Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/400ac77b21ebb357c38edcb727df49c2eeafc43e.roa
File:                     400ac77b21ebb357c38edcb727df49c2eeafc43e.roa (raw, json)
Hash identifier:          TVH+sHdIt7P79em/Ffggr4CvPoLg84kuyISMrycjg9A=
Subject key identifier:   D6:41:6A:3D:97:66:0C:09:47:D4:1D:6F:4F:6A:F4:A2:94:55:CB:2B
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1EC77E
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/400ac77b21ebb357c38edcb727df49c2eeafc43e.roa
Signing time:             Tue 14 Mar 2023 17:13:40 +0000
ROA not before:           Sun 12 Mar 2023 17:01:04 +0000
ROA not after:            Fri 14 Mar 2025 17:01:04 +0000
asID:                     266737
IP address blocks:        2803:1780::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017150 (0x1ec77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Mar 12 17:01:04 2023 GMT
            Not After : Mar 14 17:01:04 2025 GMT
        Subject: CN=400ac77b21ebb357c38edcb727df49c2eeafc43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:3b:f9:a6:20:95:ca:01:20:db:7f:db:36:
                    e6:0c:5b:39:53:cd:9f:b8:28:0f:76:36:63:67:c0:
                    4c:27:8c:25:e8:b0:21:ec:2d:f1:70:90:94:ea:97:
                    45:fb:60:46:05:24:68:56:78:5e:21:ab:cb:6f:58:
                    53:66:11:40:e8:60:a1:3b:8a:41:32:97:4b:59:bc:
                    32:85:f9:3c:2f:51:66:6f:66:33:c6:08:1d:94:7f:
                    0c:06:c0:ad:02:46:59:14:b7:28:a0:9a:5f:db:79:
                    d7:be:21:92:48:28:14:11:f7:17:13:d9:f9:7b:0c:
                    87:28:57:39:93:b0:bc:b5:1f:3b:c4:5a:a6:53:a4:
                    0f:6f:29:e4:4a:09:85:b0:d2:2e:fe:50:88:cf:3d:
                    e8:00:e5:b9:52:41:b5:9c:10:12:99:55:5e:51:b8:
                    17:d7:c8:4c:33:71:4e:2f:0d:85:79:07:9e:82:75:
                    60:66:4d:f6:05:60:12:22:c8:e2:f5:b7:b0:3c:a2:
                    0c:ce:d0:cb:0e:03:dd:03:fd:1e:23:00:80:2b:56:
                    96:ae:d7:5e:b0:f0:91:75:95:68:21:f5:00:62:de:
                    c8:8e:a3:a9:bc:36:99:5c:fc:d0:bb:92:11:3c:31:
                    e0:e5:43:bc:52:5d:dc:34:b8:3f:ad:2a:6a:de:ea:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:6A:3D:97:66:0C:09:47:D4:1D:6F:4F:6A:F4:A2:94:55:CB:2B
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/400ac77b21ebb357c38edcb727df49c2eeafc43e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/64

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:c3:77:de:a9:29:a7:61:76:51:9d:d6:64:fe:03:55:f5:
         34:47:c2:03:1c:c9:aa:e7:b3:f2:32:7e:40:1d:df:86:06:dc:
         9e:20:86:7c:91:c6:42:97:d0:ea:a9:4a:f8:3e:59:c2:99:a0:
         0d:b7:a8:97:44:b0:c1:13:66:2e:51:a4:82:53:92:1f:f4:5f:
         7b:e4:8f:f6:f2:bc:bf:37:b7:66:d6:eb:f0:3b:ad:6d:07:37:
         0d:ae:31:50:71:44:6a:de:e6:79:af:82:0d:7f:1f:4e:d6:b2:
         51:89:3c:48:c1:ce:b3:48:ed:89:55:29:6d:6c:bb:a0:82:f9:
         ce:26:37:68:bd:31:f4:9b:cc:f7:cd:96:77:10:17:da:7d:0d:
         9f:82:c2:9b:28:c6:6d:64:88:89:c9:80:89:f7:e3:5f:4c:24:
         67:5e:36:db:7a:35:5c:b5:92:57:6e:a1:33:93:9b:03:b8:f5:
         1d:cc:74:79:04:bd:d2:bf:19:21:5f:f5:05:19:77:79:48:4d:
         a1:96:83:f6:94:b2:e5:ac:ab:93:cc:6e:9c:27:c5:b5:d4:c1:
         70:42:a7:b4:5d:03:88:81:30:f3:33:e5:4e:53:2b:f4:c8:a0:
         0a:93:29:4f:5b:75:3d:de:c4:65:b2:f7:91:fb:db:a7:54:c5:
         82:a5:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----