Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/bffe6e57ffff4da4a637b53dcf884c774d8d55de.roa
File:                     bffe6e57ffff4da4a637b53dcf884c774d8d55de.roa (raw, json)
Hash identifier:          JCTNEk9+/WLwKMgsqTULgxKeCrUcsZXP215VWp/2K+A=
Subject key identifier:   32:BD:B1:3C:7A:90:C2:AD:84:4A:F1:EB:E4:A2:74:6B:BC:46:E1:E0
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       1F51F4
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/bffe6e57ffff4da4a637b53dcf884c774d8d55de.roa
Signing time:             Sun 09 Apr 2023 01:48:44 +0000
ROA not before:           Sat 08 Apr 2023 01:48:43 +0000
ROA not after:            Wed 09 Apr 2025 01:48:43 +0000
asID:                     3549
IP address blocks:        2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052596 (0x1f51f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Apr  8 01:48:43 2023 GMT
            Not After : Apr  9 01:48:43 2025 GMT
        Subject: CN=bffe6e57ffff4da4a637b53dcf884c774d8d55de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:42:85:72:a0:1e:78:ab:58:c4:e4:e7:2b:
                    89:06:65:94:07:fa:9d:a4:94:5e:b9:fd:49:1e:09:
                    ff:78:43:9b:15:b8:38:1c:64:ae:25:f0:d3:99:46:
                    ea:4c:8c:5f:73:d5:99:1e:27:c2:67:1c:65:11:df:
                    f2:2b:65:59:ac:01:63:6d:ab:a9:60:eb:74:f9:bc:
                    6d:cf:99:88:c1:e3:4f:66:df:7c:e6:cb:5e:08:df:
                    54:5b:cf:e4:61:42:33:94:5f:34:87:99:63:da:c6:
                    ff:99:bf:d5:c0:37:cf:20:b4:de:9c:0d:e3:8d:21:
                    26:d8:15:e4:3b:6b:ec:8d:f6:49:b9:e0:ca:ef:2f:
                    24:07:d0:75:45:58:17:a3:3a:3a:71:c9:05:0b:89:
                    56:cf:15:d1:c1:ae:7b:df:62:d8:04:22:52:7f:f2:
                    44:7e:8a:2a:25:f5:5c:7c:c8:8f:20:d1:f0:3e:be:
                    fe:06:a9:0c:50:a0:09:88:10:8d:44:58:2f:e9:a3:
                    7a:c0:49:21:c0:d0:f3:c6:4f:d9:b3:b8:55:9a:1a:
                    de:e0:c6:77:b0:b5:42:e6:9d:f8:1a:df:5c:94:c7:
                    88:8c:24:60:d7:7e:f0:ee:e1:78:ee:0f:43:9b:97:
                    f1:89:8d:21:88:1a:36:8c:1b:10:46:15:85:45:df:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BD:B1:3C:7A:90:C2:AD:84:4A:F1:EB:E4:A2:74:6B:BC:46:E1:E0
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/bffe6e57ffff4da4a637b53dcf884c774d8d55de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:81:39:31:ca:1e:9d:2c:42:9d:2e:52:73:da:d1:72:7f:09:
         fd:9f:99:52:8d:d3:86:2e:a7:1d:04:32:e9:07:40:72:d0:34:
         ae:72:08:dc:42:75:4b:7b:31:db:46:5d:96:c8:e7:14:3e:5f:
         f1:9c:88:39:4e:d6:10:76:78:6d:5e:ff:3d:e3:56:b9:7b:af:
         04:47:32:f0:2d:cb:26:e6:28:2a:10:4e:d2:47:79:8c:54:5d:
         1b:55:16:7d:aa:90:19:11:f8:5b:dc:6d:e1:f2:bd:c3:28:3f:
         07:d5:68:16:45:7c:c9:fb:5f:28:fa:55:33:01:6a:f6:78:00:
         9c:6b:1a:b0:a7:f7:28:3b:11:6f:86:88:74:8f:07:87:34:18:
         e1:1f:35:e8:9e:eb:64:6c:4c:05:91:77:f3:e4:c1:09:29:a5:
         1d:47:3e:a9:48:10:f0:c9:b3:67:b4:e4:ee:b1:7b:53:f5:b3:
         e1:07:3c:0b:c7:0a:39:be:59:77:ad:3f:45:c6:f4:63:31:37:
         25:bc:8c:ba:23:ef:10:1b:a0:ef:41:42:5a:c9:84:e2:59:00:
         ea:4d:43:f5:44:d7:9b:7f:28:c4:af:0d:1d:30:d8:6a:8a:a6:
         7a:3f:4c:e8:99:5a:c0:92:9b:6f:5d:89:8d:92:9b:b6:62:9d:
         29:c2:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----