Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/a04f9a9b50a176df5cfa8d06bc11edfdd04c7224.roa
File:                     a04f9a9b50a176df5cfa8d06bc11edfdd04c7224.roa (raw, json)
Hash identifier:          BgWIkWfWVxdIjqilaGQtYnKZOYI6Y4GNs9P+ELFutEI=
Subject key identifier:   87:C8:AC:23:C1:B2:FD:81:6B:B9:C7:A9:07:8D:CD:52:44:B2:62:3E
Certificate issuer:       /CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Certificate serial:       21AA57
Authority key identifier: 78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/a04f9a9b50a176df5cfa8d06bc11edfdd04c7224.roa
Signing time:             Wed 05 Jul 2023 02:05:23 +0000
ROA not before:           Tue 04 Jul 2023 02:05:23 +0000
ROA not after:            Sat 05 Jul 2025 02:05:23 +0000
asID:                     52468
IP address blocks:        2803:8c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206295 (0x21aa57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
        Validity
            Not Before: Jul  4 02:05:23 2023 GMT
            Not After : Jul  5 02:05:23 2025 GMT
        Subject: CN=a04f9a9b50a176df5cfa8d06bc11edfdd04c7224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:65:a1:ff:d3:b5:82:63:5b:fd:59:67:98:
                    8e:fa:7e:6a:ba:d9:b1:59:2f:7c:fe:23:a2:3f:30:
                    b7:98:46:14:b4:ee:b2:f9:8c:9d:25:f5:14:77:92:
                    f0:1f:ef:62:d6:c9:9a:ca:a6:06:1f:d6:15:5e:ee:
                    2a:47:ce:1f:87:89:e1:7d:d7:75:d0:10:28:8b:c5:
                    1f:7d:37:92:c3:3f:e8:3b:db:17:99:67:c7:ad:7d:
                    ca:c4:c3:24:2b:95:3c:a2:aa:bd:05:9d:64:2f:7b:
                    34:6c:0b:82:9b:87:2b:c0:f2:39:f5:fe:93:c1:54:
                    11:e7:a6:d9:ca:9e:97:36:76:a8:18:d0:65:a9:c1:
                    fc:54:52:14:e9:94:48:dd:b0:43:68:db:3d:bd:f9:
                    ae:d8:3d:8e:7b:b2:a2:82:1e:87:30:59:fe:cc:e4:
                    65:63:52:70:90:2a:1d:65:c8:3e:b9:32:a3:92:42:
                    4b:f1:a1:45:37:b5:52:5f:bd:09:75:db:d9:a3:99:
                    a4:6a:95:ad:6b:59:1a:2d:98:b7:e8:ab:0a:3a:01:
                    58:db:c3:22:19:46:cc:c9:d3:66:9b:31:e4:29:a2:
                    09:1a:35:18:d8:46:0b:f5:1d:c8:f0:60:6d:a7:28:
                    55:e1:92:71:0b:06:df:55:eb:0c:f1:ba:f1:82:4b:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C8:AC:23:C1:B2:FD:81:6B:B9:C7:A9:07:8D:CD:52:44:B2:62:3E
            X509v3 Authority Key Identifier:
                keyid:78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/a04f9a9b50a176df5cfa8d06bc11edfdd04c7224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/c63b81088b8ee19ee848e7230778ed21342ec0fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:db:58:c9:c2:5f:73:81:a6:aa:c7:fc:3e:78:4b:8c:53:f6:
         00:49:f0:03:91:a5:24:c4:76:de:d2:e5:50:a6:5c:73:11:02:
         94:2f:28:d9:41:d7:e7:99:84:01:de:5d:91:ca:3a:53:dc:27:
         12:45:5d:f6:9c:a8:6e:3b:90:97:67:86:de:f4:01:5b:04:81:
         0e:9c:f1:95:39:ae:07:81:54:94:ae:74:6a:fe:32:f7:3c:d5:
         0c:3d:e5:e2:06:f9:9a:3c:ba:55:f2:85:79:f3:22:48:fa:fe:
         76:78:55:97:69:bf:12:00:3c:cd:6c:0f:e6:51:8a:cc:cd:a0:
         61:a7:fc:47:ef:0f:c0:61:75:54:b2:cb:13:f5:80:5b:ff:58:
         28:d1:a7:81:a5:94:d4:0b:f3:a0:a2:8d:6c:45:76:b3:a3:b8:
         0d:2b:e3:db:4b:d2:81:99:f7:f0:93:6e:ce:59:87:af:1f:80:
         7f:b8:4b:82:76:0e:8a:75:ac:9f:95:f3:3b:0f:d4:d6:91:71:
         ab:25:fd:26:de:30:33:b3:b3:b6:d4:fc:f8:b9:dc:ef:58:33:
         c1:5a:b5:78:75:c0:47:d8:77:dd:eb:ed:70:a0:4c:9d:d5:3a:
         eb:1e:7c:d8:6a:77:fc:68:8c:62:2b:46:10:ed:9c:5a:74:b3:
         f2:28:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----