Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/0bec5cac6a27daa76e36034e14bb54ddd9222a98.roa
File:                     0bec5cac6a27daa76e36034e14bb54ddd9222a98.roa (raw, json)
Hash identifier:          8zXXJpz8OnrotJ05hcpKDaDpTbpXI0gadYwvKvPy9Vc=
Subject key identifier:   82:0F:B4:CF:E1:29:50:CB:69:2B:A4:02:81:74:D4:A5:71:C8:96:BE
Certificate issuer:       /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial:       1FA63F
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/0bec5cac6a27daa76e36034e14bb54ddd9222a98.roa
Signing time:             Mon 08 May 2023 15:02:35 +0000
ROA not before:           Sun 07 May 2023 15:02:35 +0000
ROA not after:            Thu 08 May 2025 15:02:35 +0000
asID:                     266728
IP address blocks:        2803:5320::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074175 (0x1fa63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Validity
            Not Before: May  7 15:02:35 2023 GMT
            Not After : May  8 15:02:35 2025 GMT
        Subject: CN=0bec5cac6a27daa76e36034e14bb54ddd9222a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:60:d1:d9:a0:b0:36:8a:1a:a0:e8:5b:ca:
                    98:25:38:09:71:3b:f6:ab:4a:0f:40:1f:a8:0e:8d:
                    d4:9b:28:f6:e7:c5:75:96:b6:a3:58:c2:f3:7a:6a:
                    97:96:74:14:37:52:3b:b6:e1:31:0b:4f:6c:42:bf:
                    2a:f5:9c:25:7a:07:6c:21:e0:36:77:46:b8:7c:19:
                    e7:70:d4:46:c0:f5:91:1f:e7:94:35:41:29:b1:35:
                    95:76:3c:fb:94:0c:25:32:0b:f9:fa:47:1a:10:ed:
                    db:8e:7f:26:ce:dc:e4:23:cf:9a:6a:6f:fc:07:6c:
                    94:cd:9e:bd:ac:77:07:96:a8:ee:39:cc:fc:c8:41:
                    6e:8a:a1:fd:dc:44:db:2b:c5:5a:f9:d5:97:25:79:
                    84:7e:9e:5e:84:27:87:62:3a:f2:47:7b:ee:9a:17:
                    9a:dc:39:7d:50:34:6a:2e:46:f5:2c:78:15:ae:9e:
                    fd:7a:8d:bc:f1:66:89:e8:70:b3:74:20:82:fd:ee:
                    98:2b:79:42:18:37:07:a2:1f:87:6f:89:df:e9:84:
                    4b:4a:39:4a:bd:64:64:3d:ac:2e:e2:ed:4c:7b:bc:
                    26:c7:61:3a:34:36:e8:c7:05:ff:ea:95:34:05:14:
                    d6:03:7a:b8:fa:61:8b:24:a6:b2:20:ad:30:e6:8e:
                    af:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0F:B4:CF:E1:29:50:CB:69:2B:A4:02:81:74:D4:A5:71:C8:96:BE
            X509v3 Authority Key Identifier:
                keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/0bec5cac6a27daa76e36034e14bb54ddd9222a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5320::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:89:87:a5:f6:06:ea:10:bb:b0:30:9a:0b:5c:ac:91:e2:0d:
         57:e1:be:b2:b0:85:99:56:b0:14:99:b4:0d:c1:c5:7a:e6:f1:
         2d:fa:e3:23:f7:a8:a4:aa:47:24:31:01:cd:80:55:93:05:6d:
         f4:59:63:62:48:c0:cd:9b:8e:9b:d0:43:41:72:1d:e8:05:4d:
         8f:d2:69:26:e8:fb:e0:f8:c2:03:a9:6c:5d:94:09:50:e1:9e:
         b1:da:eb:81:6b:de:32:e5:f9:17:da:81:c3:1a:65:25:9b:8d:
         6d:48:23:50:53:33:05:52:66:5a:ff:6f:84:22:cf:f5:d6:64:
         04:aa:67:ca:30:dd:2a:16:72:a7:c4:04:b6:bf:c5:60:73:29:
         1b:40:46:b7:49:60:31:f2:c5:ec:c0:f9:4f:ac:da:e4:bf:64:
         90:4a:56:01:f4:b3:77:7f:8d:90:f7:b5:3c:d5:86:34:8e:78:
         97:2f:37:04:7e:71:c5:79:2e:fd:c5:e0:5c:9f:fb:bd:67:54:
         41:d7:28:a8:30:3c:94:91:33:09:53:b7:f3:c2:7d:29:a9:34:
         5b:46:a4:90:ce:78:75:f1:df:a9:25:e4:9d:98:72:4e:ea:07:
         df:6e:b5:61:a3:60:ff:b6:8c:ee:a7:0c:47:55:c8:61:34:21:
         18:a5:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----