Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/ddd00b030bbe0d20e95aa7ad3d78283f4ffa7ba8.roa
File:                     ddd00b030bbe0d20e95aa7ad3d78283f4ffa7ba8.roa (raw, json)
Hash identifier:          rR1+tHFdfBHREOJKWyXaCHJN+dFoBPlVnwIS5rIXrEM=
Subject key identifier:   E1:6E:B7:23:3A:7D:8A:84:A2:71:7E:68:01:7C:8E:C1:E4:57:F7:CA
Certificate issuer:       /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial:       217DDE
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/ddd00b030bbe0d20e95aa7ad3d78283f4ffa7ba8.roa
Signing time:             Sat 18 Nov 2023 07:30:00 +0000
ROA not before:           Sat 18 Nov 2023 07:30:00 +0000
ROA not after:            Mon 17 Nov 2025 07:30:00 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194910 (0x217dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
        Validity
            Not Before: Nov 18 07:30:00 2023 GMT
            Not After : Nov 17 07:30:00 2025 GMT
        Subject: CN=ddd00b030bbe0d20e95aa7ad3d78283f4ffa7ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:80:4a:bf:4f:32:4d:b2:7f:d8:bb:6c:42:
                    f7:21:9f:7a:0b:c4:90:4b:2a:e3:1a:ce:53:fc:50:
                    c0:09:ea:3d:12:78:9f:5c:cc:03:b5:40:da:6d:1b:
                    80:34:5d:1d:35:6c:93:1a:02:4d:f8:94:29:8a:68:
                    bf:72:bb:28:8d:63:e5:49:04:56:1f:20:b7:5e:71:
                    7a:98:f2:54:0e:3b:24:7c:00:b6:ae:7a:0d:76:5c:
                    86:1e:cd:6b:52:ca:4b:2d:5c:9b:00:23:19:77:21:
                    3a:d2:78:27:c2:43:ca:93:d3:bc:16:dd:db:f4:a1:
                    d1:e6:e4:02:b0:10:0d:dd:ce:6d:b9:3d:cd:72:05:
                    ed:55:2d:e2:ff:e0:6b:6b:88:86:d1:e3:41:be:49:
                    fb:ca:aa:c4:1b:40:67:a9:b2:97:b3:1e:a0:d5:ff:
                    9d:dd:74:68:55:42:92:f2:75:89:f9:cf:f4:97:b3:
                    eb:90:2a:7e:d3:5d:43:f1:9d:6f:d5:bf:a2:0d:7d:
                    cb:6c:37:ea:00:07:f2:e1:0e:2e:4c:b3:7c:34:ad:
                    3c:18:4c:37:1b:a9:7d:ed:75:de:46:e4:c1:17:3e:
                    4d:57:ce:44:a3:74:8d:07:69:3b:9f:2e:69:27:d5:
                    66:4e:cc:9b:f3:7e:a2:3f:33:66:73:cb:7a:7e:75:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:B7:23:3A:7D:8A:84:A2:71:7E:68:01:7C:8E:C1:E4:57:F7:CA
            X509v3 Authority Key Identifier:
                keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/ddd00b030bbe0d20e95aa7ad3d78283f4ffa7ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:8e:79:40:83:87:88:7a:83:d5:42:7b:11:19:6d:df:fa:
         31:46:41:10:41:e5:cb:08:52:bb:08:38:dd:4c:2e:99:34:e3:
         ba:96:c6:f7:3e:e7:0e:63:36:9d:79:d0:9d:c5:4c:22:2a:39:
         a9:06:c6:06:6b:25:3a:0f:f8:99:f6:10:ea:1e:13:a5:a9:f9:
         63:04:5d:1e:ce:f0:c2:ce:ae:96:4d:d7:d5:15:9d:c8:f4:98:
         3f:43:58:96:09:c1:f9:67:d0:5e:f8:39:54:bb:65:9e:2f:34:
         ce:8c:62:48:b9:0c:0f:02:9a:21:66:cc:6d:05:30:7c:59:83:
         63:48:cf:9e:d1:e8:a0:e4:a8:44:2d:9e:14:54:b3:0a:7b:69:
         52:bb:18:9d:b7:af:3a:09:39:8f:fe:73:8e:b6:9a:7b:1b:8f:
         41:f2:f4:b2:ea:97:de:bd:2d:22:98:06:a6:0f:dd:47:35:31:
         ee:8d:b4:74:61:50:61:56:e3:94:46:5f:78:42:4c:16:26:62:
         20:2a:12:01:f9:2a:7c:48:ed:70:bf:61:03:25:f7:ab:67:61:
         41:85:ce:7d:da:8d:6f:65:cd:00:b3:d2:36:32:87:1f:a9:dc:
         3e:a6:46:35:a8:1d:b7:e6:91:8c:0a:1c:3d:df:6c:d2:94:51:
         f7:9b:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----