Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/1e2d5fb86632af04507e239ac967ddac94a1789f.roa
File:                     1e2d5fb86632af04507e239ac967ddac94a1789f.roa (raw, json)
Hash identifier:          8k0etXqr3nFczsxJQmuHlPFVUwKRgeL/HD4bxH3HQr4=
Subject key identifier:   21:95:C7:AB:37:72:3A:4A:22:DC:6E:C2:24:B3:31:B2:4B:4E:83:D7
Certificate issuer:       /CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
Certificate serial:       1491
Authority key identifier: 07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/1e2d5fb86632af04507e239ac967ddac94a1789f.roa
Signing time:             Tue 25 Apr 2023 19:55:17 +0000
ROA not before:           Mon 24 Apr 2023 19:55:16 +0000
ROA not after:            Fri 25 Apr 2025 19:55:16 +0000
asID:                     270078
IP address blocks:        2803:4be0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5265 (0x1491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
        Validity
            Not Before: Apr 24 19:55:16 2023 GMT
            Not After : Apr 25 19:55:16 2025 GMT
        Subject: CN=1e2d5fb86632af04507e239ac967ddac94a1789f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:a9:f6:9e:69:7b:0b:c2:86:01:ab:a9:8d:
                    36:6a:df:4f:15:3f:1a:11:ca:ee:12:26:02:7f:50:
                    71:72:aa:29:1a:51:c5:f4:1b:fc:1d:a2:7c:a6:31:
                    37:9c:f8:e5:88:6f:da:17:24:a7:ff:86:bd:17:31:
                    c1:87:8f:da:2e:7a:d0:3a:84:fd:18:69:3c:23:28:
                    31:62:6d:e6:f6:11:40:95:be:d6:34:f2:6e:ce:f0:
                    02:c1:4f:3e:75:8c:97:a5:56:b2:03:bb:a4:e8:94:
                    d0:33:38:5e:f3:c8:44:5e:f4:24:d0:21:93:15:3c:
                    06:8c:4d:ba:a0:25:7c:00:0f:87:5c:2e:2d:0c:55:
                    6f:7b:cb:95:85:96:88:65:9d:cb:85:fd:c4:ca:83:
                    b3:13:f9:cd:c5:ee:5b:d9:a1:97:4b:97:8f:42:1f:
                    26:cd:ec:6f:f0:92:56:7d:98:c0:e4:25:94:3f:30:
                    3e:a4:8a:7d:b7:fa:cd:07:d6:c5:d7:13:4d:50:ab:
                    7d:25:9b:49:db:4f:e1:bd:95:f2:51:d7:ca:fb:ce:
                    c0:c0:33:62:39:91:3a:38:90:64:5f:7b:3c:1c:0d:
                    3c:77:96:af:9d:53:58:64:37:e6:ac:b6:8f:66:7c:
                    27:b1:a0:dc:2a:f6:68:8c:fa:81:78:87:26:10:51:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:C7:AB:37:72:3A:4A:22:DC:6E:C2:24:B3:31:B2:4B:4E:83:D7
            X509v3 Authority Key Identifier:
                keyid:07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/1e2d5fb86632af04507e239ac967ddac94a1789f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/c958d4e8b3e978aac802f96e9b7d380f9995c148.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:95:68:02:e8:90:5d:69:f4:d9:bb:51:3d:99:c3:48:2a:43:
         20:20:58:d3:49:07:9d:1f:b5:74:25:ac:8e:79:6f:76:f2:b1:
         73:78:c8:01:ba:1f:cc:f9:ce:58:c6:9e:fa:68:a4:db:f8:b6:
         f6:69:57:8a:b5:63:2c:93:ed:6c:5b:71:ce:f9:dd:a1:f2:e4:
         c1:ea:ba:af:89:9d:90:3b:c9:97:34:2d:8b:74:42:19:e7:a8:
         41:d8:34:d3:d0:49:48:cf:6a:4a:7d:df:3d:a0:f6:fb:af:e0:
         9d:a4:45:50:cf:ad:5c:41:39:00:29:ab:5f:6b:2b:86:6d:35:
         75:3d:ba:fe:33:29:4d:53:97:47:c6:01:7b:dc:1a:c7:b6:5c:
         37:ef:c8:b0:c2:c8:19:e0:17:15:31:96:aa:60:1e:fa:ac:ec:
         2d:a6:3f:ee:a3:84:11:e3:17:a8:89:d8:ba:20:ea:cb:6e:aa:
         0b:d8:3a:23:53:b9:06:ea:6d:2e:93:b3:55:32:b4:13:56:2e:
         24:c5:0b:7e:e8:65:14:ec:b1:a2:b7:13:45:34:67:95:7d:4d:
         51:91:85:fa:8c:20:9e:5c:b3:96:a6:7e:6e:2b:5f:a7:69:aa:
         74:e8:28:1a:66:3d:7a:8f:ba:59:97:82:31:e4:fe:f5:b2:42:
         94:89:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----