Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/70a74be141c82f5893fa31ca57bdf78a3c8870f2.roa
File:                     70a74be141c82f5893fa31ca57bdf78a3c8870f2.roa (raw, json)
Hash identifier:          laB3vg5xNqM/A70jVGB/V2u000hLsapIaIg8w8mIPTE=
Subject key identifier:   5B:41:70:1F:E7:0A:34:35:D2:00:A4:2B:4D:C3:BB:49:71:F1:AE:89
Certificate issuer:       /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial:       0881A8
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/70a74be141c82f5893fa31ca57bdf78a3c8870f2.roa
Signing time:             Thu 08 Jun 2023 01:58:08 +0000
ROA not before:           Wed 07 Jun 2023 01:58:08 +0000
ROA not after:            Sun 08 Jun 2025 01:58:08 +0000
asID:                     271814
IP address blocks:        2803:8810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557480 (0x881a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Validity
            Not Before: Jun  7 01:58:08 2023 GMT
            Not After : Jun  8 01:58:08 2025 GMT
        Subject: CN=70a74be141c82f5893fa31ca57bdf78a3c8870f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:ad:1b:cf:3a:89:12:85:8d:5c:75:92:f6:
                    f3:09:0c:12:c3:91:c7:1e:0b:fa:09:91:e3:ef:33:
                    bd:e1:e4:4d:7a:99:87:e0:8f:ad:61:83:fb:73:7a:
                    b9:5e:7a:0d:c2:30:f4:df:20:7a:42:2d:48:1b:33:
                    03:d2:7d:38:ce:e8:02:3e:b8:18:04:9d:66:9c:2f:
                    21:c8:0f:3b:fb:de:4d:93:01:6d:e8:e4:80:2c:29:
                    5d:17:db:a7:44:be:07:a1:be:72:1f:69:c5:ce:9a:
                    6b:a6:c3:4e:35:36:98:58:0e:35:c0:dc:74:dd:bd:
                    f8:c8:16:0a:bb:9a:ce:cf:1d:30:c1:7b:ea:ed:22:
                    71:26:b7:b7:6a:2b:bb:fc:ee:cd:69:49:4f:80:cb:
                    f9:72:e8:89:61:8c:b1:8f:57:1e:c0:36:8d:f7:47:
                    7d:7b:46:84:3e:27:41:5b:89:fd:a1:5c:c5:f9:3b:
                    ae:f7:bf:19:ba:26:a4:cf:69:09:57:a6:90:a8:24:
                    9f:fd:c5:d9:af:49:ed:28:76:16:4d:21:5d:85:88:
                    26:9a:31:1c:b1:e2:aa:0b:f5:a9:3c:02:17:2a:3a:
                    67:ac:37:c4:f4:ac:2f:d4:a9:e8:7a:40:59:e4:5e:
                    51:56:94:53:5b:cf:bb:20:d1:52:f7:d2:aa:3d:59:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:41:70:1F:E7:0A:34:35:D2:00:A4:2B:4D:C3:BB:49:71:F1:AE:89
            X509v3 Authority Key Identifier:
                keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/70a74be141c82f5893fa31ca57bdf78a3c8870f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:87:69:6d:82:10:90:cf:0b:6d:3c:8b:09:57:e4:e9:f6:
         9a:13:f2:a7:4c:1e:cc:04:7c:66:41:cc:a6:4f:fc:c5:bf:1c:
         e3:96:58:32:80:0b:df:b3:db:b1:86:b1:80:3d:a0:39:84:91:
         31:c5:53:39:86:0f:41:65:70:44:b4:c6:4c:af:62:07:f3:4b:
         04:d0:1b:d8:8c:aa:b9:20:10:29:e7:0c:69:4e:39:0c:b1:f9:
         92:c9:22:fd:37:80:99:12:d9:5c:88:d6:11:5e:bf:2d:6d:47:
         34:89:62:c6:25:08:3d:6d:7d:4d:8f:8d:11:ec:bc:73:a4:1a:
         41:e1:5b:17:12:7b:cb:35:39:9a:2d:1d:f4:b3:68:1b:77:6a:
         8b:b3:ea:0c:f8:94:8d:8a:00:49:57:0c:75:03:9c:18:dd:ba:
         cb:8c:8c:4e:5f:41:e6:e0:e3:e6:cc:ef:f3:3a:cb:f1:f0:e6:
         fe:1f:f3:6d:7d:b7:fd:93:b2:b8:6e:82:89:b2:da:85:5d:60:
         8c:61:0b:2b:d0:25:41:7b:63:11:2d:c1:fd:0d:51:d6:dd:5b:
         c2:d2:22:a1:b3:91:e3:2b:5c:e0:ea:b5:9b:3e:b0:61:53:51:
         66:3d:9f:c0:de:0d:5f:c3:b4:0b:d7:bd:34:54:6d:57:4f:f2:
         51:5b:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----