Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/b2235560c91e7ab6dfd55db35ea8e39d69ecd829.roa
File:                     b2235560c91e7ab6dfd55db35ea8e39d69ecd829.roa (raw, json)
Hash identifier:          n56DSOzvopbxMTxm5qG7gUKdcs71HI6USzSmdwALVgY=
Subject key identifier:   29:32:BF:88:1D:0A:84:90:A3:0A:19:B8:72:77:23:EC:D1:1A:5C:2C
Certificate issuer:       /CN=5953521b0ed37abec8837745b03e97172d449657
Certificate serial:       05740A
Authority key identifier: 06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5953521b0ed37abec8837745b03e97172d449657.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/b2235560c91e7ab6dfd55db35ea8e39d69ecd829.roa
Signing time:             Wed 27 Dec 2023 18:11:20 +0000
ROA not before:           Wed 27 Dec 2023 18:11:20 +0000
ROA not after:            Sat 27 Dec 2025 18:11:20 +0000
asID:                     272814
IP address blocks:        2803:4490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357386 (0x5740a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5953521b0ed37abec8837745b03e97172d449657
        Validity
            Not Before: Dec 27 18:11:20 2023 GMT
            Not After : Dec 27 18:11:20 2025 GMT
        Subject: CN=b2235560c91e7ab6dfd55db35ea8e39d69ecd829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:91:f0:69:1e:7f:8c:49:ed:73:51:c1:2e:
                    46:4c:1f:c3:8c:94:1f:83:1a:cc:ae:cb:a3:d6:d7:
                    60:19:ae:28:e0:b3:43:7f:10:cb:e5:47:c0:09:95:
                    ec:96:92:15:d4:76:07:ff:2f:b8:72:ac:e4:a7:e8:
                    9c:0a:e8:b8:56:0c:0f:a3:26:98:fb:d5:45:68:59:
                    96:f5:89:ab:d5:fb:64:fc:8d:9f:5b:f9:ff:65:6d:
                    7b:c9:ca:eb:85:ef:61:78:a0:fc:1c:b3:11:4f:83:
                    af:55:ca:72:14:fe:ee:ec:3c:8d:8a:90:04:4e:8c:
                    fa:1e:96:6d:71:0a:10:f1:20:b5:1d:04:41:0b:6d:
                    59:0f:08:6e:8e:39:af:61:25:e6:cb:53:86:c6:df:
                    b7:27:ae:46:f6:32:7f:cf:99:b6:f3:e8:78:12:95:
                    fb:64:88:45:55:29:8e:ac:b4:ad:91:0b:0c:1f:c6:
                    a1:c2:f9:48:62:4c:51:8f:63:4f:d7:14:05:f2:26:
                    19:b1:10:6d:9c:42:d6:fa:19:7d:2b:78:e5:7b:67:
                    39:6e:6d:00:4c:04:ce:d1:25:30:58:80:4c:f5:fb:
                    d1:87:2b:d8:97:a6:95:7e:03:5f:2b:29:6f:3d:e2:
                    bf:33:d8:1f:dc:91:ca:37:54:cf:b7:7e:f5:14:5d:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:BF:88:1D:0A:84:90:A3:0A:19:B8:72:77:23:EC:D1:1A:5C:2C
            X509v3 Authority Key Identifier:
                keyid:06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5953521b0ed37abec8837745b03e97172d449657.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/b2235560c91e7ab6dfd55db35ea8e39d69ecd829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/5953521b0ed37abec8837745b03e97172d449657.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4490::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:15:e2:ba:99:0a:f8:fe:08:fd:7d:1a:54:69:dc:e1:54:
         79:4d:9c:2a:ff:07:08:73:db:72:98:f0:3c:35:89:ab:e2:59:
         b8:03:c6:5c:47:0e:83:f8:6d:eb:cc:14:0f:ea:8b:8c:e6:0b:
         51:7d:d7:82:e0:49:9d:a5:3d:a8:34:7c:44:ba:4b:5d:5a:08:
         e6:3a:24:1a:a8:de:23:43:4e:aa:f2:b1:56:7d:1a:42:d4:37:
         22:3b:af:4e:e3:5b:d4:af:58:c1:1c:be:87:8c:23:db:3c:51:
         3d:e0:3f:6d:14:c5:28:02:bf:ef:41:54:38:5b:7a:39:2d:f4:
         03:2f:81:bb:77:ed:2f:9a:7d:25:19:a7:af:fb:49:b7:aa:0b:
         95:1c:fe:62:10:47:d2:67:69:77:cf:2a:f1:bb:a9:cb:02:7d:
         52:17:78:53:ac:b1:71:29:f0:ab:24:3d:78:fd:08:d4:1c:f4:
         2e:ea:12:fb:d6:61:70:4b:fc:13:e2:2e:d1:21:d2:15:3c:f2:
         ed:ce:a1:38:05:74:5b:77:cf:97:54:01:9e:10:94:8a:29:56:
         2f:d6:e4:7a:fa:da:49:42:49:30:b1:7f:65:c3:43:43:b2:2b:
         16:51:ee:0b:f6:44:bc:03:52:e3:9b:cf:78:98:7f:07:7e:1d:
         1e:e6:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----