Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/55400a9c27ace09a4163e68668f0d53b92edfcba.roa
File:                     55400a9c27ace09a4163e68668f0d53b92edfcba.roa (raw, json)
Hash identifier:          ewoLFg9FkvszIP13uVtux1uxtl+PkHqi/V4XVtqPWhk=
Subject key identifier:   E6:13:59:DE:85:A4:56:1A:E9:0D:29:5A:77:C4:7D:35:F1:48:39:27
Certificate issuer:       /CN=437aff5beeb847e72273c618678286e725df2433
Certificate serial:       03B19F
Authority key identifier: DF:2D:D1:9B:42:46:AB:FD:B2:D5:CD:18:04:9E:78:FE:C8:A3:32:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/437aff5beeb847e72273c618678286e725df2433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/55400a9c27ace09a4163e68668f0d53b92edfcba.roa
Signing time:             Thu 28 Sep 2023 22:17:27 +0000
ROA not before:           Wed 27 Sep 2023 22:17:27 +0000
ROA not after:            Sun 28 Sep 2025 22:17:27 +0000
asID:                     265574
IP address blocks:        2806:32a::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242079 (0x3b19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437aff5beeb847e72273c618678286e725df2433
        Validity
            Not Before: Sep 27 22:17:27 2023 GMT
            Not After : Sep 28 22:17:27 2025 GMT
        Subject: CN=55400a9c27ace09a4163e68668f0d53b92edfcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:4e:b7:36:1b:99:f3:04:ed:61:bd:7a:a6:
                    20:7a:6f:94:18:83:33:d5:d6:d7:f5:11:0f:8b:8e:
                    5e:bd:da:4f:65:fc:94:92:64:fa:cb:e9:cf:f6:94:
                    13:33:1d:71:85:c4:de:d2:18:93:b1:46:6c:56:59:
                    03:4f:8f:c1:58:c8:a4:60:93:70:03:eb:b7:c2:a1:
                    45:09:95:2e:ea:5b:1e:02:ce:9f:16:d1:31:ae:47:
                    b4:5a:30:a0:8a:60:dc:52:b4:b7:f2:a7:f9:80:27:
                    68:d0:cd:27:68:4c:dc:97:a3:b6:c2:52:ea:c4:ea:
                    25:b2:71:1c:a2:8d:9e:db:af:d0:1b:66:ec:13:91:
                    be:f2:14:fc:5e:94:76:cc:01:74:74:35:d6:a1:93:
                    40:c0:47:62:d8:1f:57:e0:bc:1f:f5:94:19:18:ea:
                    f1:e0:4f:bf:48:fe:bc:a2:00:da:ad:8a:b4:ea:83:
                    87:1b:e0:39:50:43:30:af:e1:b6:69:a4:e8:4a:3e:
                    b0:24:a1:4a:a6:87:5c:db:d9:ce:d6:9a:2b:8c:ac:
                    e6:82:e7:00:62:bd:1e:6a:25:c4:e8:44:85:a0:24:
                    8f:f6:bc:37:1d:8c:18:6f:46:23:0f:40:3a:59:a3:
                    fb:fa:ac:e5:74:b8:28:5f:d4:73:6c:fd:76:1b:cd:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:59:DE:85:A4:56:1A:E9:0D:29:5A:77:C4:7D:35:F1:48:39:27
            X509v3 Authority Key Identifier:
                keyid:DF:2D:D1:9B:42:46:AB:FD:B2:D5:CD:18:04:9E:78:FE:C8:A3:32:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/437aff5beeb847e72273c618678286e725df2433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/55400a9c27ace09a4163e68668f0d53b92edfcba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77e7cfc6-9a7d-4126-8f82-6ebd3050ace7/437aff5beeb847e72273c618678286e725df2433.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32a::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:91:a2:75:bd:28:9c:50:d8:e9:bf:cf:04:3a:d8:93:1f:23:
         13:04:69:46:68:cd:a4:af:dc:52:3e:e0:54:b7:2e:52:08:10:
         50:5a:ad:cc:5a:6f:f9:c5:e7:66:e6:18:60:75:40:2b:19:2a:
         bf:5a:58:bb:18:02:67:a4:a2:40:b6:cd:bd:32:3e:7c:e0:c2:
         5f:71:f8:0e:79:64:2f:1c:56:6e:75:5a:92:b8:e3:9f:4e:b0:
         5f:43:80:92:87:17:a6:bf:28:cd:fc:ad:9d:be:35:bd:ce:d2:
         29:f3:42:77:96:ed:3c:79:5b:b0:83:3b:3a:2e:0f:66:bf:29:
         a0:64:d5:06:b7:68:9e:1d:79:e8:2b:e9:33:d6:74:54:4c:a2:
         88:f3:e2:2e:16:e6:83:4e:84:ea:e4:e5:4b:15:d6:7e:bd:f4:
         99:dd:aa:2e:8e:63:dd:49:54:bb:f0:10:95:02:ea:e9:55:f8:
         03:85:29:e1:a7:d9:d1:53:2c:b6:86:a9:ed:e6:56:b3:ac:2f:
         3d:34:60:2d:95:f0:03:21:6b:d2:91:6e:4f:a6:51:ea:7d:65:
         f6:16:4d:5c:17:48:6c:5a:26:55:43:44:12:f6:f9:76:de:8d:
         60:f0:46:8c:25:2a:8a:81:4c:ff:f0:3c:a5:7a:80:ba:72:11:
         e5:91:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----