Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/75fe2d9d9ecd7c1fac964d20b9425f772a54dfab.roa
File:                     75fe2d9d9ecd7c1fac964d20b9425f772a54dfab.roa (raw, json)
Hash identifier:          AN4DuZVCw12xS0g4dNFu28qDr2Hm0GrOhDKHF5SCR2s=
Subject key identifier:   22:77:B9:DA:67:88:D1:AB:FA:6A:A0:0B:EA:B0:0A:1E:C2:F6:1C:CD
Certificate issuer:       /CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
Certificate serial:       051F
Authority key identifier: 07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/75fe2d9d9ecd7c1fac964d20b9425f772a54dfab.roa
Signing time:             Tue 25 Apr 2023 19:28:36 +0000
ROA not before:           Mon 24 Apr 2023 19:28:36 +0000
ROA not after:            Fri 25 Apr 2025 19:28:36 +0000
asID:                     270078
IP address blocks:        2803:4be0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c958d4e8b3e978aac802f96e9b7d380f9995c148
        Validity
            Not Before: Apr 24 19:28:36 2023 GMT
            Not After : Apr 25 19:28:36 2025 GMT
        Subject: CN=75fe2d9d9ecd7c1fac964d20b9425f772a54dfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:75:a1:0c:a2:b2:7b:a5:5f:47:f4:03:85:
                    7e:f9:52:a1:5e:99:b5:65:cf:cd:3f:a5:a3:1b:c2:
                    9e:63:08:ac:7f:83:f8:cb:05:c4:ff:e1:d6:9a:1d:
                    da:b4:6c:36:60:ba:d8:39:05:7c:a5:93:f5:4b:5b:
                    95:ef:9d:bf:f6:31:fd:1e:dc:b7:44:a4:9c:50:de:
                    26:d2:53:5d:9f:21:fd:61:a1:38:ed:a2:be:d6:e0:
                    89:f0:9f:11:04:fe:b1:97:81:1a:af:90:95:a4:03:
                    68:d8:af:fc:af:b2:50:34:d6:9e:f6:f5:d1:85:51:
                    56:d0:42:08:24:a2:44:e6:75:09:c9:c6:9c:6e:95:
                    10:54:3d:07:80:c7:81:a6:17:78:5f:4b:ce:12:2f:
                    fa:ab:cd:99:16:3f:fd:5a:7c:49:14:6c:91:70:6a:
                    0d:0b:b2:a4:8a:5f:ec:43:d1:ae:0d:07:e4:e5:47:
                    20:73:7d:d6:ba:f3:f6:0e:71:70:c7:1e:75:3b:6e:
                    8c:39:05:cc:ab:1d:ca:7a:b2:a8:e3:8a:eb:78:a0:
                    6f:a2:0f:a1:23:97:ad:ef:e1:af:84:54:c5:3e:ae:
                    2b:95:a0:b9:75:37:1c:40:1a:b5:42:47:25:ea:3a:
                    c1:7a:da:ef:7b:d9:e2:a4:6e:05:0f:e4:24:86:ac:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:B9:DA:67:88:D1:AB:FA:6A:A0:0B:EA:B0:0A:1E:C2:F6:1C:CD
            X509v3 Authority Key Identifier:
                keyid:07:CD:A8:0A:90:6F:F2:AA:E2:69:65:05:21:78:5E:6D:44:F9:3C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c958d4e8b3e978aac802f96e9b7d380f9995c148.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/75fe2d9d9ecd7c1fac964d20b9425f772a54dfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8dee261-7bff-4a9e-997c-6ba35188231f/c958d4e8b3e978aac802f96e9b7d380f9995c148.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:fb:65:66:7f:f8:50:db:c9:e9:7f:98:5f:86:00:d2:70:
         94:58:73:74:d6:db:7b:01:86:88:04:c3:65:ba:bf:b3:19:fb:
         ac:fc:92:2c:d6:ca:cc:6f:0e:d9:95:9b:36:a7:09:26:ba:1a:
         c1:24:da:e5:07:68:a2:bf:38:c3:d6:86:46:a0:f6:21:de:66:
         fc:e8:32:7b:76:4c:14:b0:b0:e4:db:4f:8b:e5:eb:bb:4a:ae:
         c3:2b:ca:66:51:d8:31:7c:8e:ef:3a:bb:82:de:1a:19:a5:c9:
         85:44:29:de:22:1a:2c:bc:b1:02:28:45:37:2c:91:b0:48:a0:
         39:44:89:9a:18:d1:fe:d7:69:b8:f5:1a:e7:ba:44:e7:83:93:
         6c:e2:82:20:ae:d9:e7:02:25:f8:63:1a:41:51:3f:e4:09:16:
         02:92:ba:e3:25:fc:73:62:29:60:50:13:38:71:06:9f:5d:34:
         46:af:26:bf:a0:ef:20:b0:c7:39:ae:d4:34:8e:a5:03:de:26:
         af:9f:9d:33:21:17:af:2d:6f:e5:a2:74:87:db:cb:ad:23:f8:
         0f:d0:d6:4f:18:6e:7e:c9:c4:d8:c9:56:b6:b0:a9:c7:35:04:
         a1:a4:e9:1d:13:75:c5:44:06:04:4a:4a:3c:00:fa:54:51:38:
         6e:b2:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----