Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6d556bc7e62f456ebdb7acb6e268e4410ecd3129.roa
File:                     6d556bc7e62f456ebdb7acb6e268e4410ecd3129.roa (raw, json)
Hash identifier:          HsfnA4AROfCGXeKuQABRBUytOrEtY8ADj+jb04O9/tU=
Subject key identifier:   62:E1:2E:7C:3A:5C:8B:FB:9F:C1:78:1C:E7:54:C5:08:94:B6:0C:D1
Certificate issuer:       /CN=d573448457c811688599e168f723018473dc9d89
Certificate serial:       0CB4BB
Authority key identifier: B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6d556bc7e62f456ebdb7acb6e268e4410ecd3129.roa
Signing time:             Mon 08 May 2023 03:09:54 +0000
ROA not before:           Sun 07 May 2023 03:09:54 +0000
ROA not after:            Thu 08 May 2025 03:09:54 +0000
asID:                     64135
IP address blocks:        2803:9910::/33 maxlen: 48
                          2803:9910:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832699 (0xcb4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d573448457c811688599e168f723018473dc9d89
        Validity
            Not Before: May  7 03:09:54 2023 GMT
            Not After : May  8 03:09:54 2025 GMT
        Subject: CN=6d556bc7e62f456ebdb7acb6e268e4410ecd3129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:c7:fe:d3:43:18:c4:39:c9:93:57:da:19:
                    9d:16:a3:64:2b:46:21:1f:a0:20:5e:53:e7:9f:0c:
                    ca:f9:4f:e1:a3:0e:35:0a:26:41:37:70:13:b0:90:
                    40:87:4d:1b:3f:54:69:cd:6c:ce:63:71:2a:95:61:
                    08:1e:fb:fe:85:0c:3a:5e:f5:e2:08:6c:ae:30:15:
                    bf:62:43:cc:b5:2b:df:30:84:d5:df:6e:2d:ca:7f:
                    14:dc:0d:e6:60:8f:85:a9:99:1c:84:4b:97:7e:39:
                    a3:de:98:3d:67:ae:14:6b:28:89:ae:52:b1:b7:78:
                    b2:0e:8e:98:1f:2c:50:bf:ea:79:76:1c:34:85:d5:
                    43:8a:0b:81:83:81:c3:bb:21:df:c0:ea:0f:07:e1:
                    e9:9b:bf:80:1e:0d:55:e6:c2:f0:68:7d:a6:5c:85:
                    b7:25:fd:5f:02:15:a1:c3:35:31:10:b3:b5:0f:9a:
                    7f:01:07:72:89:45:06:21:b1:96:b5:77:12:08:38:
                    50:57:5d:36:3f:74:46:66:c3:f1:7e:c7:40:64:cd:
                    5b:5a:54:d2:60:da:1c:eb:6e:9c:21:a3:20:62:c0:
                    a0:7a:49:2a:8a:16:c2:bc:e8:f9:c4:6d:15:4e:79:
                    38:ba:7b:78:ab:9f:9f:6b:ac:ca:43:bf:a4:d9:24:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:2E:7C:3A:5C:8B:FB:9F:C1:78:1C:E7:54:C5:08:94:B6:0C:D1
            X509v3 Authority Key Identifier:
                keyid:B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6d556bc7e62f456ebdb7acb6e268e4410ecd3129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/d573448457c811688599e168f723018473dc9d89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::-2803:9910:bfff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:18:17:80:67:69:c8:f0:6a:e8:dd:b2:1d:b5:6b:60:ee:
         0a:87:42:d5:63:c0:96:58:8a:df:7c:54:4f:a9:5a:14:88:b8:
         86:58:a8:48:ff:6e:bd:fd:24:db:9a:8d:8e:90:70:26:ac:11:
         b7:66:0d:f3:53:cd:bd:0d:a8:22:fb:7d:c7:ad:e1:79:9c:9f:
         bc:b6:1f:b2:14:3d:8b:fb:96:a2:c4:f7:0c:81:61:f0:a6:ac:
         9f:3f:d8:fe:7c:3b:82:cc:8f:19:58:47:af:a4:c1:ae:7d:7e:
         6b:9f:14:7e:71:a8:9c:d1:9e:2c:de:69:8f:9c:b5:32:f6:c6:
         38:59:1d:c2:2a:e5:01:65:e9:84:2b:72:7a:12:6e:84:3e:01:
         09:a8:fa:66:b4:eb:4b:e0:14:aa:a2:4b:37:d7:06:8a:6f:f7:
         1e:fa:42:26:eb:8d:40:aa:f2:1e:37:bd:ac:55:e8:b5:a2:8c:
         e5:b2:c5:80:2a:40:55:42:68:c9:0f:d2:23:fa:0f:b0:fb:94:
         77:95:bb:21:0b:1c:e4:2b:c4:2c:b0:06:38:16:9d:ee:e3:c4:
         5d:58:14:43:9e:15:65:9a:af:61:97:0b:64:d8:c0:e6:f5:2a:
         ed:ce:41:c9:c0:cb:d6:50:cd:b0:7a:11:a1:69:6b:13:1b:8d:
         4d:0f:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----