Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/c5dde2cc5f11ac6dc2bcc3221f1fadaf373ab778.roa
File:                     c5dde2cc5f11ac6dc2bcc3221f1fadaf373ab778.roa (raw, json)
Hash identifier:          X6jblq0RXMjNyXvYttn6IeKnOxZFoBOu4vZ4orTqMYs=
Subject key identifier:   D7:8B:CD:4E:D1:9E:73:8F:17:A8:7A:12:8D:0C:C6:4C:31:0D:E6:82
Certificate issuer:       /CN=88090651a57205ced971272490d218922a3b3701
Certificate serial:       01FC09
Authority key identifier: 5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88090651a57205ced971272490d218922a3b3701.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/c5dde2cc5f11ac6dc2bcc3221f1fadaf373ab778.roa
Signing time:             Wed 05 Jul 2023 16:57:33 +0000
ROA not before:           Tue 04 Jul 2023 16:57:32 +0000
ROA not after:            Sat 05 Jul 2025 16:57:32 +0000
asID:                     272928
IP address blocks:        2803:4190::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130057 (0x1fc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88090651a57205ced971272490d218922a3b3701
        Validity
            Not Before: Jul  4 16:57:32 2023 GMT
            Not After : Jul  5 16:57:32 2025 GMT
        Subject: CN=c5dde2cc5f11ac6dc2bcc3221f1fadaf373ab778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:cc:89:cc:40:81:b6:79:5c:62:df:20:20:
                    19:a7:d9:e3:7a:8d:7e:cc:80:b8:f5:1c:40:4e:20:
                    a0:ee:57:c1:37:5b:96:1d:99:ca:24:2a:8b:fa:25:
                    b1:1a:ba:36:9f:2a:ce:fa:70:10:d1:49:62:39:4f:
                    8e:dd:aa:fa:95:84:5f:18:35:2b:f8:9b:21:77:9e:
                    ca:35:90:12:bf:4f:ca:39:82:9c:31:8f:34:63:3f:
                    29:98:49:56:96:4d:c0:6e:f9:85:cf:eb:39:f8:7c:
                    0c:24:b7:ea:84:36:e4:d5:3b:86:e1:fc:da:24:07:
                    1b:89:05:45:a1:0a:60:b2:29:d1:74:95:0a:39:6d:
                    48:6a:6d:90:dc:9c:42:a3:ba:3b:c6:56:39:39:e5:
                    fa:1e:39:14:65:a4:70:3f:10:a8:fe:fe:00:f7:c2:
                    c6:92:8e:97:43:0c:1f:5e:81:7d:90:56:db:db:c6:
                    6e:55:e9:98:a2:4a:bd:d9:b5:11:08:aa:3d:f5:09:
                    21:b8:44:b3:01:a8:f1:8f:8d:2c:13:71:86:23:ea:
                    88:02:8b:a9:c8:bf:56:3d:4b:38:0e:9e:07:4c:1d:
                    2f:a2:f2:16:ec:b9:50:5b:b5:7d:99:26:dc:d1:36:
                    24:a7:cc:5e:45:b1:2c:0c:bd:dd:70:af:dc:bc:53:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:CD:4E:D1:9E:73:8F:17:A8:7A:12:8D:0C:C6:4C:31:0D:E6:82
            X509v3 Authority Key Identifier:
                keyid:5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88090651a57205ced971272490d218922a3b3701.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/c5dde2cc5f11ac6dc2bcc3221f1fadaf373ab778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/88090651a57205ced971272490d218922a3b3701.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4190::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:2c:10:be:98:32:c6:15:4c:ad:af:5b:55:81:71:08:54:
         2f:22:46:7a:19:4a:c3:fb:31:59:7b:20:42:e6:64:64:a1:4d:
         0f:d6:43:ac:0e:a9:66:f5:76:31:33:f9:35:11:4c:e3:ef:f6:
         b7:6e:64:08:21:96:8b:c3:f1:f1:5e:e5:a5:21:c7:41:2c:44:
         03:81:74:96:26:82:93:38:94:e5:dc:d7:d7:91:b0:d6:67:11:
         21:84:50:34:dc:79:59:8b:ea:3f:d0:a2:1c:55:be:07:59:fe:
         f6:79:ce:cb:e8:08:45:53:db:0b:51:55:04:fc:4e:7d:32:40:
         d0:f9:53:b1:da:66:83:00:12:b7:3c:28:d3:69:a8:d3:67:fa:
         7f:64:12:11:5c:b3:4c:52:b7:7d:0f:88:44:c3:2f:f7:3d:d0:
         ac:b0:b5:0b:3c:9c:2c:c7:53:ca:a2:9a:76:2f:47:31:6f:6d:
         9c:fa:b7:f9:96:6e:8d:f0:c2:f7:3f:29:23:99:bf:17:09:80:
         60:b7:9c:e0:fe:21:52:30:83:ab:8b:ea:fd:e4:35:98:4c:8e:
         32:cf:7a:30:4a:55:d3:a7:c9:90:2d:c4:12:ed:81:16:20:6c:
         ef:c5:1f:17:d8:f5:14:76:76:9a:4d:f3:24:c2:82:e2:50:16:
         12:57:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----