Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/62ec3a598e5d66d01406b6db3b5135efc42706ab.roa
File:                     62ec3a598e5d66d01406b6db3b5135efc42706ab.roa (raw, json)
Hash identifier:          opjTah6w3veCMwIG+V3TFez/0jFUPXsTDULlzC6a3Hs=
Subject key identifier:   8A:38:25:B4:36:46:5A:5D:B8:ED:5A:1F:F3:C8:92:0A:24:5B:EB:C6
Certificate issuer:       /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Certificate serial:       16D777
Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/62ec3a598e5d66d01406b6db3b5135efc42706ab.roa
Signing time:             Tue 05 Sep 2023 11:05:30 +0000
ROA not before:           Mon 04 Sep 2023 11:05:30 +0000
ROA not after:            Fri 05 Sep 2025 11:05:30 +0000
asID:                     270076
IP address blocks:        2803:b3e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496951 (0x16d777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
        Validity
            Not Before: Sep  4 11:05:30 2023 GMT
            Not After : Sep  5 11:05:30 2025 GMT
        Subject: CN=62ec3a598e5d66d01406b6db3b5135efc42706ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:78:b7:8d:e3:a4:8d:04:85:50:9f:9b:19:
                    67:93:33:0d:cd:b9:d3:16:c3:2a:c8:c9:3a:53:f2:
                    3f:3d:be:69:bf:19:11:d3:6a:dd:e1:c0:c8:32:de:
                    1c:44:43:2c:32:ad:9d:b6:8a:4e:e8:4c:9f:58:c9:
                    8f:00:61:07:c6:fa:5f:c0:39:15:fb:11:ca:57:d6:
                    f7:eb:5c:c5:b1:46:c8:0c:a9:ef:17:75:48:3d:90:
                    a7:20:8c:19:0e:28:41:47:dc:36:7b:dd:1b:75:1d:
                    a2:45:5f:6c:2f:b7:c3:b4:80:5c:6b:a4:04:20:bd:
                    c6:30:09:50:d4:88:0d:ec:e2:9d:fa:3e:8c:12:9a:
                    ac:54:e2:4d:04:a6:63:31:8e:f4:36:99:17:1e:5f:
                    bc:a4:27:48:bb:a0:a0:dd:a9:49:7c:b8:74:b3:35:
                    9b:05:ff:a3:97:03:e6:f1:93:01:b2:33:fc:ed:6f:
                    9d:49:06:a8:90:f8:e5:7e:2e:27:82:c8:66:60:b2:
                    88:54:51:c4:9e:17:94:d4:19:cf:2f:ba:d8:54:7b:
                    01:c3:71:87:b9:ad:8a:ce:13:93:cf:cf:94:8f:11:
                    5a:ee:3e:77:8a:b7:8e:f3:fe:00:59:47:cd:8b:8c:
                    b2:e3:60:b4:ff:96:a1:92:12:dc:f7:29:ce:fd:f7:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:38:25:B4:36:46:5A:5D:B8:ED:5A:1F:F3:C8:92:0A:24:5B:EB:C6
            X509v3 Authority Key Identifier:
                keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/62ec3a598e5d66d01406b6db3b5135efc42706ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:4b:5d:dd:fa:bb:ab:7c:c3:f0:04:12:69:0d:32:a9:5a:
         b1:67:07:60:73:f4:ba:4b:b8:b0:f5:21:e0:6e:29:12:be:19:
         9b:c0:31:c1:77:1b:de:55:0f:2f:7b:7b:56:83:28:50:4f:56:
         9b:bc:c9:9f:eb:42:5b:49:68:62:41:75:dd:c1:41:94:c0:a8:
         e5:82:ba:0b:f1:66:1c:39:af:d2:5f:06:e9:74:97:48:61:f5:
         67:47:62:c3:17:5f:4b:0d:19:b3:1f:8b:b4:a7:d5:0e:57:59:
         a9:a0:60:00:23:c8:c7:ae:22:49:64:71:2f:ae:30:91:7c:f5:
         b0:a7:9e:c6:6a:34:3e:71:ad:f5:83:ae:31:79:3e:01:2b:13:
         f5:af:84:a4:ca:b9:43:22:8d:bf:74:21:b2:cf:69:3f:3f:5a:
         91:a1:89:ad:6b:5c:1b:80:80:de:ae:dc:c3:ac:e3:8f:91:3b:
         62:be:ec:98:19:fd:78:cd:7b:10:32:4a:bf:d5:b0:e6:bb:cd:
         4c:c8:bc:23:9f:55:46:52:d5:11:d4:13:e4:e2:99:0e:87:ef:
         ac:1b:f5:ad:05:73:06:31:17:23:28:72:a6:b0:04:fa:e3:54:
         51:63:07:5c:2d:ed:c0:9e:90:2d:8c:41:26:d0:d0:a3:56:54:
         a1:ba:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----