Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/662a4609577dee8b6f021155eaee1bb344a17cef.roa
File:                     662a4609577dee8b6f021155eaee1bb344a17cef.roa (raw, json)
Hash identifier:          HQR0B/KG6Xh2m7jfPTG0+iSFpyqPXX0uZF5BGCCYvuM=
Subject key identifier:   A1:F4:82:BA:39:E8:26:4E:82:90:72:4A:26:49:D0:C8:01:A6:3E:78
Certificate issuer:       /CN=bbd5773c9592361f7d41f83e0b45f99e97eab894
Certificate serial:       0478
Authority key identifier: 46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd5773c9592361f7d41f83e0b45f99e97eab894.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/662a4609577dee8b6f021155eaee1bb344a17cef.roa
Signing time:             Sun 26 Feb 2023 09:09:46 +0000
ROA not before:           Sat 25 Feb 2023 09:09:20 +0000
ROA not after:            Wed 26 Feb 2025 09:09:20 +0000
asID:                     272069
IP address blocks:        2803:3310::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd5773c9592361f7d41f83e0b45f99e97eab894
        Validity
            Not Before: Feb 25 09:09:20 2023 GMT
            Not After : Feb 26 09:09:20 2025 GMT
        Subject: CN=662a4609577dee8b6f021155eaee1bb344a17cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:cc:70:9e:a2:ba:61:cd:40:62:3c:a9:89:
                    3d:6f:63:eb:4d:18:1c:e0:55:29:b8:ab:6e:76:8e:
                    30:cf:03:4f:7d:ec:33:43:97:9d:8a:a4:68:9b:76:
                    15:d7:c1:7f:c2:7e:43:6b:60:57:ba:c7:9b:9c:6e:
                    3f:f7:fe:9b:3f:78:87:bb:d9:1a:8d:ac:c8:82:8f:
                    f1:86:e1:01:c4:5c:6f:2e:d8:1b:e7:f3:8c:66:9e:
                    a4:7d:69:eb:2b:bb:40:9d:72:18:a0:c1:ec:62:8d:
                    c7:96:a8:d1:fe:fe:59:0a:23:27:34:e3:2d:35:df:
                    87:ee:c8:74:cd:5f:60:dd:4f:70:8c:6c:9b:c1:50:
                    59:4c:e8:b8:8a:f3:64:34:9d:0d:b2:dd:e3:dd:c2:
                    7a:75:bf:51:c0:fd:a5:a3:54:20:a7:1c:9a:bf:a6:
                    0c:bf:0b:ff:b1:9e:e1:71:54:2c:e8:ae:25:97:cb:
                    ce:96:cd:1b:4b:75:52:13:0c:f6:ad:db:1a:2c:5c:
                    da:fe:4a:c3:58:da:11:0f:35:76:66:c0:96:4c:76:
                    41:8d:fb:73:a9:26:b0:a6:44:d5:cf:20:5b:9a:3f:
                    9b:79:f3:f5:c8:2f:1b:78:2b:70:6c:7b:c8:ad:27:
                    0b:48:71:b8:0e:f8:cc:47:d9:b4:f7:be:eb:7e:40:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:82:BA:39:E8:26:4E:82:90:72:4A:26:49:D0:C8:01:A6:3E:78
            X509v3 Authority Key Identifier:
                keyid:46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd5773c9592361f7d41f83e0b45f99e97eab894.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/662a4609577dee8b6f021155eaee1bb344a17cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/bbd5773c9592361f7d41f83e0b45f99e97eab894.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3310::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:6d:9b:75:df:00:7d:da:c4:70:f8:e9:e6:39:83:e9:92:
         3d:c2:89:f3:d5:10:c4:f5:e7:a9:73:46:62:da:5d:35:34:a4:
         3e:90:c6:c1:05:05:6a:94:df:63:2a:af:6f:a4:09:24:6e:f8:
         84:da:de:cb:83:af:32:10:d7:43:a9:25:c0:a2:03:f6:53:5e:
         2d:d2:36:70:7a:fb:09:75:83:49:3b:f7:05:e7:d5:0d:e1:5d:
         11:58:71:8d:01:e6:01:f0:24:3a:8d:9c:3d:b1:69:17:72:03:
         a1:84:17:f4:e3:09:ea:68:38:f6:a3:a8:1e:38:ce:f8:2c:0d:
         9b:0d:62:cf:d5:16:de:2a:96:7d:95:b4:10:d2:49:f1:81:20:
         28:5d:7b:f6:a6:7d:7d:0c:13:bb:4a:0c:02:60:18:3d:95:7c:
         a3:44:20:67:59:8f:ed:3c:e1:2c:43:1b:1b:16:a0:28:ba:80:
         1a:ff:a3:ce:9e:20:08:79:e8:aa:11:df:ad:43:5c:8c:18:df:
         67:38:b2:03:26:3e:e2:f2:22:6a:17:17:4f:0b:9d:da:02:76:
         af:66:7c:60:87:ea:01:95:aa:d3:58:8e:be:f8:b2:9b:61:08:
         d6:b8:c5:76:f8:0f:b2:7a:f7:4a:00:b9:14:0e:2d:fb:bc:99:
         e5:a3:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----