Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5aa662cd98d5768b3473def65469fbba1e3a72e9.roa
File:                     5aa662cd98d5768b3473def65469fbba1e3a72e9.roa (raw, json)
Hash identifier:          x1GK291DeFPfU8724MfpAxCinPowtpnqvnqc1ZgVQDQ=
Subject key identifier:   AE:25:58:3F:CE:54:35:2C:D3:A5:CD:90:5A:F8:21:29:0F:C6:36:FB
Certificate issuer:       /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial:       216278
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5aa662cd98d5768b3473def65469fbba1e3a72e9.roa
Signing time:             Mon 10 Jul 2023 18:07:06 +0000
ROA not before:           Sun 09 Jul 2023 18:07:06 +0000
ROA not after:            Thu 10 Jul 2025 18:07:06 +0000
asID:                     64339
IP address blocks:        2803:2640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187896 (0x216278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
        Validity
            Not Before: Jul  9 18:07:06 2023 GMT
            Not After : Jul 10 18:07:06 2025 GMT
        Subject: CN=5aa662cd98d5768b3473def65469fbba1e3a72e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:18:94:fe:9f:ce:2d:d9:2f:d9:ce:ed:39:
                    bc:b2:08:f3:6d:30:e0:77:a8:d6:29:ae:92:fb:55:
                    cb:ca:af:4f:fb:49:d7:93:79:99:6c:8a:9f:12:d0:
                    56:e4:1f:fb:a6:69:b4:63:2d:23:53:97:af:64:36:
                    61:d2:fd:1f:28:09:82:e0:6e:0f:34:94:d2:61:06:
                    61:ec:67:b1:09:96:8c:c7:c4:5c:dc:c5:e3:d3:e3:
                    53:c9:69:cc:41:8a:21:25:ee:38:0a:b1:f9:7b:9c:
                    39:2b:f6:6d:a2:98:7f:6b:ad:e9:09:17:c7:30:58:
                    df:fb:3a:17:8d:7e:10:0e:00:5f:ac:69:d2:cf:b0:
                    6d:d1:d3:b9:a9:88:ed:ae:a9:66:18:bf:96:09:0c:
                    b7:25:55:79:99:3c:b0:bc:ec:20:e5:c0:23:ba:4a:
                    9d:21:3d:f7:ac:0e:7a:98:f3:21:33:ae:0d:de:13:
                    1a:c3:1c:69:24:e7:02:03:9e:01:73:ff:2e:76:33:
                    a6:94:ff:12:9c:03:50:17:c9:9c:78:b0:21:d6:4e:
                    1d:c4:e2:12:b5:9c:cd:eb:e0:d3:7f:13:ec:d4:10:
                    a8:ad:51:24:07:30:e2:4b:c4:fe:a6:4d:ae:10:87:
                    e5:d9:c5:1b:fa:36:6b:52:c5:a6:18:5a:88:45:7d:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:25:58:3F:CE:54:35:2C:D3:A5:CD:90:5A:F8:21:29:0F:C6:36:FB
            X509v3 Authority Key Identifier:
                keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5aa662cd98d5768b3473def65469fbba1e3a72e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:92:85:c8:68:fb:79:3a:b6:59:c3:dc:6d:27:8b:f9:be:0b:
         92:a1:14:a7:94:50:18:13:3e:9e:7c:53:71:5e:85:a8:20:8c:
         ae:5e:89:e4:f2:49:49:f8:2e:e5:89:66:4a:7a:dd:c9:f2:f4:
         b1:5b:3d:36:23:a0:86:28:d8:28:e6:04:1c:3e:7d:a1:4c:a8:
         67:db:b2:31:ff:2f:91:8e:13:4b:3e:f1:60:68:a8:68:ef:ee:
         2f:a0:ad:a8:77:20:ad:cf:79:53:8f:98:48:d7:31:b0:f4:8f:
         18:9e:61:89:b6:0d:12:63:38:04:6b:45:d5:90:f0:c3:2b:20:
         f6:5a:20:a6:b4:b8:e6:ef:fd:8f:f4:7b:10:b4:be:db:c7:70:
         70:ee:52:6c:86:f1:1c:24:36:4f:95:9d:d9:5f:f6:28:2f:20:
         da:17:66:a2:72:a0:75:f4:11:f0:13:85:1e:88:d4:05:5f:e1:
         8e:ca:24:70:5b:d8:17:2b:c8:9e:3e:b7:d0:1b:7a:c0:b4:72:
         5d:76:fb:a3:b6:0c:46:24:5f:7f:f8:8b:af:84:fb:bf:8a:ff:
         23:b7:ce:ae:ab:c4:51:7d:57:57:0f:6f:aa:87:14:48:64:c0:
         da:95:19:d6:30:24:19:ea:f0:78:16:94:6d:80:86:f4:61:40:
         f1:46:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----