Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/228a27f7b90abe8c27dbb1cfe5c34a2d5300c1d3.roa
File:                     228a27f7b90abe8c27dbb1cfe5c34a2d5300c1d3.roa (raw, json)
Hash identifier:          FIkx5rTwV89tMafhs8A9Ok9tHpztdKCimiFC5Yh2K+Y=
Subject key identifier:   71:DD:2F:E6:22:AD:B8:48:A0:F1:2A:C6:F1:04:62:98:00:80:1B:E2
Certificate issuer:       /CN=c9e9bae1f2ca5a323f613a8451a316961774ef07
Certificate serial:       1AD197
Authority key identifier: CE:4C:85:53:B8:E2:6C:2D:97:03:B7:F7:BD:BB:84:FA:36:C6:BA:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9e9bae1f2ca5a323f613a8451a316961774ef07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/228a27f7b90abe8c27dbb1cfe5c34a2d5300c1d3.roa
Signing time:             Fri 16 Jun 2023 16:33:46 +0000
ROA not before:           Thu 15 Jun 2023 16:33:45 +0000
ROA not after:            Mon 16 Jun 2025 16:33:45 +0000
asID:                     266772
IP address blocks:        2803:af20::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757591 (0x1ad197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e9bae1f2ca5a323f613a8451a316961774ef07
        Validity
            Not Before: Jun 15 16:33:45 2023 GMT
            Not After : Jun 16 16:33:45 2025 GMT
        Subject: CN=228a27f7b90abe8c27dbb1cfe5c34a2d5300c1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:4a:78:0c:0c:8a:3d:ee:c9:26:e3:5d:be:
                    4f:9d:ff:d1:20:12:8b:93:9b:dd:8e:7b:b3:06:81:
                    65:a4:a0:0e:b1:1f:68:ed:45:b6:63:fd:55:87:10:
                    4c:6f:c0:8e:8c:6b:dd:26:1f:f7:76:40:b7:91:88:
                    ac:07:93:83:23:b5:85:35:b6:4a:3a:bc:6f:24:5c:
                    60:75:78:92:0b:16:b2:b6:28:49:e8:f3:fe:1c:ec:
                    05:42:cc:a5:40:be:03:73:29:bf:ea:a3:86:0c:b9:
                    04:3b:12:5f:ad:36:71:77:c3:e4:ec:0a:5c:4d:ee:
                    3c:02:72:7a:f2:7d:35:b2:40:41:d0:8f:c1:f5:f9:
                    d8:43:4f:15:f9:4d:9b:f7:62:be:94:55:93:9d:9c:
                    b4:c5:a3:a7:96:2c:89:21:bd:44:7f:75:8d:75:ea:
                    6e:a8:c4:81:d2:cb:fa:65:df:95:86:92:b9:32:70:
                    f6:b8:6d:89:9d:0b:3d:d9:e5:0a:10:3b:7c:18:6f:
                    43:b8:86:a4:16:b2:ff:fc:b7:59:aa:7e:95:e9:4e:
                    c6:2e:e6:f6:92:e8:e3:d2:f8:e9:62:5b:86:9a:e9:
                    bc:b2:03:7f:9c:12:88:ce:27:70:b5:a0:c8:7b:a4:
                    1e:68:0a:b4:df:2e:90:d8:2b:b9:c2:74:69:21:2a:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:2F:E6:22:AD:B8:48:A0:F1:2A:C6:F1:04:62:98:00:80:1B:E2
            X509v3 Authority Key Identifier:
                keyid:CE:4C:85:53:B8:E2:6C:2D:97:03:B7:F7:BD:BB:84:FA:36:C6:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9e9bae1f2ca5a323f613a8451a316961774ef07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/228a27f7b90abe8c27dbb1cfe5c34a2d5300c1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0755daa-e647-4841-be62-7e86a0945092/c9e9bae1f2ca5a323f613a8451a316961774ef07.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af20::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:59:73:df:f0:59:4c:ff:d1:ca:8a:9c:92:6a:fb:03:bb:e0:
         9a:d0:0f:13:c6:3d:e6:44:4f:63:6d:44:f1:cd:36:5d:b3:28:
         ee:9b:e8:ea:64:51:68:4d:e9:07:74:59:54:a7:6e:78:46:72:
         9d:7c:2d:89:4e:6f:48:81:1c:c3:6e:2a:70:f5:d2:56:17:5d:
         b9:82:a0:d4:76:45:4e:7a:10:71:f9:c0:28:74:12:11:50:36:
         bc:ec:a2:6d:5e:49:54:bc:3d:12:53:f7:2e:87:cf:8c:db:e2:
         2c:29:44:5f:cb:83:3b:7b:5d:e1:38:d4:2d:21:04:bf:e7:59:
         dc:81:c9:b4:a1:bc:6b:3b:09:51:31:57:67:d5:fd:b5:5c:93:
         01:9e:a9:8b:b1:0a:6b:89:2c:e0:d5:e4:a1:56:5f:8f:0d:39:
         59:61:08:28:02:42:ef:da:5f:fa:fc:f1:a3:2f:92:72:17:82:
         1d:88:40:dc:de:7b:df:80:0b:5a:74:2c:00:e4:2b:70:bc:46:
         4a:59:70:50:0f:d1:43:e1:80:ef:07:23:50:67:65:cd:78:2f:
         c8:0e:cf:01:69:ce:f8:aa:2a:5a:f4:e1:cd:45:dc:28:65:ae:
         93:ff:8a:af:3f:82:a2:25:b6:30:47:30:40:79:a0:b1:b4:27:
         e5:0f:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----