Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/bb34f3d4f634682746291fd3e50b2bb4d7044381.roa
File:                     bb34f3d4f634682746291fd3e50b2bb4d7044381.roa (raw, json)
Hash identifier:          e9hog6XCbg/W5IEm4Fpc6ywXE1abr5Gr0Bmnx0CXlu0=
Subject key identifier:   CD:BB:9A:17:B7:4E:AA:D5:2C:E1:67:17:19:15:4B:35:07:60:4C:AC
Certificate issuer:       /CN=840cb80670ecd016b1a9a3cf14bc123c01d93d86
Certificate serial:       03B449
Authority key identifier: 95:6A:12:67:F3:E8:7D:FF:82:CE:A8:2F:CC:3C:A0:FF:2D:07:3B:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/840cb80670ecd016b1a9a3cf14bc123c01d93d86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/bb34f3d4f634682746291fd3e50b2bb4d7044381.roa
Signing time:             Fri 26 May 2023 17:11:54 +0000
ROA not before:           Thu 25 May 2023 17:11:54 +0000
ROA not after:            Mon 26 May 2025 17:11:54 +0000
asID:                     270187
IP address blocks:        2806:3f5::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242761 (0x3b449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=840cb80670ecd016b1a9a3cf14bc123c01d93d86
        Validity
            Not Before: May 25 17:11:54 2023 GMT
            Not After : May 26 17:11:54 2025 GMT
        Subject: CN=bb34f3d4f634682746291fd3e50b2bb4d7044381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ec:5f:e7:9e:38:83:6c:14:51:49:29:65:db:
                    35:92:b6:25:66:9d:90:cd:e7:bd:17:0e:31:6a:09:
                    2d:ee:fa:0b:53:b4:26:b9:23:9a:4f:85:7a:d4:2f:
                    aa:2e:b2:c1:8a:50:08:c0:90:13:5d:92:fc:0c:e3:
                    a8:90:74:c8:db:18:ff:9c:72:9d:5d:87:b5:c5:0e:
                    21:50:81:e7:4b:79:a3:5b:c0:80:6f:19:97:4f:f0:
                    42:b8:65:0f:86:49:06:6b:ad:7f:dc:bc:71:c3:9d:
                    8f:e3:25:af:80:b3:88:cd:d4:88:11:83:9f:26:73:
                    9f:9b:9d:0e:68:00:ad:ca:70:56:0d:aa:8c:12:f2:
                    16:e3:c5:91:bc:37:1e:9a:93:26:7e:fe:6a:ac:5d:
                    f4:97:1a:55:09:46:43:15:6e:53:99:e6:97:47:d9:
                    e1:2a:7d:e0:37:e0:80:e6:1e:8d:19:82:b4:9f:30:
                    d3:ab:26:f0:72:53:dc:87:d1:48:ec:25:18:cd:56:
                    24:1d:ee:82:f6:92:29:e1:bf:42:c4:c9:bc:8e:93:
                    6a:f9:80:0d:fd:18:ee:d6:ba:dc:44:54:45:4a:97:
                    86:1b:1f:16:a9:a7:48:46:c2:c1:4f:a9:60:1d:48:
                    57:1a:9b:db:0c:eb:b3:ab:33:70:c5:23:6e:ae:c6:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:9A:17:B7:4E:AA:D5:2C:E1:67:17:19:15:4B:35:07:60:4C:AC
            X509v3 Authority Key Identifier:
                keyid:95:6A:12:67:F3:E8:7D:FF:82:CE:A8:2F:CC:3C:A0:FF:2D:07:3B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/840cb80670ecd016b1a9a3cf14bc123c01d93d86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/bb34f3d4f634682746291fd3e50b2bb4d7044381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d64b157-e681-4d99-9ec6-7a7515087198/840cb80670ecd016b1a9a3cf14bc123c01d93d86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f5::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:c8:b3:00:49:3a:22:a6:62:02:97:d3:a9:c7:8f:04:4c:
         60:1c:b2:65:76:cc:a9:1b:66:63:29:11:e5:ea:a4:62:a4:e1:
         17:69:ed:88:9a:bd:63:7b:dd:ae:eb:07:ec:dc:11:24:d2:47:
         02:3b:9c:ee:3f:0d:d0:05:0e:1e:c5:57:7d:0c:4e:6d:6f:21:
         a7:40:e1:5c:ea:92:33:59:39:e6:d9:b8:08:f6:0a:f8:7d:c7:
         3d:9b:73:14:05:01:7a:2a:6c:b5:5f:5a:6c:4e:55:00:cc:5c:
         27:57:b9:94:00:71:d3:f1:bd:a6:5c:60:55:99:ba:a7:4c:19:
         e8:c8:94:f4:f2:83:f5:6e:68:aa:6a:bb:3e:99:cf:54:dc:dc:
         32:60:c4:7e:9c:2c:1f:b3:41:97:ec:76:ab:39:36:9a:e3:d4:
         c2:c9:4f:79:45:38:fb:7c:45:20:37:1c:67:e5:e1:62:42:9f:
         fc:60:0d:24:f3:92:af:2e:a8:70:dc:d9:cc:e4:9f:b8:ef:f0:
         e3:a9:d0:70:6a:be:c1:12:66:96:06:b8:9c:b0:5f:bf:ab:9b:
         a9:2c:c8:0d:b9:c3:93:57:30:90:e4:eb:71:7f:7d:09:73:0c:
         5c:63:e3:bd:19:ae:48:a3:21:9d:9f:05:c5:a1:ba:f6:a4:f0:
         4a:e3:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----