Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/2e7d9fbff20fa4fa4ce8fd38153646579b59815b.roa
File:                     2e7d9fbff20fa4fa4ce8fd38153646579b59815b.roa (raw, json)
Hash identifier:          QCNGqToFKprwejrhUMWdcyZNzc5A+NQMNDD37XHyja8=
Subject key identifier:   28:4E:16:AC:92:12:3B:91:68:C9:61:46:D8:61:45:94:A1:3E:C3:50
Certificate issuer:       /CN=bbbbe2003ec2621c31929aaf5d5c9344a23f7a47
Certificate serial:       240DDF
Authority key identifier: C1:93:99:2A:29:78:CE:60:54:5B:6A:9B:61:3E:4C:B5:5A:85:22:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/2e7d9fbff20fa4fa4ce8fd38153646579b59815b.roa
Signing time:             Tue 05 Sep 2023 13:57:43 +0000
ROA not before:           Mon 04 Sep 2023 13:57:42 +0000
ROA not after:            Tue 05 Sep 2028 13:57:42 +0000
asID:                     265760
IP address blocks:        2803:9300::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362847 (0x240ddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbbe2003ec2621c31929aaf5d5c9344a23f7a47
        Validity
            Not Before: Sep  4 13:57:42 2023 GMT
            Not After : Sep  5 13:57:42 2028 GMT
        Subject: CN=2e7d9fbff20fa4fa4ce8fd38153646579b59815b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:ea:e5:f6:6d:19:f6:64:da:4a:c7:6c:bd:
                    98:fb:ed:1d:27:a6:83:6a:f4:1d:b8:95:b3:b1:6b:
                    b9:88:95:b1:8e:2d:4f:6a:56:0c:7c:2c:4a:2d:4b:
                    62:5d:6b:c8:59:29:3e:42:65:59:15:6c:18:ec:fb:
                    fe:80:db:88:94:91:52:3f:dc:b5:1b:f3:73:fb:a0:
                    be:14:47:dd:08:1e:50:3e:c3:58:7b:d1:37:b3:b7:
                    4e:35:a0:8f:75:aa:db:82:4d:f4:cc:d4:82:ed:58:
                    82:7b:d4:ed:d5:31:b9:42:98:ca:14:dc:97:a7:2a:
                    8b:a0:89:2b:0c:4b:6d:67:1c:9d:22:3a:f6:d8:e3:
                    fd:d5:cc:51:f9:be:00:3a:d7:96:c1:0b:41:7f:32:
                    a8:fd:e2:39:68:03:66:71:54:7d:76:f4:45:3f:6b:
                    aa:4c:a1:60:a2:bf:e3:20:c5:5e:7f:e8:b8:44:db:
                    86:1c:8e:8f:68:86:4f:65:42:fa:69:49:09:70:df:
                    85:53:7b:46:73:8f:7c:c4:35:31:52:8a:bc:f6:f9:
                    05:81:5d:cf:a0:11:6f:0c:66:b6:ff:0d:40:2b:e6:
                    24:67:0b:93:7c:8c:3a:c3:02:79:36:58:ff:d6:16:
                    48:f1:4d:24:fd:bd:16:ce:38:fb:66:b8:54:e4:ee:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4E:16:AC:92:12:3B:91:68:C9:61:46:D8:61:45:94:A1:3E:C3:50
            X509v3 Authority Key Identifier:
                keyid:C1:93:99:2A:29:78:CE:60:54:5B:6A:9B:61:3E:4C:B5:5A:85:22:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/2e7d9fbff20fa4fa4ce8fd38153646579b59815b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:8e:ea:9e:64:ad:2c:d0:75:eb:71:bc:f8:29:54:0e:79:
         bf:4b:1f:a8:c5:f4:7c:9a:7e:68:72:ac:91:30:98:ac:a6:41:
         2c:d1:a6:89:cf:a9:15:0d:dd:58:e9:f0:05:78:b2:7d:ea:1f:
         61:bc:c2:65:7d:fc:92:f4:76:6f:a9:ab:dc:83:65:a9:10:64:
         40:90:b0:bb:23:df:13:7d:84:dd:a8:23:64:75:ff:6e:de:69:
         55:e0:f9:a0:c0:db:c3:03:ff:a2:0e:6a:78:eb:be:26:8b:d1:
         74:20:38:63:a7:2c:49:69:39:a9:6a:c6:ae:da:71:a3:74:85:
         db:c5:56:a4:76:45:f6:dc:ee:0a:21:74:42:71:6f:1f:50:42:
         83:78:2c:eb:83:4e:b9:bf:36:59:21:dc:71:c9:6f:61:2e:81:
         e7:c6:31:52:9e:59:d6:75:86:96:92:8e:1e:d9:30:fd:0b:12:
         4b:c0:a9:60:5a:7d:ac:ec:76:6c:5a:94:0c:00:5f:d3:f0:a8:
         3b:21:09:20:d9:05:fe:79:58:16:30:da:7b:02:e9:43:6f:b2:
         7d:ed:22:ac:36:b2:53:8d:1d:aa:53:e1:ca:82:9e:88:dc:5e:
         40:85:0c:ae:55:a5:77:d8:a7:13:49:87:1e:9a:58:4c:70:d5:
         9c:fa:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----