Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/055171a70c4e4bd4784cdc80857c3a5e2c0d77c3.roa
File:                     055171a70c4e4bd4784cdc80857c3a5e2c0d77c3.roa (raw, json)
Hash identifier:          6Fyl/sQnTwdXN5P5bvp0ecXHxHKZdNWlTh0HwH2vU/E=
Subject key identifier:   A1:FA:F1:70:CD:E9:41:CC:BA:87:26:62:CD:36:24:7C:47:14:21:92
Certificate issuer:       /CN=f26964717aee328aa075133d358d96bd312b9bed
Certificate serial:       273CBB
Authority key identifier: 69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/055171a70c4e4bd4784cdc80857c3a5e2c0d77c3.roa
Signing time:             Thu 21 Mar 2024 18:46:02 +0000
ROA not before:           Thu 21 Mar 2024 18:46:01 +0000
ROA not after:            Sat 21 Mar 2026 18:46:01 +0000
asID:                     266696
IP address blocks:        2803:d20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571451 (0x273cbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26964717aee328aa075133d358d96bd312b9bed
        Validity
            Not Before: Mar 21 18:46:01 2024 GMT
            Not After : Mar 21 18:46:01 2026 GMT
        Subject: CN=055171a70c4e4bd4784cdc80857c3a5e2c0d77c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:21:c9:fa:09:bd:ea:2c:28:23:e5:c2:4a:
                    57:68:24:b3:fa:4f:e9:3c:e3:f3:c6:b5:d9:70:bf:
                    08:13:0f:04:ed:2e:a7:2a:a3:97:13:ce:19:bb:a1:
                    6e:91:5b:a4:71:1b:f8:11:35:fa:1a:bb:b7:27:c8:
                    36:a0:1e:53:d7:dd:9e:a3:f1:5c:91:d6:b2:e3:9c:
                    c4:f3:c1:e9:cd:40:8e:28:69:1e:f6:41:c1:3b:b8:
                    b9:f3:c1:0f:50:59:2a:6e:f8:2d:a2:e6:60:56:7d:
                    55:92:44:5e:08:d9:c8:b7:4f:32:6d:bd:08:ed:d9:
                    ed:0b:e0:55:f2:17:55:c2:08:44:c6:44:a8:fd:27:
                    ba:d5:e9:8f:6b:54:a1:a6:e9:8b:60:26:07:03:0d:
                    b6:83:ec:40:9c:be:ea:93:87:28:80:a1:b4:61:0c:
                    06:31:ae:36:1a:1f:0d:e3:fb:58:fc:38:27:82:9a:
                    91:78:5f:0b:e6:d6:37:0b:fb:72:1f:ec:df:19:c3:
                    5d:b4:87:73:74:59:0d:c5:f1:c4:0b:a0:92:1f:1e:
                    16:af:67:3c:ef:14:4c:fb:a6:bc:ee:be:0d:e8:32:
                    d2:41:05:e4:3e:7b:53:84:81:be:cd:92:1b:c7:57:
                    68:18:67:3a:4f:33:fd:e6:00:23:de:e9:00:eb:75:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:F1:70:CD:E9:41:CC:BA:87:26:62:CD:36:24:7C:47:14:21:92
            X509v3 Authority Key Identifier:
                keyid:69:D7:29:83:99:8B:1B:75:D8:B6:0B:7A:37:6D:43:F3:D3:FE:AF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f26964717aee328aa075133d358d96bd312b9bed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/055171a70c4e4bd4784cdc80857c3a5e2c0d77c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/f26964717aee328aa075133d358d96bd312b9bed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:b4:bb:18:40:63:12:71:14:71:12:b0:b7:55:a4:ca:90:
         bf:c8:88:82:51:98:12:ad:71:20:c0:54:0f:dc:48:3a:65:b6:
         e7:cc:e7:e7:ae:9a:4b:89:5b:94:85:8f:10:a3:e5:ea:6c:db:
         2d:7b:cb:42:ea:e1:49:1e:2c:67:31:05:65:8f:97:92:68:0b:
         1e:e9:20:10:36:46:3a:b5:f9:70:6e:56:e5:0b:3d:f5:17:a7:
         c1:5b:2f:1f:6a:26:58:56:0b:72:5e:7e:91:fc:28:5b:f4:c4:
         67:ef:19:13:82:0d:5a:48:85:44:75:e9:0b:0e:ef:b5:4e:4f:
         5f:9f:d2:f5:a6:a6:f9:c3:0c:cc:3f:00:98:73:01:ce:f9:93:
         f9:74:d0:69:91:61:b0:ee:f1:58:a9:68:8f:57:be:d1:49:2a:
         d6:0f:2c:89:5d:04:61:66:1c:3c:52:bb:ad:d4:86:47:b5:ee:
         27:b4:fe:a1:1e:28:db:39:33:cb:35:05:ba:91:2b:e3:82:59:
         b0:93:24:6e:02:22:1e:65:a2:b0:4a:56:9b:e2:3a:a9:59:48:
         83:cf:33:ea:0a:a8:38:00:67:88:91:7a:a4:4d:0d:e5:9a:f3:
         29:79:07:ed:f5:d4:7a:c7:4f:56:84:20:74:98:40:56:25:f4:
         f5:a9:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----