Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/cddca8ec068fb04900fbc43513750767aee5f934.roa
File:                     cddca8ec068fb04900fbc43513750767aee5f934.roa (raw, json)
Hash identifier:          lkBk6KRKlioSllNJe/to3LxANYNJT6oQueKG9x09wo8=
Subject key identifier:   C8:DC:72:27:8F:B9:EB:52:87:B9:20:8A:CC:2D:58:A1:B4:99:76:91
Certificate issuer:       /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial:       29ACDA
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/cddca8ec068fb04900fbc43513750767aee5f934.roa
Signing time:             Sat 16 Mar 2024 22:03:26 +0000
ROA not before:           Sat 16 Mar 2024 22:03:19 +0000
ROA not after:            Fri 16 Mar 2029 22:03:19 +0000
asID:                     262206
IP address blocks:        2803:16a0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2731226 (0x29acda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
        Validity
            Not Before: Mar 16 22:03:19 2024 GMT
            Not After : Mar 16 22:03:19 2029 GMT
        Subject: CN=cddca8ec068fb04900fbc43513750767aee5f934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:a3:73:d4:8a:94:9c:cd:0e:8e:b3:19:20:
                    23:7c:81:ce:87:75:d6:02:23:b2:f1:33:6a:3d:a5:
                    ee:a7:c3:fb:7b:a5:c2:a8:d3:3c:89:e4:f5:9d:7a:
                    e9:63:10:28:3d:b1:4e:71:08:dd:ab:6d:85:24:52:
                    51:f7:c8:a9:f0:fd:20:98:7b:09:a1:af:8a:24:1c:
                    77:54:f6:c4:76:fb:3f:60:00:5a:a7:bf:4f:14:6f:
                    2f:77:a6:64:0a:95:01:9e:5c:3b:b5:7d:39:ba:a0:
                    8e:78:69:cd:ef:58:cb:8e:4e:65:5c:e0:8c:9f:81:
                    4d:9c:e3:b7:69:2d:38:9d:0a:94:bf:39:a3:b4:38:
                    34:78:0c:7f:ad:64:8a:f5:8e:66:30:85:ee:68:88:
                    88:ba:ed:32:d9:9c:46:aa:cc:d5:82:7f:8a:07:c9:
                    19:18:aa:07:02:d3:6a:5d:f5:31:e3:7a:53:7f:e3:
                    b9:82:90:c5:34:12:df:98:54:09:c9:e0:32:79:1c:
                    74:1f:3e:74:88:9a:6b:03:10:02:5c:98:d1:51:dd:
                    2e:3b:9c:96:46:0c:50:9e:2e:57:2b:a9:78:72:ac:
                    22:b5:40:88:cd:f1:31:54:16:9d:08:eb:6b:51:01:
                    ff:f4:b9:04:1c:65:1f:a4:d8:ce:b2:6e:ab:6b:5a:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:72:27:8F:B9:EB:52:87:B9:20:8A:CC:2D:58:A1:B4:99:76:91
            X509v3 Authority Key Identifier:
                keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/cddca8ec068fb04900fbc43513750767aee5f934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16a0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:c2:69:58:21:74:19:76:89:6d:c5:db:2e:9e:ac:28:dd:
         e2:a5:d7:aa:30:0c:c4:63:bc:c9:96:d0:d8:8a:13:9b:5b:07:
         19:1d:31:96:59:4b:ea:66:ca:15:b2:5e:56:f5:21:3f:42:79:
         94:12:0a:0b:81:0e:51:ce:67:22:c4:8c:0e:0c:4e:8b:73:f3:
         bf:35:31:ff:65:01:5d:f7:31:58:08:1a:c2:db:86:61:a1:4a:
         c7:f4:74:0e:65:e3:b0:a5:3e:31:e3:d7:e7:97:ce:79:17:b1:
         33:e9:69:b1:19:1d:5a:78:06:f3:7b:1e:ae:75:f8:69:c7:31:
         55:f8:72:93:d7:ab:b6:35:e8:69:da:ec:17:23:4d:53:77:c0:
         86:f3:c2:4e:2d:2e:c2:61:2c:1d:f6:a9:43:2e:58:63:f9:21:
         f1:54:e7:d2:17:39:3b:cb:9c:74:82:bc:bd:0c:f4:18:7b:3b:
         29:06:f7:ea:d8:87:9c:34:81:28:bf:76:5b:09:18:bf:39:1c:
         e5:e2:b4:38:f2:d0:8c:2d:59:d9:ca:97:30:01:33:30:e2:5e:
         83:a5:a0:0d:40:20:90:07:6a:f4:b9:7e:de:f3:84:2a:0e:ed:
         cb:b8:c5:92:48:e4:96:b8:45:69:27:9f:fe:5b:72:60:9e:63:
         b7:76:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----