Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ddf1010ecd3ac2e69eae7a7742202d2ab0ab2e29.roa
File:                     ddf1010ecd3ac2e69eae7a7742202d2ab0ab2e29.roa (raw, json)
Hash identifier:          l3HNuOR32klyslAHuYVXy7ZgT7IycfeKNn6Qp2x4keg=
Subject key identifier:   AC:6E:4B:CE:72:63:3C:E4:64:76:FE:B0:DE:0B:B7:85:40:5B:B2:9B
Certificate issuer:       /CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
Certificate serial:       22EB23
Authority key identifier: 63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ddf1010ecd3ac2e69eae7a7742202d2ab0ab2e29.roa
Signing time:             Fri 27 Oct 2023 14:04:08 +0000
ROA not before:           Fri 27 Oct 2023 14:04:08 +0000
ROA not after:            Mon 27 Oct 2025 14:04:08 +0000
asID:                     269833
IP address blocks:        2803:cf60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288419 (0x22eb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
        Validity
            Not Before: Oct 27 14:04:08 2023 GMT
            Not After : Oct 27 14:04:08 2025 GMT
        Subject: CN=ddf1010ecd3ac2e69eae7a7742202d2ab0ab2e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:b7:99:f9:0c:17:7e:85:64:5b:ed:74:b4:
                    16:a7:f0:0a:60:55:dc:aa:f4:67:18:e9:51:fc:01:
                    f0:de:5f:d5:8b:8c:0c:2e:54:9d:6e:f8:80:06:8a:
                    07:98:6c:c9:1f:a3:f7:67:87:76:67:a7:c6:ca:73:
                    b7:a6:91:b2:bd:67:ac:04:55:75:08:13:e8:fc:fa:
                    cd:61:63:28:bd:0a:b7:fc:ae:79:86:34:9c:68:ea:
                    4b:cc:65:44:3f:8c:fe:c9:b2:39:99:ab:cc:97:43:
                    b5:3b:f6:e2:52:1b:a1:32:67:7d:3c:41:80:8f:24:
                    13:0b:6d:a0:2a:51:6f:ab:c9:a3:33:5c:56:21:41:
                    80:7c:01:e4:7c:33:99:ec:4b:93:91:fc:ee:08:05:
                    b9:a4:8a:3f:f7:76:c5:9c:a2:60:5f:3c:3c:1b:d9:
                    03:1a:47:84:03:22:17:b9:0f:e9:81:c0:56:be:ea:
                    24:0b:61:ad:10:a8:70:33:6b:c1:02:54:e7:1d:b0:
                    36:9c:37:19:a3:ec:eb:3f:c8:ce:c9:28:d5:13:4a:
                    64:c0:f1:0e:c0:48:6f:3b:aa:a5:01:90:e3:12:05:
                    10:d2:93:18:27:2c:33:b9:7d:83:1a:27:c3:1f:0f:
                    d9:e6:f8:20:c2:81:87:fe:46:64:c8:5d:22:21:51:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6E:4B:CE:72:63:3C:E4:64:76:FE:B0:DE:0B:B7:85:40:5B:B2:9B
            X509v3 Authority Key Identifier:
                keyid:63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ddf1010ecd3ac2e69eae7a7742202d2ab0ab2e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:89:31:04:9f:7e:9a:02:1e:b7:c9:87:b4:f6:86:00:15:d9:
         22:00:b7:c7:d9:4b:ac:38:88:82:4a:ae:a7:ad:9c:04:06:06:
         6b:e2:6a:56:3f:c8:f7:84:da:d7:1b:88:1b:d7:de:a8:eb:ca:
         b3:11:3e:a2:d6:f3:39:bf:7b:73:a0:f2:6e:ff:1b:0d:0e:89:
         9d:aa:63:4a:63:ce:8c:96:8b:dd:28:68:e5:e4:29:e9:7c:de:
         2c:9d:61:ee:44:ff:f1:7c:da:67:a9:f5:a5:65:5e:ae:b7:db:
         b5:84:89:32:11:81:55:04:a8:cc:e0:43:d2:e1:cc:19:17:73:
         4a:2f:53:39:cf:94:eb:3c:76:63:dd:e8:df:01:4c:c5:21:44:
         2f:81:de:bc:73:38:98:05:b6:b2:85:47:7e:fc:64:33:31:fd:
         c2:3f:1e:ef:50:3b:1a:a0:8a:db:15:64:1f:72:b4:37:d3:f8:
         eb:de:57:7a:90:35:d9:bf:24:e9:fd:de:e8:f6:c3:d7:50:06:
         95:22:78:82:e3:a1:96:2c:75:31:55:7b:4d:1b:e0:4d:cb:32:
         8b:50:13:a0:86:da:40:4c:a6:97:23:c5:e0:ff:9d:84:8a:a8:
         21:25:ff:b8:7f:72:bf:34:08:e1:43:76:e0:35:15:ff:2a:d6:
         1f:0c:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----