Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/74bd79d2116570a6362347b3d564052d17db4d13.roa
File:                     74bd79d2116570a6362347b3d564052d17db4d13.roa (raw, json)
Hash identifier:          Y0wUqS3mEfi3clpRuMc8Mw+5q64PvqOxxAKIwjYSYYg=
Subject key identifier:   6D:29:85:03:20:43:70:D8:9C:57:E5:A8:44:E4:6C:38:B7:EB:B3:BA
Certificate issuer:       /CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
Certificate serial:       01E11C
Authority key identifier: 2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/74bd79d2116570a6362347b3d564052d17db4d13.roa
Signing time:             Thu 11 Apr 2024 11:28:03 +0000
ROA not before:           Thu 11 Apr 2024 11:28:03 +0000
ROA not after:            Sat 11 Apr 2026 11:28:03 +0000
asID:                     273165
IP address blocks:        2801:135::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123164 (0x1e11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f
        Validity
            Not Before: Apr 11 11:28:03 2024 GMT
            Not After : Apr 11 11:28:03 2026 GMT
        Subject: CN=74bd79d2116570a6362347b3d564052d17db4d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:4f:82:67:38:b9:51:c6:f9:59:1d:af:f4:
                    dd:26:57:0f:9d:d8:93:7e:ff:5d:72:b8:be:1d:d2:
                    e4:03:2f:da:aa:56:56:53:f4:35:30:92:ce:7e:da:
                    e1:83:07:b5:1f:72:f2:c0:58:2b:41:43:94:27:eb:
                    07:98:3f:7b:c3:06:94:da:64:a7:3a:58:61:87:21:
                    62:a6:c8:63:11:18:58:71:ae:f9:b6:7b:75:3d:ca:
                    d3:5c:b1:a5:9b:0a:b7:61:21:f1:04:ab:78:1d:67:
                    d5:a7:0c:13:9b:c1:02:6d:fd:48:93:af:9d:0f:26:
                    e7:ed:59:75:50:ba:e6:ed:22:16:1c:d2:81:2e:d0:
                    8b:f5:c4:f6:1f:c4:cb:98:f1:b5:db:70:a2:e2:b1:
                    88:3c:bc:b1:3f:3e:3b:a8:91:9c:aa:21:54:79:3f:
                    d4:50:d5:5b:b5:fd:2e:a0:4d:e1:e3:44:6d:bb:a8:
                    3c:22:7e:2d:ff:3a:24:dd:6a:41:d3:2b:6a:d9:26:
                    52:4c:21:9b:d6:85:f6:5f:d5:82:ca:1c:2c:61:24:
                    1f:1b:11:2f:dc:d6:d2:41:3e:45:13:70:a6:e1:ed:
                    cd:ba:b3:11:0b:36:14:57:e9:49:6f:b6:6f:c9:a1:
                    44:91:0a:6b:07:cf:01:eb:ba:86:e6:2f:9d:5b:15:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:29:85:03:20:43:70:D8:9C:57:E5:A8:44:E4:6C:38:B7:EB:B3:BA
            X509v3 Authority Key Identifier:
                keyid:2B:D5:1B:00:F7:B1:F7:25:AC:C3:A4:8D:4C:AF:F5:01:E7:7F:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/74bd79d2116570a6362347b3d564052d17db4d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c1ee3a5-679c-449c-b18e-3bebcfda334f/6356853b5fbfd9973e6bf8f687b22e9ab7b4cb3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:135::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:fa:1f:dc:ed:12:7b:09:1b:28:7a:6d:62:ca:77:79:4a:
         65:d1:0d:ae:a0:36:1a:e8:90:d6:9e:28:18:68:9e:5a:ac:91:
         9d:27:f4:12:45:35:3c:3c:a6:49:22:6f:72:eb:4b:f2:80:2a:
         7d:af:64:09:8b:42:7c:fe:f9:f7:e0:38:d7:57:5b:39:5b:91:
         89:32:3f:39:57:e3:1e:c7:06:2c:00:27:30:9f:db:df:4c:b5:
         90:df:f5:b4:79:3a:eb:9d:ba:ba:71:92:c3:23:9e:13:a9:78:
         4b:74:37:65:28:50:97:19:31:8f:9d:2f:5e:40:69:4b:36:c7:
         fe:5e:a8:c6:62:d4:f7:50:15:1f:9d:55:89:b1:4f:1a:89:ff:
         ca:e9:7e:f7:a1:f1:3a:a9:2d:c0:03:5b:50:1e:b4:67:55:c6:
         26:ed:8d:a2:5b:3f:91:17:fa:c4:91:e4:88:5e:18:bb:82:8e:
         78:38:0f:18:dd:a9:81:d8:cc:a1:51:3c:b6:b7:80:54:36:db:
         6c:ab:fa:ce:43:34:5f:45:fc:f7:75:5e:24:45:50:0f:09:2d:
         98:cc:46:a2:f9:99:60:c6:af:5d:de:7b:ee:d4:75:07:8b:41:
         dc:cf:6a:43:b8:83:9a:fe:21:4a:2c:b1:5a:34:36:8d:4e:cd:
         24:a6:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----