Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/e2499fdda46546d0bffbd4dc079d161452af1ea9.roa
File:                     e2499fdda46546d0bffbd4dc079d161452af1ea9.roa (raw, json)
Hash identifier:          3XP8vKcv777N25pl1MmY4J7mubj0La1J1RdjcAi84bA=
Subject key identifier:   80:DF:9A:DA:AF:76:19:C9:2B:53:B0:36:0F:E2:DF:57:7E:01:C5:C0
Certificate issuer:       /CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Certificate serial:       21E700
Authority key identifier: 45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/e2499fdda46546d0bffbd4dc079d161452af1ea9.roa
Signing time:             Wed 20 Sep 2023 20:57:00 +0000
ROA not before:           Tue 19 Sep 2023 20:57:00 +0000
ROA not after:            Sat 20 Sep 2025 20:57:00 +0000
asID:                     264773
IP address blocks:        2803:bc60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221824 (0x21e700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
        Validity
            Not Before: Sep 19 20:57:00 2023 GMT
            Not After : Sep 20 20:57:00 2025 GMT
        Subject: CN=e2499fdda46546d0bffbd4dc079d161452af1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:89:49:ee:4e:97:b3:96:3c:5f:d6:03:74:
                    52:4c:78:17:92:e1:ab:9d:45:3e:ab:cf:2a:27:93:
                    76:b5:9d:dd:11:14:1e:00:fe:93:b3:26:b6:36:f2:
                    d7:61:34:2e:1f:53:7e:27:d1:bf:86:7d:1c:a2:54:
                    00:a9:b3:cf:b7:84:55:c6:a1:9f:46:d7:de:75:9a:
                    b2:58:95:cd:c1:3d:2c:38:df:95:4c:8c:dd:6e:80:
                    e3:37:35:26:48:7f:48:d5:5b:96:c0:d9:a5:63:a0:
                    67:21:e5:d3:b5:58:bb:46:cb:eb:52:cc:a4:4f:47:
                    e9:c6:5b:78:24:c8:96:03:d6:26:36:99:f8:e1:cd:
                    ce:d7:26:93:e3:20:63:c2:10:6e:e9:98:30:91:36:
                    70:35:98:2f:90:c7:e6:fb:83:c6:1b:72:a1:9a:98:
                    7d:38:bd:a9:9f:95:22:b2:88:db:07:94:4d:e1:7d:
                    cc:77:02:1f:1a:7e:af:70:fa:98:f6:db:b7:bb:58:
                    90:e1:aa:56:21:75:c9:f7:08:ba:ad:53:27:ba:b3:
                    21:1c:66:f3:e5:a3:47:62:10:a0:4d:da:0c:d8:93:
                    f5:e3:88:e2:27:60:56:2d:b1:65:be:67:8f:aa:cb:
                    9e:d3:43:13:e9:b1:eb:97:c8:ae:35:0b:73:cd:72:
                    85:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:9A:DA:AF:76:19:C9:2B:53:B0:36:0F:E2:DF:57:7E:01:C5:C0
            X509v3 Authority Key Identifier:
                keyid:45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/e2499fdda46546d0bffbd4dc079d161452af1ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc60::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:11:ea:73:65:55:e9:dd:0a:df:af:22:e1:2a:8e:08:5a:b0:
         c0:12:cd:0c:44:35:e3:4d:6c:5e:0d:62:a6:1b:18:14:37:93:
         e6:fe:56:ad:f7:4b:cc:e6:de:7a:b2:a4:e2:c7:47:9a:a2:c2:
         0b:15:b6:98:95:c2:8c:d6:17:c6:7c:24:b6:89:0c:8b:9a:6a:
         9a:3e:14:a9:e9:8d:f7:27:b7:b5:74:8a:5a:92:25:c3:50:2f:
         d3:ed:7a:34:2a:79:58:2b:a1:2a:58:0a:6a:1f:b4:cc:a4:64:
         eb:88:ce:af:8a:5f:70:5e:a9:43:52:4d:8f:4f:0c:03:4e:cd:
         b4:cf:2c:17:93:a7:e8:6a:5f:45:5d:fc:f2:72:45:50:ce:14:
         94:29:85:e7:0c:d9:26:f7:00:12:61:6a:06:fe:57:43:67:d1:
         7a:6e:81:e6:00:82:47:1d:36:2a:cb:16:9a:82:1e:61:f1:de:
         7d:40:db:2e:cf:0c:8e:85:7d:bf:80:7c:4c:42:41:6d:4b:88:
         6e:25:7f:de:7d:c6:ad:b0:33:2c:30:4f:c5:22:82:88:58:61:
         e6:0b:8a:1f:76:48:45:58:40:3e:f9:52:c1:0c:80:8b:2d:cc:
         b0:cb:8e:05:e8:e8:37:f6:f6:ee:97:e2:04:09:f8:01:b3:56:
         4e:42:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----