Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/c31e503a2f84262f04ecc632d9df7bac9fff19cb.roa
File:                     c31e503a2f84262f04ecc632d9df7bac9fff19cb.roa (raw, json)
Hash identifier:          OAghmyvWfWlFd55F6bJXMdBGdNoRnDqh0XqbKSN2kdE=
Subject key identifier:   6D:6B:E5:3D:E8:41:C8:52:E8:1F:88:83:63:10:7E:7A:41:78:E4:57
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       128021
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/c31e503a2f84262f04ecc632d9df7bac9fff19cb.roa
Signing time:             Sat 27 Jan 2024 07:30:06 +0000
ROA not before:           Sat 27 Jan 2024 07:30:06 +0000
ROA not after:            Mon 26 Jan 2026 07:30:06 +0000
asID:                     3549
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212449 (0x128021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Jan 27 07:30:06 2024 GMT
            Not After : Jan 26 07:30:06 2026 GMT
        Subject: CN=c31e503a2f84262f04ecc632d9df7bac9fff19cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:7e:00:56:d7:a9:32:e2:b8:c9:d7:ab:84:
                    84:2e:8d:7e:ff:82:74:9b:3a:b0:d1:f3:7d:a7:40:
                    b2:56:8c:f1:3a:d2:83:81:e3:48:cb:6f:d1:ee:ac:
                    3e:c2:64:a9:e8:43:97:ad:61:1f:69:35:40:6a:5f:
                    74:6a:47:c7:96:ab:e7:72:e6:aa:e3:c7:d9:2b:ea:
                    dd:e9:10:70:8f:02:62:96:16:f9:9a:6e:1d:c9:c1:
                    ef:79:a9:31:f5:8a:78:51:fb:37:30:e8:a4:fb:f2:
                    c9:1a:1d:e8:54:2c:9d:7e:c9:d9:21:10:04:04:f5:
                    aa:45:2d:f8:94:cd:69:de:24:b7:5d:fe:12:f1:db:
                    c3:d1:03:e1:4b:4c:a0:28:50:df:a1:f6:8a:f3:8d:
                    a6:f9:b2:73:b8:2a:61:4b:88:ba:78:f7:83:27:ac:
                    71:97:9f:fc:7c:af:b0:4e:ea:54:63:6c:02:2d:d9:
                    fe:51:78:9f:cb:11:5a:2f:ba:74:0b:cd:9c:71:34:
                    13:c8:34:c4:3b:10:ce:3d:2c:af:53:9a:26:82:b4:
                    79:30:8d:18:b7:3a:51:ba:a2:15:f0:e4:48:93:a3:
                    91:7c:e3:d8:fd:7c:d0:ab:f5:90:22:a7:0d:c8:73:
                    31:a4:40:54:22:bd:ff:f1:ba:b1:61:79:44:c8:db:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:E5:3D:E8:41:C8:52:E8:1F:88:83:63:10:7E:7A:41:78:E4:57
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/c31e503a2f84262f04ecc632d9df7bac9fff19cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:b4:e8:b3:72:ac:ca:6d:16:17:90:22:e7:56:33:2d:34:
         67:d1:d9:7f:90:60:3f:7a:75:84:d6:1d:11:7a:16:ce:26:93:
         bd:2d:7d:3f:7f:f5:bf:5e:6f:eb:d4:cf:72:77:b1:59:e8:68:
         e2:ba:d5:c6:f6:e8:e4:ee:47:51:04:5b:67:9b:c8:c8:2d:06:
         d1:b4:1c:a5:4c:22:9d:8e:9a:1a:8d:22:ef:9f:bb:7a:9e:c8:
         32:10:32:14:f5:df:44:b1:17:f9:d6:70:27:b6:36:1b:03:7e:
         96:d2:5b:d9:ff:9b:9c:25:14:d0:5d:dd:fe:61:b2:e4:ba:79:
         a7:23:60:71:07:99:a4:af:10:84:cc:ba:5b:9e:a5:06:13:ac:
         7c:13:f0:c0:4a:26:25:e1:30:fd:74:4d:6c:47:a0:cd:30:f8:
         a5:0e:9d:9e:3d:db:e9:c8:53:0e:15:07:13:ba:9f:21:88:2a:
         46:86:77:2a:38:97:bd:12:e6:ce:20:87:36:b0:0b:02:f5:80:
         06:01:c4:99:3f:6e:34:bc:6e:14:b3:52:6e:af:4e:55:81:d7:
         01:8e:47:d5:e7:5b:3f:a9:f6:f7:24:ec:90:0e:f4:00:93:04:
         98:70:4c:72:b3:49:01:fa:a4:50:d3:9d:e1:8e:04:90:a9:17:
         6c:09:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----