Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/a21e0576d661c5dac5ade0ec7ab169e0f78c83b0.roa
File:                     a21e0576d661c5dac5ade0ec7ab169e0f78c83b0.roa (raw, json)
Hash identifier:          lFggxnLMqUT3K08awKtRY/bTE6EY8yelsPnIWrTNrNA=
Subject key identifier:   5A:ED:9B:87:A0:60:D2:22:A0:49:B9:FC:8F:4D:E2:29:DF:87:65:0B
Certificate issuer:       /CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
Certificate serial:       1C6EB9
Authority key identifier: 6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/a21e0576d661c5dac5ade0ec7ab169e0f78c83b0.roa
Signing time:             Fri 28 Jul 2023 08:30:01 +0000
ROA not before:           Thu 27 Jul 2023 08:30:01 +0000
ROA not after:            Sat 26 Jul 2025 08:30:01 +0000
asID:                     266703
IP address blocks:        2803:ad20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863353 (0x1c6eb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
        Validity
            Not Before: Jul 27 08:30:01 2023 GMT
            Not After : Jul 26 08:30:01 2025 GMT
        Subject: CN=a21e0576d661c5dac5ade0ec7ab169e0f78c83b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:28:9b:6e:56:35:e1:33:68:1c:aa:f9:68:
                    c1:97:f1:86:64:79:dd:47:78:47:ed:0e:aa:70:00:
                    5d:2c:e6:00:89:a4:75:31:c0:c5:61:c5:ea:6a:95:
                    50:80:82:74:6c:23:9d:dc:9f:02:4c:fa:9e:57:33:
                    c0:b4:41:aa:bc:cf:c2:0b:c0:d7:eb:4e:1d:fa:f0:
                    31:b2:79:1c:0f:f2:9c:50:c9:8e:0e:9d:8b:6a:03:
                    46:85:3d:b3:77:db:2d:19:6e:1e:b6:2e:50:34:e4:
                    ec:e6:b4:34:bc:12:cc:da:1a:44:b7:21:02:e6:cd:
                    5d:ea:01:1d:fa:8f:b0:ae:c0:c2:e1:80:25:80:46:
                    b2:7b:a5:80:bd:7e:ee:87:d6:79:83:77:07:c3:a8:
                    a8:d6:9f:bc:62:7f:cd:fc:05:4e:6e:a7:1c:d6:c6:
                    d7:16:fe:a4:0b:f4:80:ed:9f:c8:e4:cb:aa:2a:a5:
                    5d:a4:37:df:55:b4:d5:0f:31:61:0d:99:27:93:4d:
                    54:c7:ff:b0:61:c4:b3:6f:b6:f9:1d:9f:01:0e:64:
                    c6:b5:30:77:2d:88:bd:9b:d3:e3:61:5c:d6:b3:b9:
                    57:91:2d:7e:27:0c:00:57:b9:77:a6:ee:fe:52:5f:
                    06:e2:be:f9:47:89:0d:9e:c2:ed:09:16:e3:d8:cd:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:ED:9B:87:A0:60:D2:22:A0:49:B9:FC:8F:4D:E2:29:DF:87:65:0B
            X509v3 Authority Key Identifier:
                keyid:6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/a21e0576d661c5dac5ade0ec7ab169e0f78c83b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:54:c3:97:7a:b2:47:68:c3:0d:d8:f7:11:ce:c3:a7:9c:
         7a:38:b3:3e:9f:af:79:c1:7b:f1:d1:11:af:05:a9:e0:34:4a:
         4f:24:26:52:e5:25:bf:56:00:89:f5:ca:01:53:ba:61:26:f1:
         6f:56:39:a2:9d:73:f1:37:02:41:12:e1:49:f2:92:2a:3d:cb:
         bd:a5:31:81:b7:ea:d9:ca:d4:16:98:91:a9:5f:ad:fc:02:5f:
         90:5b:26:31:9f:b9:32:c6:2d:70:0e:92:e0:e9:b2:ec:5d:57:
         3b:a0:17:06:bd:bd:a9:1e:c8:a5:0f:81:d1:98:cd:43:bc:62:
         7c:67:8d:82:b3:79:85:7a:91:5b:e7:23:17:e2:d4:43:d4:d8:
         5c:06:64:ef:c9:a7:f7:ef:dc:21:39:9d:8a:c8:27:71:83:51:
         ba:2f:6b:ff:b3:91:71:c0:ad:60:88:c2:b1:5d:72:d7:e6:59:
         65:c5:10:20:ab:55:e1:cc:fa:36:60:0f:88:41:5b:ce:08:e1:
         47:30:ad:b9:1a:e7:16:a8:14:dc:77:74:07:64:aa:b8:9e:41:
         b8:a9:15:df:20:36:56:51:9a:fe:8a:d9:9c:f6:96:23:ef:ab:
         b4:1d:8d:a4:6f:75:d7:a8:2d:15:46:7f:ef:28:31:2c:04:4b:
         79:01:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----