Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/13750fac4aabcde546667f3279cd33726ab81c0d.roa
File:                     13750fac4aabcde546667f3279cd33726ab81c0d.roa (raw, json)
Hash identifier:          NyyO1mDZRuCLgOwbwFc/SdpZ1nK4fyc0hLRDZFye6Yk=
Subject key identifier:   68:E2:4B:4A:03:67:4C:45:71:57:24:88:1F:05:44:6B:66:5D:44:A1
Certificate issuer:       /CN=cda627952372991f835267505e212d55f4374cef
Certificate serial:       266E72
Authority key identifier: 20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/13750fac4aabcde546667f3279cd33726ab81c0d.roa
Signing time:             Thu 28 Dec 2023 07:30:01 +0000
ROA not before:           Thu 28 Dec 2023 07:30:01 +0000
ROA not after:            Sat 27 Dec 2025 07:30:01 +0000
asID:                     398712
IP address blocks:        2803:c880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518642 (0x266e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda627952372991f835267505e212d55f4374cef
        Validity
            Not Before: Dec 28 07:30:01 2023 GMT
            Not After : Dec 27 07:30:01 2025 GMT
        Subject: CN=13750fac4aabcde546667f3279cd33726ab81c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:09:1b:38:44:3f:7d:5c:35:e0:52:8c:9e:
                    6e:af:a8:ae:7b:b8:16:ff:32:36:49:4f:96:38:93:
                    94:b3:63:3b:df:fe:85:42:5b:5b:d2:5f:89:a8:dd:
                    dc:f4:6f:ab:09:8b:e2:37:f9:17:dd:42:19:71:f3:
                    5a:73:b9:ab:2f:00:35:8f:36:57:04:80:5c:cd:a7:
                    d9:5a:0c:13:10:98:28:ca:f5:1d:11:1e:af:ec:c3:
                    a1:09:31:dd:c2:b8:7a:4a:e4:7c:da:d4:a1:77:62:
                    46:2d:ba:81:a7:78:62:34:2d:35:ba:eb:00:63:4d:
                    19:73:ca:25:50:26:ca:dd:29:1b:4e:7c:3e:b8:cd:
                    72:7b:3e:21:4e:e0:78:db:8f:c3:fd:10:46:2d:e3:
                    fc:c9:ed:9e:54:6c:1e:3f:bb:93:4e:4a:d4:fe:d5:
                    f0:65:4d:d8:9f:63:8b:6d:3a:c0:67:92:94:84:e1:
                    63:55:c9:e7:a9:ab:24:0c:6e:5b:cd:9c:c3:c0:31:
                    e3:7a:27:a7:c9:10:ab:ca:30:22:e1:9f:ea:59:c9:
                    af:2e:58:86:c4:55:c8:ee:fb:3c:05:02:44:90:9b:
                    32:21:11:f2:fc:38:5e:ec:79:cb:10:ec:ca:f9:04:
                    f0:f6:6d:a8:dd:1b:93:d3:a9:3c:9e:a9:e6:df:40:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E2:4B:4A:03:67:4C:45:71:57:24:88:1F:05:44:6B:66:5D:44:A1
            X509v3 Authority Key Identifier:
                keyid:20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/13750fac4aabcde546667f3279cd33726ab81c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/cda627952372991f835267505e212d55f4374cef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c880::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:2a:46:db:7f:e9:c6:06:01:73:06:ce:c0:99:a6:04:c7:
         c6:f5:2d:c2:f2:97:f1:4c:8b:bc:52:f2:fd:a9:52:52:5a:6e:
         89:fd:27:d2:34:24:1c:78:19:44:b1:52:26:48:e7:e1:5c:6d:
         9e:a4:65:c6:47:6c:f8:42:1e:0c:78:09:cc:c4:28:ef:ea:01:
         94:55:ec:a4:87:4c:98:ec:a9:91:1a:91:1a:df:b4:d6:3b:90:
         c6:c2:e2:83:13:a9:8c:7d:1d:f0:50:08:e8:d2:e9:ff:7a:06:
         91:7e:43:5d:86:37:85:0a:97:04:ef:94:87:f6:76:c6:02:44:
         f1:65:60:47:c0:58:c0:80:a1:e9:9a:ab:f1:a4:df:8a:d3:78:
         b9:b6:89:eb:74:bd:e8:e9:8e:d1:32:17:1c:b1:8f:ef:e3:31:
         1f:e6:e4:80:44:5c:21:96:b2:11:25:84:39:85:d9:d7:84:6d:
         62:26:53:0e:f3:6a:ca:89:8b:79:dc:31:5d:d0:da:d9:2e:96:
         96:e4:40:11:ea:46:2f:cd:7b:ab:ca:c6:df:d7:ca:22:21:d6:
         06:29:f5:1f:66:42:0c:f2:d1:21:6b:4d:af:f4:ba:37:c2:c9:
         db:72:64:28:9e:b2:0d:44:f2:87:89:76:f7:a3:a6:96:5c:a3:
         89:a7:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----