Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/406364a76a1493aa37c9d9601ce19bc2e61840b7.roa
File:                     406364a76a1493aa37c9d9601ce19bc2e61840b7.roa (raw, json)
Hash identifier:          1pd+R0uCyAtr16jI5k48sTHrAI6wQEH0T3VkOMlM+l8=
Subject key identifier:   F6:90:D7:AA:5A:79:C9:4B:3B:FD:5B:F8:DF:F3:5E:EF:81:EF:16:92
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       201139
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/406364a76a1493aa37c9d9601ce19bc2e61840b7.roa
Signing time:             Tue 16 May 2023 22:02:47 +0000
ROA not before:           Mon 15 May 2023 22:02:47 +0000
ROA not after:            Fri 16 May 2025 22:02:47 +0000
asID:                     52392
IP address blocks:        2803:b100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101561 (0x201139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May 15 22:02:47 2023 GMT
            Not After : May 16 22:02:47 2025 GMT
        Subject: CN=406364a76a1493aa37c9d9601ce19bc2e61840b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:f0:66:c5:12:e6:5d:9c:98:c5:f5:06:73:
                    f3:21:ac:d4:25:4d:fc:fb:a0:71:63:24:10:16:09:
                    c3:53:14:4c:18:81:ba:39:80:ce:9a:20:f8:c1:8e:
                    f0:8f:5b:39:6e:a7:2d:c8:6c:35:e2:cb:7f:56:3e:
                    5c:47:be:cd:0b:45:4d:dd:4b:c8:c0:41:6b:2f:7b:
                    8f:a9:42:71:5b:c4:a5:14:85:4a:93:b4:e1:1a:eb:
                    33:ed:84:63:26:b3:47:cd:9b:ff:b6:4a:25:f5:1a:
                    4c:62:74:ef:9e:2d:73:6d:8c:f1:2f:96:10:0c:33:
                    fe:c9:d0:53:93:50:70:52:a9:cf:88:0d:e0:7d:88:
                    2f:08:c6:93:c4:8d:b7:e2:5f:94:cb:ba:71:f0:84:
                    39:0b:0c:d4:c9:0e:e0:64:01:4d:21:9c:6f:05:31:
                    dd:e4:16:9d:bb:40:18:f6:3a:a4:72:77:12:3c:e9:
                    19:63:2c:a4:16:00:38:b1:86:30:75:a2:a7:e8:74:
                    d8:2c:38:15:47:4e:f3:ba:8f:a6:0c:73:dd:66:73:
                    50:bc:4d:fd:08:1c:1e:25:fc:93:52:8c:2e:8c:d0:
                    43:f2:da:87:22:62:c7:8d:c7:e5:14:f0:23:a7:5e:
                    3f:eb:e1:27:24:15:6d:f1:2b:c2:2a:95:33:da:d3:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:D7:AA:5A:79:C9:4B:3B:FD:5B:F8:DF:F3:5E:EF:81:EF:16:92
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/406364a76a1493aa37c9d9601ce19bc2e61840b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:46:2a:7e:29:a1:e8:b1:88:4e:6c:18:4f:aa:28:24:72:
         63:12:88:3a:67:3e:07:18:bc:16:65:0d:ee:67:6b:95:e7:0c:
         ab:e0:d9:93:81:7c:fd:20:a2:da:4b:2e:0d:86:61:a8:59:89:
         9b:5d:49:f1:e8:4d:06:14:c2:62:f3:60:3e:ee:6b:83:07:c0:
         b1:7c:e0:e1:d5:cd:ad:8c:48:31:83:d3:1c:d5:a8:25:63:14:
         9c:11:a3:f5:45:c6:79:c2:9f:e1:c9:32:b2:34:c5:81:3c:a1:
         82:d1:45:c5:4b:43:83:4f:c0:70:b0:44:6a:c4:c8:bd:49:8d:
         bb:60:65:53:54:b0:94:23:46:22:02:51:e8:0e:af:e6:c2:f2:
         46:d4:54:78:6c:a8:45:10:2c:33:7c:82:82:d1:98:79:98:42:
         3a:94:5d:1e:ab:c8:70:d1:b7:f8:79:84:f5:be:32:87:2e:9b:
         f6:0a:6f:15:1d:6a:a6:35:fe:a5:80:0f:45:e3:c2:27:c2:f8:
         36:5c:4b:6c:eb:92:f1:ee:da:a0:b6:50:71:08:da:28:a2:f1:
         bb:88:da:10:b4:fc:4f:9d:11:83:33:4f:96:fd:ad:bf:da:e3:
         c5:e6:8c:90:d2:60:4b:ff:d6:6c:52:56:fd:2b:12:39:bf:ac:
         bd:05:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----