Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/9c5554a8931be94f85503e55a5920ff89f80f40e.roa
File:                     9c5554a8931be94f85503e55a5920ff89f80f40e.roa (raw, json)
Hash identifier:          O7XtqwkylYanv8jBaHeORH4qaei3nJoP14KLqLNsZ68=
Subject key identifier:   D4:2B:88:07:93:A9:22:60:59:5A:D3:70:9A:39:04:6E:F5:E5:78:32
Certificate issuer:       /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial:       26D963
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/9c5554a8931be94f85503e55a5920ff89f80f40e.roa
Signing time:             Tue 27 Feb 2024 11:10:25 +0000
ROA not before:           Tue 27 Feb 2024 11:10:25 +0000
ROA not after:            Fri 27 Feb 2026 11:10:25 +0000
asID:                     263801
IP address blocks:        2803:7c40::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546019 (0x26d963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
        Validity
            Not Before: Feb 27 11:10:25 2024 GMT
            Not After : Feb 27 11:10:25 2026 GMT
        Subject: CN=9c5554a8931be94f85503e55a5920ff89f80f40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:a3:2f:e2:34:7f:9a:d8:14:4b:94:51:2a:
                    41:df:89:e4:1c:58:03:af:83:e0:03:74:c8:27:b3:
                    38:8d:fd:9c:3f:9a:26:e1:19:9b:6a:3d:96:a6:6c:
                    10:f0:54:ef:43:0c:98:a2:ce:5d:38:ae:68:25:96:
                    18:93:69:e2:09:b4:c5:e2:6f:87:25:b8:78:e7:b3:
                    f3:41:62:cc:7d:8a:42:2d:25:26:07:c5:7a:08:79:
                    f6:4c:0b:a3:5b:86:97:30:53:99:85:ba:dc:ed:0c:
                    42:3f:59:d3:5c:e5:15:c1:a1:e0:a4:8b:30:8d:fb:
                    b1:2c:e4:65:be:72:f7:da:f6:92:2d:5e:c6:a9:8b:
                    e7:d3:c7:8b:a0:55:cc:57:a6:bc:cd:f3:5d:34:0a:
                    ac:6d:2e:3e:f6:75:31:9c:e5:fb:8a:d0:11:d8:be:
                    31:44:fb:2c:1f:5f:09:c5:a3:fd:3f:c6:78:0d:3e:
                    ab:59:a0:d7:3a:43:0b:37:73:7b:47:a8:5b:fd:e4:
                    b8:35:7c:49:ff:46:f9:67:22:28:49:9d:26:7d:ac:
                    07:fb:85:04:ed:ec:91:0f:e9:ca:29:3e:97:01:cd:
                    bc:bf:99:88:39:c5:39:cd:9e:4a:af:63:e8:a6:0b:
                    87:26:f7:9a:c2:ed:00:2c:86:01:92:17:8c:b1:3b:
                    cf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2B:88:07:93:A9:22:60:59:5A:D3:70:9A:39:04:6E:F5:E5:78:32
            X509v3 Authority Key Identifier:
                keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/9c5554a8931be94f85503e55a5920ff89f80f40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:f4:f3:5a:81:ab:2f:8f:60:d2:cd:f8:be:9c:e9:cf:38:
         d1:c4:f5:80:e1:59:37:d5:dd:5b:08:9d:32:6e:eb:fe:df:6d:
         c2:3c:c0:ec:08:86:7a:d3:ac:d7:1c:24:01:d5:56:86:c8:ff:
         59:13:81:36:3f:27:11:de:58:fa:0b:37:05:1a:84:06:fb:b8:
         80:56:9e:ac:76:7f:0a:85:0d:33:95:94:47:a7:87:91:c8:81:
         f9:7f:1c:01:ce:77:bc:63:47:10:19:c6:06:50:d9:35:b8:12:
         e5:62:cd:9b:56:64:1f:04:75:0a:f0:de:86:f5:b4:34:b1:e4:
         17:77:00:d7:a7:8d:6d:d1:eb:44:3d:b7:c1:c9:e9:2c:7b:f5:
         41:1d:d3:27:8b:b5:a6:10:c5:ab:e7:e2:f1:d8:06:2c:18:90:
         ce:a3:73:29:57:98:cc:73:6b:5a:6b:55:6e:4d:bd:7e:cd:fe:
         bc:bc:d4:ae:cc:5b:1c:bd:ba:c1:a1:3b:ee:b1:34:49:67:06:
         c2:93:8c:5e:2e:b4:b5:e3:b8:07:4c:0d:42:3c:20:af:be:2d:
         72:2c:0b:4f:d3:0a:72:b5:83:19:f6:7c:78:2e:02:55:ec:b9:
         6d:af:56:70:cb:1c:f5:51:e5:d5:68:71:e5:c9:e6:ff:56:c6:
         aa:67:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----