Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/9d6d4e433ea3ca156599ed324a338a0e4910ef6a.roa
File:                     9d6d4e433ea3ca156599ed324a338a0e4910ef6a.roa (raw, json)
Hash identifier:          AYJAl6RgxSTiAl6Lo0CEb0Uyac3L13e5i52POF1+NfQ=
Subject key identifier:   AD:4C:82:84:A9:D5:5F:75:C4:06:6A:DA:3E:C3:F4:15:53:44:54:D6
Certificate issuer:       /CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
Certificate serial:       12D38A
Authority key identifier: 99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/9d6d4e433ea3ca156599ed324a338a0e4910ef6a.roa
Signing time:             Fri 23 Feb 2024 22:28:48 +0000
ROA not before:           Fri 23 Feb 2024 22:28:48 +0000
ROA not after:            Mon 23 Feb 2026 22:28:48 +0000
asID:                     271949
IP address blocks:        2803:5610::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233802 (0x12d38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
        Validity
            Not Before: Feb 23 22:28:48 2024 GMT
            Not After : Feb 23 22:28:48 2026 GMT
        Subject: CN=9d6d4e433ea3ca156599ed324a338a0e4910ef6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:c4:45:24:e0:b9:87:ee:56:2d:e1:99:3c:
                    9b:50:76:4f:57:28:c7:d1:2f:b4:a0:0e:4d:f4:b3:
                    16:1c:bd:f7:89:7a:d5:62:d4:bf:fc:66:fe:10:54:
                    da:3b:09:fc:66:dd:a2:f5:d1:b1:c7:89:1e:55:98:
                    bd:50:ef:b6:cc:43:9b:ab:05:fd:47:3c:89:d6:6b:
                    25:d3:2f:d4:2d:58:d3:1b:7f:2e:8a:ce:24:56:7d:
                    c8:76:6a:44:46:31:33:1e:20:c0:51:e7:96:e3:ba:
                    5f:3f:10:41:fc:0b:09:c6:de:bc:06:41:0c:58:2f:
                    0d:1a:c9:df:80:bd:6f:db:f9:45:c1:65:33:18:81:
                    7c:28:e6:06:07:9e:1e:1f:57:e9:be:e3:6f:0d:f4:
                    2b:a0:ab:8c:f7:53:1c:d3:9e:ee:90:88:51:bb:b6:
                    7a:48:3a:6c:a5:ff:8c:e7:22:70:5a:f8:33:51:5b:
                    6c:15:d5:a1:0a:e8:50:57:69:88:2e:c4:07:3b:7b:
                    03:fe:e4:34:99:e0:9e:74:4d:c3:d1:af:74:97:c5:
                    56:f9:a3:3c:76:86:ff:57:2d:da:94:2c:aa:42:b8:
                    37:e0:54:c5:8c:a8:2f:a0:e0:61:74:9e:02:5d:d5:
                    b7:b4:b4:39:cc:01:b8:70:ef:bc:32:ce:a5:d1:20:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4C:82:84:A9:D5:5F:75:C4:06:6A:DA:3E:C3:F4:15:53:44:54:D6
            X509v3 Authority Key Identifier:
                keyid:99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/9d6d4e433ea3ca156599ed324a338a0e4910ef6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5610::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:b4:b5:cb:e3:f2:7a:c2:b1:fa:f9:97:30:d3:bc:95:1e:
         e8:26:7c:c2:bf:e8:4a:e1:20:26:98:ea:6c:3b:62:8c:88:18:
         2f:fd:5b:c9:2d:c1:98:9d:16:34:33:6f:cc:b2:d1:e4:24:3b:
         6c:9c:8b:10:72:c1:2f:b4:24:8e:b9:94:e9:14:1e:6e:21:ba:
         e4:56:9a:c9:a6:42:07:20:ee:36:1c:19:53:59:ab:d0:c2:68:
         b5:aa:d8:ec:1f:64:d5:b6:e0:87:5d:d1:88:8e:b7:b7:0e:74:
         09:27:97:69:4c:39:38:cf:46:0e:a5:44:9c:b5:4d:dc:81:62:
         76:34:43:6e:14:fe:27:5f:f6:61:02:14:a1:97:59:77:ce:33:
         1a:97:99:0a:a6:08:23:63:ed:e8:7b:dc:69:94:11:f3:7c:53:
         a4:7c:86:c3:6f:6a:1a:c8:e2:67:89:f8:1e:99:a2:4f:49:53:
         61:7e:dc:21:68:a6:76:a5:10:ff:f2:19:03:8b:d9:b1:7f:a0:
         2f:e0:ea:66:60:5c:62:b1:80:ce:c9:12:62:da:14:57:d8:be:
         91:3b:fa:eb:19:29:b2:61:6f:86:88:5d:a3:87:2a:79:28:ee:
         7e:42:56:62:a1:dd:a9:ff:ae:81:3e:23:36:64:60:52:ba:cd:
         b6:3a:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----