:03:8b:72:69:5f:45:00:00:bd:
                    5e:0d:fc:08:be:67:dc:0b:cb:ae:49:9f:9a:bc:a9:
                    d3:d4:d1:5a:60:7b:c7:8e:5c:d2:00:9c:e7:a7:18:
                    96:99:be:1f:b9:83:87:d9:00:ae:3c:fb:c2:e2:aa:
                    86:da:56:7d:54:a3:bc:3a:21:3d:31:09:f5:c8:39:
                    23:41:3a:2f:87:2d:6c:75:62:ed:f3:05:9d:08:f4:
                    7d:01:c2:f5:b5:02:72:65:b1:65:fe:8e:c7:c7:54:
                    9e:5d:c1:82:8f:61:20:9c:1b:b8:cf:7d:86:04:39:
                    99:55:16:11:f3:21:0a:23:92:cf:48:c3:61:46:47:
                    41:da:1a:72:20:06:5f:fb:ec:f4:bf:26:08:4e:2a:
                    2c:69:35:17:80:e9:57:c5:0a:ac:23:ec:54:8b:5a:
                    ec:d5:1d:b4:06:b2:df:7d:8e:0c:8d:76:63:a3:99:
                    21:6d:81:cb:c4:89:5e:42:32:a5:04:cc:db:5a:4e:
                    99:24:49:98:cc:2a:d1:3d:17:b8:60:ac:82:f8:68:
                    8c:e3:6e:61:a5:c7:97:4d:11:56:8a:e7:13:6a:25:
                    d2:28:78:e7:21:da:5f:95:0c:0f:c7:b2:e9:95:61:
                    ff:89:27:30:8f:7f:7f:d1:56:c9:8f:33:9e:1f:78:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:C3:C2:B5:C8:C8:7F:9D:C6:A0:E1:8D:86:45:0A:AC:0D:CA:C5
            X509v3 Authority Key Identifier:
                keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/c7a233d1e5892a2b6545a4894305de76ff119814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c280::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:76:67:e2:5a:8c:e6:02:4a:ab:69:3e:5b:5a:e1:5c:c1:
         6d:80:39:e6:09:fa:0c:01:d1:90:0a:24:f9:58:49:bf:6c:f0:
         7a:37:04:bc:48:f9:08:88:ea:0e:0b:91:cc:2a:29:49:4e:f5:
         e2:4d:e6:24:74:fc:eb:f6:2f:dd:46:5d:7d:7a:52:07:4a:f3:
         61:e2:5d:b1:c2:f7:66:57:62:15:21:d4:25:d4:02:29:52:87:
         ab:a3:7a:7d:c9:87:dd:f6:d4:b3:df:01:02:86:09:4a:ee:ad:
         3c:b9:ba:da:36:64:32:f8:6e:68:54:45:4f:47:f6:df:e0:9d:
         c5:b8:8f:42:39:fe:07:a6:df:d3:f2:dc:1c:f5:40:6d:6c:8d:
         68:ca:46:33:7e:ac:1a:d7:85:f4:8b:f4:7e:85:bc:3c:e3:76:
         6e:ec:73:fb:a8:69:b0:5f:95:eb:13:38:e4:05:51:34:ab:07:
         1a:59:4e:9f:6d:2f:16:41:c9:20:69:4f:62:7e:96:dd:37:32:
         69:83:34:be:ee:35:09:c4:13:03:cd:95:32:5a:e4:f2:1d:07:
         c4:08:81:ff:47:eb:9a:57:27:c7:f3:1f:8b:0c:e9:25:f4:cd:
         3b:9f:69:b9:dd:9b:de:3b:6c:cb:f7:2e:ea:88:fc:c6:f1:0e:
         19:dc:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----