Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/669198e8e6aac878d2e76296c43d19409d256593.roa
File:                     669198e8e6aac878d2e76296c43d19409d256593.roa (raw, json)
Hash identifier:          xrJod4ELUxV8mMoPnQHHp0X9FVG7HSjNoae4vay0FYU=
Subject key identifier:   6C:BE:5B:58:18:F2:CD:16:DA:51:81:39:15:47:7B:10:C5:1A:2E:B5
Certificate issuer:       /CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
Certificate serial:       0347D0
Authority key identifier: 19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/669198e8e6aac878d2e76296c43d19409d256593.roa
Signing time:             Thu 12 Jan 2023 22:29:35 +0000
ROA not before:           Tue 10 Jan 2023 22:21:58 +0000
ROA not after:            Sun 12 Jan 2025 22:21:58 +0000
asID:                     14080
IP address blocks:        2803:a810:406::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214992 (0x347d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2
        Validity
            Not Before: Jan 10 22:21:58 2023 GMT
            Not After : Jan 12 22:21:58 2025 GMT
        Subject: CN=669198e8e6aac878d2e76296c43d19409d256593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:d2:d0:d9:83:2c:bf:4b:1f:6e:13:26:e7:
                    5e:ef:cb:6e:7b:78:e8:f4:8f:27:eb:26:b9:e8:2b:
                    11:63:73:bc:fc:ee:1f:23:5a:53:34:67:a9:7e:5b:
                    2e:e8:a6:d7:5d:ba:62:59:93:67:aa:e5:e4:0e:ed:
                    34:e2:78:1b:2e:ef:38:49:fb:e1:ac:ac:39:c3:17:
                    f3:53:43:e0:2d:22:62:e0:b0:c5:ab:f5:29:03:9c:
                    11:61:73:b5:ed:89:42:fd:1d:14:a6:fa:dd:63:0b:
                    3b:d7:33:56:9a:b6:70:cf:23:ff:7a:a3:89:92:2f:
                    5b:24:8e:6c:c4:06:6d:69:0c:fa:4e:a9:63:4d:c0:
                    5b:c2:79:79:11:4a:e6:08:02:8b:df:aa:8b:51:6d:
                    0d:cf:82:e1:6c:12:b2:6a:8a:06:01:10:90:6b:34:
                    f3:d3:0c:e9:9d:4b:93:4d:a1:28:7f:98:f7:0f:ca:
                    15:72:81:c8:de:34:03:72:aa:2d:76:f4:10:11:4a:
                    4e:c2:74:9a:17:5d:0c:e5:ce:d0:a2:34:db:72:da:
                    cd:b5:8f:30:f6:9c:43:ca:36:da:12:ab:53:8a:70:
                    bc:43:72:9a:fd:74:1b:e8:a1:9d:e7:72:df:8a:15:
                    5b:ee:17:f9:22:d3:e5:ce:99:9e:81:9f:1f:10:a7:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BE:5B:58:18:F2:CD:16:DA:51:81:39:15:47:7B:10:C5:1A:2E:B5
            X509v3 Authority Key Identifier:
                keyid:19:6C:BD:B0:CE:5D:09:33:D3:BF:00:72:42:68:EB:DF:40:C4:96:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/669198e8e6aac878d2e76296c43d19409d256593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0fbb97e-38de-46d0-b281-4d03437f2424/f633b92dfcc7d9d3245f1cef2dba806c7ab01dd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:1a:b6:f7:24:85:90:8a:ee:df:c2:b0:6a:09:7f:b3:01:
         1e:bf:86:bd:58:08:d6:98:a6:74:19:44:2b:76:38:6d:25:28:
         cc:b2:83:dc:ae:f8:6c:71:b8:b4:a0:87:e1:7e:06:98:64:99:
         f0:0a:74:49:a3:f2:0e:b6:1c:14:21:21:07:c6:03:d4:0e:ae:
         9c:90:32:44:e5:fe:6a:c2:66:cd:7b:19:98:3f:55:42:b0:37:
         59:b4:0b:06:35:39:24:26:ec:7b:73:77:5d:2a:12:04:7e:fa:
         99:ac:25:53:23:8f:bb:7d:4b:ab:92:68:e0:8d:5d:55:f3:9a:
         9e:11:10:af:4a:8a:57:fa:ad:31:bd:ae:df:a3:16:47:3d:e3:
         d0:c6:4f:d0:b6:b3:c4:0f:b8:aa:1b:27:be:fd:03:af:48:ff:
         ed:fb:36:33:3b:9b:7f:ae:3a:69:37:f1:b5:ca:37:f7:80:1d:
         6d:7a:99:3e:ef:2e:e7:56:e7:b6:b1:65:cb:a8:3a:b6:92:71:
         ee:ad:96:77:47:58:83:99:35:b8:63:e8:d9:ca:b5:47:92:bd:
         d2:de:ba:d3:e7:be:c4:70:cc:bc:c1:0a:ac:f9:73:ca:c1:f7:
         5d:81:92:c5:d2:60:47:84:c9:2b:4b:3b:9f:6c:12:d9:f1:c4:
         72:11:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----