Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3d8363d71aba7c64a6f0fbc89f5aab9ed1040a8a.roa
File:                     3d8363d71aba7c64a6f0fbc89f5aab9ed1040a8a.roa (raw, json)
Hash identifier:          Wn+Ij+qVpz/a1ab7aJ+L4m6FxB5OV4R3X9M3cFRzGIs=
Subject key identifier:   D7:26:96:BC:49:A3:99:DA:2C:C7:48:A3:F9:55:3D:5D:D1:6F:1A:C3
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       1F8534
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3d8363d71aba7c64a6f0fbc89f5aab9ed1040a8a.roa
Signing time:             Fri 10 Feb 2023 18:49:31 +0000
ROA not before:           Thu 09 Feb 2023 18:49:24 +0000
ROA not after:            Mon 10 Feb 2025 18:49:24 +0000
asID:                     28075
IP address blocks:        2803:6604:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065716 (0x1f8534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Feb  9 18:49:24 2023 GMT
            Not After : Feb 10 18:49:24 2025 GMT
        Subject: CN=3d8363d71aba7c64a6f0fbc89f5aab9ed1040a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:f5:a2:c2:15:45:6c:ad:89:39:d8:3f:1d:
                    ec:37:01:28:ec:bd:d5:d4:22:66:f0:25:44:8f:4a:
                    5d:3e:57:7c:73:90:c9:2a:e9:0c:09:27:76:34:e5:
                    56:6a:77:e5:70:eb:3f:a4:77:b0:e4:3e:21:2c:ce:
                    8f:c2:a6:23:fe:0a:3f:94:b8:8c:72:9e:c5:23:fe:
                    6e:2b:d3:c7:c3:fc:53:9a:f7:e1:d9:38:ae:9a:55:
                    c4:7f:0c:a6:c3:a4:07:e3:96:f0:2f:0a:f2:ec:8b:
                    f1:af:50:95:a5:55:70:49:7e:f1:31:7c:bf:8d:23:
                    64:c2:93:6c:b0:06:9f:ea:9d:f5:96:eb:e2:97:66:
                    56:5a:6b:46:ef:ca:2b:5a:b8:ed:ad:ef:00:a1:c8:
                    46:0c:c3:46:5e:33:15:a3:88:2e:9b:4f:82:05:28:
                    94:43:32:c0:a2:11:e5:96:24:1a:1c:8a:c7:b2:c9:
                    a3:1c:d4:8f:7f:c7:3b:8b:f1:7d:39:8a:e3:44:f4:
                    5c:2d:ed:3f:ce:ef:23:6a:cb:cb:30:20:86:3b:32:
                    8c:5f:b5:f5:4a:30:97:47:ec:59:90:ae:23:db:a2:
                    4c:ec:c3:a1:2f:15:5d:e7:6d:00:0a:b7:2e:78:0d:
                    49:16:14:d9:89:62:12:0a:a7:93:24:37:5a:0c:f1:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:96:BC:49:A3:99:DA:2C:C7:48:A3:F9:55:3D:5D:D1:6F:1A:C3
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3d8363d71aba7c64a6f0fbc89f5aab9ed1040a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6604:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:59:bc:2b:cb:67:e2:45:af:76:eb:7f:25:5d:66:2a:cc:
         3e:7f:d5:d2:4f:79:f4:15:af:ae:45:8c:d7:54:dd:81:a8:db:
         05:d1:fb:cc:39:6e:6c:8d:10:65:e2:78:aa:f0:8e:a6:7d:6f:
         b6:be:fe:07:f4:bf:13:5a:39:b4:d8:67:12:22:56:e2:e9:25:
         5e:d5:1e:43:74:15:b2:92:33:f5:6b:d4:f0:e7:3e:b7:ab:66:
         fe:6a:d8:e4:94:61:af:09:7f:77:ee:2c:9d:c0:e6:c0:5c:a1:
         8d:fe:09:11:50:5d:1d:26:42:be:4e:fd:35:34:ee:4a:49:0d:
         9c:01:eb:d1:be:51:1a:30:8c:6c:5b:fb:c8:0d:74:03:44:f0:
         e0:90:38:15:6d:7f:d7:d9:30:70:8d:7a:1e:99:f5:a3:28:20:
         c2:09:3f:15:37:2a:5d:b7:e6:cc:04:63:1b:bc:d8:c8:ac:e7:
         fc:1a:11:34:58:0e:79:a6:ba:5e:24:96:8f:39:6d:5c:86:93:
         6c:19:90:d4:a0:c7:d6:97:ce:e7:c8:f0:5c:5d:c9:27:a7:1e:
         a7:42:96:d4:8b:6a:86:af:d7:e7:54:ff:22:7c:45:4f:21:d5:
         78:09:c5:41:36:29:fd:88:4a:0a:44:58:4e:44:f3:59:23:02:
         b2:66:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----