Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/bb8fcf9f4b7e7b823a72067f5678989ccfc371bf.roa
File:                     bb8fcf9f4b7e7b823a72067f5678989ccfc371bf.roa (raw, json)
Hash identifier:          6z9MrRrw6EbJmtb9DSmIDGyZcckCa1JRJ95TAShI/do=
Subject key identifier:   60:64:2E:D2:CA:16:74:20:A7:35:DA:8F:5D:FA:1F:D4:D1:5D:9F:90
Certificate issuer:       /CN=cc56b1d6e22a6578e9b3925dd80168e599cb5bfb
Certificate serial:       0D9E97
Authority key identifier: 8C:9B:3D:F9:AB:49:50:D0:4C:5F:D7:81:14:EE:B5:9C:6D:22:78:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/bb8fcf9f4b7e7b823a72067f5678989ccfc371bf.roa
Signing time:             Sun 25 Jun 2023 20:55:27 +0000
ROA not before:           Sat 24 Jun 2023 20:55:27 +0000
ROA not after:            Wed 25 Jun 2025 20:55:27 +0000
asID:                     271977
IP address blocks:        2803:5e10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892567 (0xd9e97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc56b1d6e22a6578e9b3925dd80168e599cb5bfb
        Validity
            Not Before: Jun 24 20:55:27 2023 GMT
            Not After : Jun 25 20:55:27 2025 GMT
        Subject: CN=bb8fcf9f4b7e7b823a72067f5678989ccfc371bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:ee:e6:02:b5:45:fb:e8:ee:7e:71:08:ad:
                    26:4d:5b:83:19:9a:52:d2:02:ec:47:11:b6:73:f0:
                    d3:24:83:f0:11:15:39:a9:d0:bd:45:1a:e0:86:a3:
                    18:4f:b6:d3:41:59:f7:83:a6:79:0a:32:a5:08:f4:
                    b9:8e:c3:e6:38:f3:91:90:1b:1e:83:e0:f4:c6:0a:
                    2f:ef:b0:16:63:92:cb:ed:85:e8:7d:20:31:2d:a5:
                    d8:ea:65:70:5d:b7:75:05:2a:cb:38:d7:be:dd:8b:
                    7a:6b:ad:c0:7c:5d:a7:fc:3c:90:fe:cc:63:4e:84:
                    a0:41:2e:52:54:34:b7:79:23:3d:93:ae:d2:d2:4c:
                    a2:80:be:d5:28:07:84:53:a7:95:d0:0c:eb:51:33:
                    42:56:bf:b5:c9:ac:d9:d8:24:2d:19:4b:c9:43:42:
                    82:53:c9:17:37:3d:50:c3:8b:98:a3:34:a4:6f:b4:
                    b7:26:e4:f6:60:22:75:f5:7f:3d:a8:be:00:12:1c:
                    b2:39:d3:3b:d6:45:2e:21:03:4a:83:ea:18:57:42:
                    f6:03:0b:b9:89:41:92:05:e7:33:22:a0:7c:4b:33:
                    71:8b:ff:1d:42:a8:48:bf:79:36:f1:4d:f9:f5:fc:
                    16:3a:ce:d3:76:81:89:5f:b1:c0:1e:f3:0b:c5:04:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:64:2E:D2:CA:16:74:20:A7:35:DA:8F:5D:FA:1F:D4:D1:5D:9F:90
            X509v3 Authority Key Identifier:
                keyid:8C:9B:3D:F9:AB:49:50:D0:4C:5F:D7:81:14:EE:B5:9C:6D:22:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/bb8fcf9f4b7e7b823a72067f5678989ccfc371bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fdaa8a5-fc67-4cda-8656-cfc06fb938eb/cc56b1d6e22a6578e9b3925dd80168e599cb5bfb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:8f:97:c0:c0:20:04:ee:41:b7:23:48:93:bd:f4:0b:da:
         26:c6:78:bd:27:97:e1:f6:48:28:d8:9a:63:9d:9d:61:74:b7:
         77:11:62:8e:f7:22:23:c0:9b:82:b8:21:48:63:99:d2:53:03:
         1e:40:4c:fa:ba:12:39:e8:e3:06:9a:51:1b:ce:8a:f9:a8:67:
         74:8b:49:65:6c:ea:11:7b:0b:49:b6:74:2d:84:33:ad:8f:60:
         2c:f2:b7:a6:8a:cf:0f:ab:2f:3e:98:c0:db:82:2e:61:47:30:
         92:91:1f:fe:cb:c2:b1:83:00:8e:9e:cd:b8:03:55:ed:3b:70:
         2c:0a:bc:86:d5:80:03:d9:07:49:51:13:68:58:3e:c6:c4:17:
         bd:5b:b3:b2:a9:06:af:06:0e:fb:d1:d3:c0:95:cf:13:5b:41:
         37:7f:bf:14:c8:1f:2c:be:b0:99:f6:e8:6e:65:06:42:02:c6:
         be:4d:48:e4:b0:3c:98:d4:ce:aa:99:7f:8e:7a:c3:8b:5a:cb:
         d1:5e:ae:5d:74:1b:1c:41:b9:7d:e0:90:6f:74:18:07:6e:ae:
         06:63:f9:87:8e:68:7b:ba:45:a5:dd:3f:1c:f5:b6:1d:34:75:
         1a:51:9d:20:04:22:8d:94:c8:45:25:f4:f3:57:d1:45:69:a1:
         78:58:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----