Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/1c0f040b0f5e8c44b9d4b5a5d07019768f4b8eed.roa
File:                     1c0f040b0f5e8c44b9d4b5a5d07019768f4b8eed.roa (raw, json)
Hash identifier:          aSziaAXE2m6BbesXebMaAvLd/8bQiuEgUuXi9xWqIC0=
Subject key identifier:   7A:D7:F1:6F:59:78:48:E1:D0:26:C7:70:6B:26:03:E3:F1:97:B2:89
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       233518
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/1c0f040b0f5e8c44b9d4b5a5d07019768f4b8eed.roa
Signing time:             Mon 28 Aug 2023 13:10:11 +0000
ROA not before:           Sun 27 Aug 2023 13:10:11 +0000
ROA not after:            Thu 28 Aug 2025 13:10:11 +0000
asID:                     27818
IP address blocks:        2803:3380:fe00::/40 maxlen: 40
                          2803:3380:ff00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307352 (0x233518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Aug 27 13:10:11 2023 GMT
            Not After : Aug 28 13:10:11 2025 GMT
        Subject: CN=1c0f040b0f5e8c44b9d4b5a5d07019768f4b8eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:de:a5:06:69:6c:3c:2c:99:09:9b:29:3d:
                    b9:6c:87:d2:ad:26:27:3e:09:12:a9:54:03:d9:c2:
                    23:27:0f:a2:52:70:dd:a8:43:f2:25:f6:51:98:ef:
                    a8:21:50:d0:83:32:9a:78:6a:bb:8b:a2:59:33:e2:
                    47:74:4e:30:dc:30:fc:c6:52:04:1e:3c:d9:1a:19:
                    44:65:9e:1e:3a:1c:8b:ef:85:bc:48:38:8b:6a:c3:
                    a3:57:52:ae:9f:bf:d7:6a:28:06:af:e9:a6:5c:aa:
                    c2:99:d6:58:9b:ac:2f:45:23:b1:85:02:0f:e5:dc:
                    60:e8:bc:4a:35:36:6a:57:54:23:d4:4f:9f:e9:b1:
                    c9:34:3d:27:bd:40:20:d8:3c:32:2f:e5:c1:86:8c:
                    02:59:78:f7:2d:5a:fe:32:a9:7f:c5:61:e9:aa:79:
                    0d:0d:7c:ca:70:32:62:12:e5:05:94:06:b8:d1:52:
                    75:3b:b6:2a:d0:8a:c4:05:3f:62:ce:3a:a2:15:43:
                    2c:8a:1d:6f:91:69:12:41:ff:7d:f6:87:38:e3:23:
                    41:20:72:f8:1e:36:b5:90:32:1c:2e:59:b5:46:1e:
                    94:88:df:3b:51:45:f6:f6:58:1c:ad:e6:fe:34:5c:
                    8b:3c:8c:5c:73:81:26:81:fa:95:69:30:32:d7:83:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:F1:6F:59:78:48:E1:D0:26:C7:70:6B:26:03:E3:F1:97:B2:89
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/1c0f040b0f5e8c44b9d4b5a5d07019768f4b8eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:ff:95:bb:49:4c:53:f6:20:69:fc:58:8c:ca:a3:8b:92:
         00:04:14:4e:93:59:63:35:32:65:d2:9e:e7:2e:6b:13:1a:86:
         db:26:0d:d1:bf:47:57:57:07:90:4d:03:83:f6:3b:ac:61:57:
         19:18:91:ed:23:4c:70:5c:b6:4e:d0:75:c1:6b:ad:4f:d9:b3:
         46:7c:0c:49:29:7e:7b:7d:fe:4e:09:ed:4c:62:9f:45:a1:cb:
         be:25:bc:0a:2d:56:7d:41:df:30:ac:32:9f:4f:0e:a1:cc:3c:
         3b:e6:65:6a:e1:26:3c:0d:2a:b9:17:10:1a:74:6e:97:3e:c2:
         76:df:89:35:e1:98:a1:c2:b0:4b:94:49:25:c6:33:29:74:96:
         37:62:43:e6:57:0a:95:d5:67:ee:88:45:96:d3:46:cc:c0:be:
         6d:55:0b:0f:a9:ff:a1:11:bb:76:fa:82:d0:fe:fe:86:bb:ee:
         ff:37:a4:46:e0:5a:72:83:e8:ca:70:70:4b:51:fb:6b:f1:46:
         82:78:7e:eb:3e:a3:1b:54:3a:49:67:b0:ef:e8:83:c1:64:7a:
         16:61:eb:a5:f9:88:55:a5:25:3a:cf:1c:5c:cd:58:9a:a9:62:
         e5:30:d8:81:2b:57:8d:66:17:a5:b2:eb:53:95:34:81:00:d7:
         3e:97:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----