Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/55b1d8cea3216ad9affc669eed6dbbd907b5bf90.roa
File:                     55b1d8cea3216ad9affc669eed6dbbd907b5bf90.roa (raw, json)
Hash identifier:          STQMTOwA+ZNnecHuAcrEfBb3CdskGrMpxVr6h91HdGw=
Subject key identifier:   30:B2:23:BF:52:B1:0E:C1:4A:D2:B8:49:DA:8F:49:52:CA:7C:D9:0C
Certificate issuer:       /CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
Certificate serial:       063E95
Authority key identifier: 10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/55b1d8cea3216ad9affc669eed6dbbd907b5bf90.roa
Signing time:             Wed 20 Sep 2023 21:01:24 +0000
ROA not before:           Tue 19 Sep 2023 21:01:24 +0000
ROA not after:            Sat 20 Sep 2025 21:01:24 +0000
asID:                     264773
IP address blocks:        2803:de90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409237 (0x63e95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5daba39e93cb3e66a73d2628b56c529b8a5851a2
        Validity
            Not Before: Sep 19 21:01:24 2023 GMT
            Not After : Sep 20 21:01:24 2025 GMT
        Subject: CN=55b1d8cea3216ad9affc669eed6dbbd907b5bf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:55:e6:90:5e:5d:64:2b:56:0b:43:34:9c:
                    5c:5e:e9:fe:f2:d4:4f:a1:0b:cc:57:10:64:8a:63:
                    d2:db:4f:1d:a6:e4:86:71:1c:6f:4f:06:ff:bc:4c:
                    ea:96:3e:99:52:72:d7:ef:df:44:d0:b3:5c:11:50:
                    d3:5e:15:c7:19:d0:26:9a:62:15:f6:8c:9b:56:68:
                    e0:2c:52:70:53:51:a6:9d:dd:fa:8c:0a:fc:a2:76:
                    c2:16:83:27:11:9f:a9:e4:cb:cf:97:5d:9f:f4:bb:
                    5b:76:9a:90:49:e6:d4:e4:27:b2:4d:56:fe:f8:30:
                    20:49:20:87:52:27:b1:12:ed:80:a6:b1:4f:be:44:
                    a1:70:f0:13:58:5f:69:d0:80:79:54:5a:cb:5d:2b:
                    1f:76:01:e2:91:c1:25:d5:a0:d4:6e:37:bb:74:59:
                    b7:51:86:0a:a3:e6:07:93:00:b7:d0:b3:b4:f5:72:
                    18:e3:96:26:76:cf:e2:33:81:66:48:cf:66:b7:f0:
                    df:a8:12:12:ba:bc:54:7b:21:87:0d:8d:d6:d6:69:
                    31:92:b0:5d:05:47:1b:42:d0:8d:9e:e1:a3:10:20:
                    48:25:d9:11:a7:92:27:16:b0:24:80:c1:ee:5c:71:
                    50:b3:03:57:33:d1:ab:1d:d7:4d:9e:82:14:88:e4:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B2:23:BF:52:B1:0E:C1:4A:D2:B8:49:DA:8F:49:52:CA:7C:D9:0C
            X509v3 Authority Key Identifier:
                keyid:10:1D:C1:45:E6:45:C0:FA:68:CC:EC:CE:54:2A:1F:08:D2:30:C3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5daba39e93cb3e66a73d2628b56c529b8a5851a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/55b1d8cea3216ad9affc669eed6dbbd907b5bf90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574294b9-9293-45a1-b4f9-a05ddc931a4d/5daba39e93cb3e66a73d2628b56c529b8a5851a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de90::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:fa:89:0d:25:b3:74:25:67:59:c4:4f:9f:65:ae:5a:40:
         de:23:9b:d6:01:b2:e5:4a:27:54:8d:c6:4b:dc:54:df:03:c6:
         df:a7:87:da:db:55:23:18:50:30:66:5d:ce:05:4e:61:d1:03:
         c6:7a:96:b4:f5:a4:1e:10:b7:f8:c8:ee:b5:6e:d7:5a:eb:a4:
         f1:26:1c:8b:c8:96:2d:b9:b5:48:b6:a1:22:dc:14:ae:37:8e:
         3a:97:cd:6e:02:85:04:d9:01:7b:7d:8a:32:09:ab:c9:68:a0:
         7d:1a:9f:d8:09:5c:6e:d3:fa:d2:8c:2d:11:46:57:84:26:1c:
         5a:7e:77:39:29:81:8c:24:b3:d5:e2:ae:f1:4d:82:73:5e:02:
         46:de:22:b4:1e:bf:0a:20:af:48:61:0a:41:d1:0f:90:64:b9:
         31:25:2d:0c:fe:d5:38:ec:ad:74:e1:e1:13:d4:17:69:e3:ca:
         36:ab:aa:65:ca:05:45:9b:57:04:e0:40:b5:b9:03:04:03:67:
         47:9b:a0:f0:57:f9:a8:6d:2c:29:f0:6b:04:9b:6b:ea:dd:0f:
         d1:58:5f:e1:9d:7d:1c:c1:82:d3:d4:86:da:d5:67:17:54:87:
         a3:a9:e6:f2:f2:64:de:f5:a9:70:03:51:9b:cc:1d:6c:16:6f:
         14:9f:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----