Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/4e27e4f37e32b1fddf4b6e0279b6f28e505de608.roa
File:                     4e27e4f37e32b1fddf4b6e0279b6f28e505de608.roa (raw, json)
Hash identifier:          FbMJWtJSVoR1/fJA96t904i6jwRPt4+ET9phN9gnNvE=
Subject key identifier:   BC:09:E0:AA:D1:A7:7E:46:60:F5:E6:A7:13:E7:0C:DB:EE:5B:52:4B
Certificate issuer:       /CN=d573448457c811688599e168f723018473dc9d89
Certificate serial:       0DECC4
Authority key identifier: B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/4e27e4f37e32b1fddf4b6e0279b6f28e505de608.roa
Signing time:             Tue 20 Jun 2023 03:44:10 +0000
ROA not before:           Mon 19 Jun 2023 03:44:10 +0000
ROA not after:            Fri 20 Jun 2025 03:44:10 +0000
asID:                     64135
IP address blocks:        2803:9910::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912580 (0xdecc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d573448457c811688599e168f723018473dc9d89
        Validity
            Not Before: Jun 19 03:44:10 2023 GMT
            Not After : Jun 20 03:44:10 2025 GMT
        Subject: CN=4e27e4f37e32b1fddf4b6e0279b6f28e505de608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:91:b7:9a:15:25:98:ce:9a:8f:91:8c:cb:
                    61:94:a7:9f:18:41:d7:40:81:14:34:17:4d:38:23:
                    a1:fb:71:95:df:82:c8:f2:08:7b:cc:2b:78:3c:b0:
                    8b:fd:ff:24:2b:6e:56:86:c0:27:60:1a:70:6b:5c:
                    ae:80:49:39:31:01:d7:48:2a:ca:14:82:76:42:fc:
                    21:de:45:ff:38:34:06:07:c6:3a:93:95:45:86:5c:
                    28:35:3c:92:4f:ea:d3:bd:64:7d:2b:09:ba:30:bb:
                    23:2d:15:b2:16:dc:5b:8d:98:30:09:26:a2:b5:a3:
                    06:83:23:d1:b6:df:2e:b4:8c:a7:56:66:d5:98:da:
                    49:3a:ee:d8:72:84:14:3b:48:18:44:5b:86:d8:43:
                    13:78:cc:f7:fe:85:4a:e4:0f:11:59:39:35:33:c2:
                    35:b2:1c:37:c4:da:fb:b5:c8:39:7a:ff:b7:5b:06:
                    e9:1e:b6:1d:9f:64:e2:18:5b:bc:ea:73:fd:ca:ee:
                    e2:e2:22:3b:a1:1a:0a:2a:3d:68:03:05:da:06:ee:
                    8d:96:97:cc:9d:7c:7f:27:5c:06:b5:93:bf:28:33:
                    e6:d7:a0:d7:a6:4f:3e:36:32:b3:05:3b:0f:9c:90:
                    c6:6b:84:c8:64:08:66:4a:5d:fd:ba:11:f6:b3:f8:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:E0:AA:D1:A7:7E:46:60:F5:E6:A7:13:E7:0C:DB:EE:5B:52:4B
            X509v3 Authority Key Identifier:
                keyid:B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/4e27e4f37e32b1fddf4b6e0279b6f28e505de608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/d573448457c811688599e168f723018473dc9d89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:2f:c7:e8:0f:56:e4:a8:15:60:1b:d3:fc:52:20:3f:bc:
         20:68:43:a1:8e:42:6f:d8:b1:70:0a:72:9a:b6:27:50:a3:2c:
         4d:75:ed:00:f4:a6:40:e1:3b:9d:a6:5d:b2:ff:2d:6b:2c:23:
         f8:d7:d9:20:31:47:97:dd:55:51:a7:e2:a8:77:34:35:c0:9c:
         b3:2b:13:53:80:fe:b6:6a:83:7c:e9:0c:ed:f1:92:93:f0:e3:
         c4:cd:55:73:7d:c3:e7:8a:59:dc:30:f4:09:1d:30:c4:b1:e0:
         9e:15:99:0b:cf:8c:50:56:1d:dc:96:7c:21:74:a0:ac:88:cc:
         d7:19:be:03:95:50:8c:08:50:8b:73:5c:0f:27:ff:d2:60:be:
         34:25:8c:35:0e:a8:cf:63:4d:65:98:b5:44:ff:48:3d:89:1f:
         11:bd:17:a9:9c:20:bc:30:87:3e:90:a1:1f:df:61:1b:b6:64:
         19:9f:30:e3:94:43:b8:5f:f9:58:7a:08:dd:4b:8f:65:cd:56:
         1a:1b:e8:c8:f2:5e:82:ff:d2:62:ee:f4:87:d0:c4:97:d0:f0:
         5f:01:d2:5f:25:67:7f:77:94:a1:be:90:88:78:3a:82:cf:95:
         23:f8:85:75:2c:72:78:da:a6:e8:d7:79:74:06:36:02:b3:fc:
         ff:ba:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----