Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/a4a2a028aecc05e8de7570b7c2eca3518d229b29.roa
File:                     a4a2a028aecc05e8de7570b7c2eca3518d229b29.roa (raw, json)
Hash identifier:          o6z/q1oDtgZDOXEn4RLXO9FfxL+JFnTdG5l9QQ8duIo=
Subject key identifier:   BA:5C:F8:75:D9:9B:83:52:28:B1:57:C0:F4:9E:6C:77:AA:80:A2:97
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       21EF8F
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/a4a2a028aecc05e8de7570b7c2eca3518d229b29.roa
Signing time:             Tue 27 Jun 2023 02:43:13 +0000
ROA not before:           Mon 26 Jun 2023 02:43:13 +0000
ROA not after:            Fri 27 Jun 2025 02:43:13 +0000
asID:                     266841
IP address blocks:        2803:52c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224015 (0x21ef8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Jun 26 02:43:13 2023 GMT
            Not After : Jun 27 02:43:13 2025 GMT
        Subject: CN=a4a2a028aecc05e8de7570b7c2eca3518d229b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:4e:dc:6d:dd:43:7b:f5:0c:b6:7f:0f:28:
                    e8:a4:27:6d:44:56:76:bb:70:b1:22:4e:ba:5a:0b:
                    dd:31:43:87:09:8d:46:fb:e6:01:e4:89:0e:06:f3:
                    65:2b:94:4b:da:b7:0e:ab:de:a5:25:da:d7:db:02:
                    3f:5b:0c:c3:24:2d:f6:38:d7:24:54:2d:07:0f:0e:
                    e1:e3:3e:9a:66:db:c4:69:69:2b:e6:45:94:d1:f1:
                    c3:a0:67:54:15:a8:df:6d:1e:46:7e:3c:85:eb:c5:
                    24:23:25:3a:aa:db:30:13:f6:dd:69:08:80:e4:64:
                    75:7f:b2:5a:b3:fe:67:1f:75:11:d1:a6:07:c3:1e:
                    44:bd:95:b1:14:e0:a5:df:9a:c0:af:61:5f:71:a4:
                    15:8b:da:32:aa:30:c0:6c:cf:c5:79:2f:6a:12:bc:
                    4c:c7:c0:7e:9c:fe:5b:a4:d3:35:c4:18:70:cb:5f:
                    10:90:46:35:23:4c:c4:f1:a7:b2:1d:de:61:dc:6d:
                    88:2f:98:10:a8:9c:07:d1:6a:9b:21:f7:6e:d6:e5:
                    a0:1a:43:cd:62:68:1e:46:48:17:7f:ac:9d:bf:5b:
                    b1:33:45:a2:f6:09:8a:33:12:48:69:d0:60:2e:cb:
                    fe:7a:c7:3f:00:41:f1:42:ba:5f:f4:72:73:7b:8f:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:F8:75:D9:9B:83:52:28:B1:57:C0:F4:9E:6C:77:AA:80:A2:97
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/a4a2a028aecc05e8de7570b7c2eca3518d229b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:52c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:83:c5:9d:bc:e0:e1:92:ce:a5:a6:40:2d:1b:86:b0:ae:
         71:b3:3d:34:ca:ff:c9:ea:48:6e:cd:9f:bb:70:05:4c:f0:67:
         9a:d9:d7:e2:28:57:6c:97:ef:a6:ba:49:9a:61:08:f4:a7:bb:
         ac:c2:95:bf:33:8c:81:be:ea:00:27:aa:fb:23:eb:62:3c:48:
         d5:6b:9d:42:41:35:db:b3:dc:17:ab:83:25:1b:f3:5e:75:d8:
         5e:f7:0c:ae:89:0f:06:06:e4:63:7a:9f:6f:4b:3e:5a:87:a7:
         b7:60:a3:4b:a5:9d:82:61:3a:b4:07:d1:12:18:0b:f8:d9:df:
         3a:f0:d4:45:09:80:b2:6e:9a:0b:d7:70:c3:ad:93:30:ba:fa:
         0c:67:d7:34:54:cc:44:78:10:16:85:45:7b:31:9c:09:ae:4b:
         c9:a8:0a:5a:d4:c2:7b:6c:c6:17:8e:04:c2:98:ab:d2:b8:98:
         68:08:48:85:34:e6:af:1f:c4:a9:9d:52:dd:94:28:3e:75:48:
         b6:ee:11:31:7a:bb:20:ca:c7:f1:c8:a9:3f:53:e3:b1:ec:a1:
         59:a4:61:63:63:06:06:82:cf:be:b9:30:21:3d:bf:27:36:2c:
         9a:35:78:e6:07:7f:6c:1b:3a:d0:bc:f7:c4:50:b9:4c:73:e8:
         cb:46:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----