Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/5f5785ebfbb156f62e6bb141a39f0baf2bc543eb.roa
File:                     5f5785ebfbb156f62e6bb141a39f0baf2bc543eb.roa (raw, json)
Hash identifier:          cuEI6cAjX9hBjzn6zYjZnbxr1J0KZkjmv3xwfwnxQEE=
Subject key identifier:   7C:05:68:4A:E7:BA:FF:5A:8D:03:F9:93:F0:95:00:E3:3A:23:79:4F
Certificate issuer:       /CN=addc265893644938b54a21e410f7b22c5aeab890
Certificate serial:       0B161E
Authority key identifier: 06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/5f5785ebfbb156f62e6bb141a39f0baf2bc543eb.roa
Signing time:             Tue 03 Oct 2023 01:41:41 +0000
ROA not before:           Mon 02 Oct 2023 01:41:41 +0000
ROA not after:            Fri 03 Oct 2025 02:41:41 +0000
asID:                     266884
IP address blocks:        2803:6a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726558 (0xb161e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addc265893644938b54a21e410f7b22c5aeab890
        Validity
            Not Before: Oct  2 01:41:41 2023 GMT
            Not After : Oct  3 02:41:41 2025 GMT
        Subject: CN=5f5785ebfbb156f62e6bb141a39f0baf2bc543eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:27:da:aa:54:f6:25:56:df:99:66:af:d6:
                    b2:20:da:f7:24:c0:e8:bf:bc:9a:a2:3f:7c:e0:c4:
                    8b:57:28:6b:50:2a:d9:20:b8:c2:1b:3a:40:18:38:
                    3e:c5:30:8b:3a:83:32:a8:90:42:aa:38:29:d3:24:
                    bd:d6:e0:ee:eb:66:88:5f:62:14:13:81:25:c6:2a:
                    32:89:6a:b5:2a:b1:d2:c3:00:00:11:66:3d:18:45:
                    60:2e:05:84:c1:49:1f:31:f8:38:ba:70:e8:86:e6:
                    85:a5:86:a0:b5:a6:7a:66:3d:01:6d:18:84:3c:54:
                    fd:ee:a7:32:62:57:2c:93:74:7d:0d:9a:f1:9c:00:
                    32:b5:bc:1d:f1:36:fd:98:60:02:67:c9:50:d7:c7:
                    49:5d:ee:a7:e0:ec:cf:96:85:7a:6e:e0:76:d0:1e:
                    f5:60:e8:e7:04:0a:14:aa:77:e0:6a:65:07:bc:d3:
                    56:e0:24:85:c5:07:8e:a3:fe:d6:fb:2a:4c:ac:e9:
                    b2:48:9c:ac:37:de:68:db:71:4c:49:1a:6c:b1:89:
                    24:24:03:9d:42:a0:e3:6f:f6:26:f6:a5:aa:81:19:
                    0f:0c:4a:89:9b:82:73:35:a9:e3:fb:b1:a0:45:06:
                    01:0b:ab:8c:c3:23:54:e9:b3:74:ac:5e:c8:a8:2c:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:05:68:4A:E7:BA:FF:5A:8D:03:F9:93:F0:95:00:E3:3A:23:79:4F
            X509v3 Authority Key Identifier:
                keyid:06:3D:B0:64:CC:63:CE:97:AF:B5:F0:3B:B6:DF:C9:FE:95:E2:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/addc265893644938b54a21e410f7b22c5aeab890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/5f5785ebfbb156f62e6bb141a39f0baf2bc543eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e100e7fa-4f97-4f7e-966d-9cf60cf89b38/addc265893644938b54a21e410f7b22c5aeab890.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:15:48:b7:99:6f:ed:cf:b9:a9:22:40:97:7c:72:60:f9:03:
         97:14:f3:e7:11:81:1c:93:e0:24:19:59:c4:cd:c8:ce:1f:5e:
         c3:01:f5:63:34:24:77:df:30:24:dc:6d:10:b1:c3:f3:3e:1f:
         55:ec:36:b1:bf:ad:66:f9:f3:43:f2:84:c6:6d:14:d6:89:dd:
         11:32:4d:6d:62:ec:9e:70:bd:c6:ea:c2:6c:0e:21:35:d7:32:
         4b:53:96:35:f9:9b:00:fd:e2:0c:56:42:65:3b:34:d1:33:dc:
         45:ca:f3:d2:44:be:4f:18:7e:78:83:41:86:23:3f:17:fe:58:
         64:04:c8:4d:f5:ec:ba:96:ef:78:98:5b:27:c9:40:9f:3f:46:
         f7:bb:d5:22:2f:1c:36:c4:7c:77:28:cd:cf:94:42:5f:75:fe:
         ca:d4:6f:4f:35:71:7a:d1:cb:64:fd:c7:0d:1b:8a:cd:af:46:
         95:6f:8c:40:ba:8a:bd:b0:1b:d9:08:a0:ea:25:e4:26:c2:cd:
         87:9a:35:84:5a:9d:be:d0:34:b1:0f:88:ca:70:11:ef:f6:b2:
         95:a5:8c:f1:52:11:65:a3:d7:95:cd:48:c8:b3:f4:a1:70:ab:
         f7:33:5b:29:48:fc:3b:c0:9c:00:36:17:a4:a8:a2:63:1d:96:
         f3:13:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----