Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/b55436fc2ad6d9a7ee3c161ca86a6dfd3a2eca1c.roa
File:                     b55436fc2ad6d9a7ee3c161ca86a6dfd3a2eca1c.roa (raw, json)
Hash identifier:          0UDvF4LS/bv6y+OgAB0iH4ObAlRNVfv4s5+B2Z4KTMg=
Subject key identifier:   71:5C:37:F3:DD:F5:BE:F8:BE:6F:89:8E:7E:B6:6A:1B:F0:52:FC:9C
Certificate issuer:       /CN=23f5787e79929401bde2fe34776c26caf023af9b
Certificate serial:       86BF
Authority key identifier: E6:39:50:A5:22:0F:1F:A5:69:A0:AD:79:8F:E6:9B:9B:E3:8B:28:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23f5787e79929401bde2fe34776c26caf023af9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/b55436fc2ad6d9a7ee3c161ca86a6dfd3a2eca1c.roa
Signing time:             Mon 27 Nov 2023 21:49:43 +0000
ROA not before:           Mon 27 Nov 2023 21:49:43 +0000
ROA not after:            Thu 27 Nov 2025 21:49:43 +0000
asID:                     273127
IP address blocks:        2803:2450:200::/40 maxlen: 40
                          2803:2450:300::/40 maxlen: 40
                          2803:2450:400::/40 maxlen: 40
                          2803:2450:500::/40 maxlen: 40
                          2803:2450:600::/40 maxlen: 40
                          2803:2450:700::/40 maxlen: 40
                          2803:2450:800::/40 maxlen: 40
                          2803:2450:900::/40 maxlen: 40
                          2803:2450:a00::/40 maxlen: 40
                          2803:2450:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34495 (0x86bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f5787e79929401bde2fe34776c26caf023af9b
        Validity
            Not Before: Nov 27 21:49:43 2023 GMT
            Not After : Nov 27 21:49:43 2025 GMT
        Subject: CN=b55436fc2ad6d9a7ee3c161ca86a6dfd3a2eca1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:95:ae:70:fe:3f:19:82:fd:ec:8e:97:39:
                    4e:65:4c:f9:6d:77:0d:74:ee:18:14:93:31:aa:4c:
                    c0:9f:53:16:27:a5:b9:4a:10:0d:95:10:be:9e:bf:
                    73:e2:b9:ac:a6:fb:75:04:63:04:04:55:fe:f4:96:
                    ff:d2:5c:c9:37:d8:90:21:d7:e0:c6:0f:ea:9c:ce:
                    11:11:d5:e7:94:24:24:0b:fb:75:a5:a4:58:cf:88:
                    20:7a:16:a0:90:a0:b4:55:63:34:0f:fa:0d:a8:38:
                    53:e7:5b:8d:8c:98:a0:df:c9:fe:00:84:a2:6d:e5:
                    83:27:d6:8f:d0:e7:e1:f2:bf:68:14:56:6a:d8:9a:
                    0d:09:da:99:e6:fb:9a:3a:91:be:b8:95:7f:e0:0e:
                    1a:70:f3:b0:88:b2:3c:0e:c8:6b:be:d2:84:4c:75:
                    0b:fd:d2:d4:59:b6:90:3a:9f:e1:fb:e6:28:ce:4f:
                    2d:fa:d1:01:22:db:15:01:81:9d:34:a8:37:f8:ba:
                    bf:94:dc:e0:85:dd:2b:53:a0:7b:f2:14:14:eb:0b:
                    a0:fd:25:d6:42:04:3c:e6:c4:f3:d7:83:de:7e:24:
                    18:ff:6a:cb:2d:96:00:4e:72:18:97:24:ff:14:3c:
                    8f:73:f9:1e:de:43:91:4f:df:6a:01:97:31:79:81:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:37:F3:DD:F5:BE:F8:BE:6F:89:8E:7E:B6:6A:1B:F0:52:FC:9C
            X509v3 Authority Key Identifier:
                keyid:E6:39:50:A5:22:0F:1F:A5:69:A0:AD:79:8F:E6:9B:9B:E3:8B:28:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23f5787e79929401bde2fe34776c26caf023af9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/b55436fc2ad6d9a7ee3c161ca86a6dfd3a2eca1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/23f5787e79929401bde2fe34776c26caf023af9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:200::-2803:2450:bff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         01:a6:c0:e5:d9:46:4a:76:be:02:f6:7f:2f:b1:9a:e4:eb:21:
         89:95:0a:f4:14:dc:89:4d:be:b8:a8:0c:09:ee:53:40:93:ca:
         05:ef:c4:fe:72:02:13:11:12:b4:78:6b:c0:05:60:c6:dc:ee:
         03:cc:65:21:a6:19:8c:10:ed:cb:1b:e1:a9:f7:bf:4a:36:a5:
         62:9b:47:0e:9b:b1:a7:bb:41:d7:df:35:a5:33:b8:1e:37:7c:
         26:86:bb:10:25:80:98:8e:f4:8c:e9:52:04:3a:b8:44:e6:18:
         70:ed:29:65:56:9b:ef:ed:44:28:c1:52:eb:e2:f8:e1:02:bc:
         d7:4a:7a:63:3a:bf:69:0f:e2:a1:9b:ee:5a:7f:50:ec:b8:46:
         91:f1:8e:14:0d:92:50:e6:29:84:7a:4a:07:05:1d:6d:07:89:
         fe:70:e4:1c:76:5d:86:99:ff:d5:cd:5f:b5:02:47:fe:da:67:
         cc:43:e1:d0:c8:de:68:c9:78:6a:4f:c4:b4:99:17:de:86:2e:
         14:cc:f5:c1:3a:72:26:41:ad:6c:97:cd:62:ea:31:14:4a:9f:
         30:22:d8:b5:c7:95:0d:c2:0e:25:a7:90:21:31:29:e6:92:29:
         6b:f1:54:0e:f2:f0:91:d4:a6:a8:5d:7b:2e:f0:da:dc:35:bd:
         19:c6:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----