Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/a6c8990c2743cf97001458b76b467ff9b7d3c805.roa
File:                     a6c8990c2743cf97001458b76b467ff9b7d3c805.roa (raw, json)
Hash identifier:          tpLKS3QXvzlikMa+uNtDDkp1dItrB3M/cqvwAgTDOhs=
Subject key identifier:   7A:6A:F3:BF:B2:37:64:A2:D2:9E:20:1D:E8:D0:8C:62:6B:8F:4C:E3
Certificate issuer:       /CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
Certificate serial:       08E671
Authority key identifier: 47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/a6c8990c2743cf97001458b76b467ff9b7d3c805.roa
Signing time:             Mon 04 Sep 2023 15:55:52 +0000
ROA not before:           Sun 03 Sep 2023 15:55:52 +0000
ROA not after:            Thu 04 Sep 2025 15:55:52 +0000
asID:                     272851
IP address blocks:        2803:8290::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583281 (0x8e671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
        Validity
            Not Before: Sep  3 15:55:52 2023 GMT
            Not After : Sep  4 15:55:52 2025 GMT
        Subject: CN=a6c8990c2743cf97001458b76b467ff9b7d3c805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:32:fe:f9:6c:06:31:18:98:fb:d4:d2:6b:
                    05:9e:c6:1e:7a:b7:8c:38:fb:38:6e:05:d0:ef:81:
                    94:79:80:1d:72:47:71:7b:f5:50:0c:65:a0:a2:13:
                    eb:7c:53:4a:fd:59:5a:97:f8:8e:a1:6f:b7:32:2f:
                    84:ec:db:81:8a:0c:c8:bf:63:56:cd:6f:72:b4:8f:
                    76:6c:e8:41:2c:af:62:84:33:50:32:a9:13:88:26:
                    57:6f:23:90:07:96:31:c3:29:2f:04:33:a0:e5:ae:
                    03:4f:11:5c:e5:41:db:45:44:9b:66:d1:e8:5a:01:
                    46:a0:2e:77:75:ea:3f:5f:d6:d9:f3:c6:17:91:0e:
                    4a:65:1c:ed:ac:ab:3f:79:bd:ba:58:f0:08:c2:d8:
                    e6:df:3b:75:5a:f4:a5:a5:01:df:5a:36:56:82:f4:
                    fa:d4:51:a1:76:f1:42:4e:d8:b6:f7:7f:f5:a9:da:
                    1e:ce:c3:43:aa:50:eb:95:d4:91:c3:4f:a8:41:78:
                    5d:07:2c:f4:39:df:e0:86:ad:b1:a0:60:d9:2e:00:
                    76:3d:c2:06:2d:ac:61:87:a5:bd:ad:c1:a2:09:14:
                    40:50:67:e8:a8:d1:0f:05:97:2d:da:3d:58:48:b3:
                    b2:be:4d:2a:83:24:fb:5d:8e:4d:d0:c5:c7:22:1f:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:F3:BF:B2:37:64:A2:D2:9E:20:1D:E8:D0:8C:62:6B:8F:4C:E3
            X509v3 Authority Key Identifier:
                keyid:47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/a6c8990c2743cf97001458b76b467ff9b7d3c805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/0a62334472d90f8f616e01c4fe6b92ab5a455575.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:ae:a6:2d:ad:99:e2:f9:c8:67:9b:45:fa:24:cd:5a:35:
         a6:31:66:04:66:e0:48:ad:34:aa:ed:1e:9c:84:a7:46:28:10:
         e7:37:fc:2e:3f:56:9c:b4:9f:18:c8:47:6d:02:d5:35:f5:d9:
         ed:ea:c6:68:8e:99:82:f0:c7:34:a0:57:a2:8c:78:3f:4e:c3:
         a9:57:77:c8:6d:31:7d:1d:cd:cc:94:62:c5:2c:82:ea:18:2a:
         2b:95:52:4b:ba:f3:25:15:a7:ef:8d:f6:4e:a7:29:ab:78:9a:
         9f:7e:1c:87:2c:c7:f0:b8:8b:0d:5e:c1:d6:05:f0:a4:37:4e:
         36:d3:6d:93:54:fc:a7:25:e3:53:74:19:51:82:13:01:ad:73:
         41:f7:14:23:af:bc:82:16:24:30:01:87:63:b0:4d:d4:00:68:
         4a:e6:f9:e6:fb:ab:d1:94:cd:bf:72:4c:d6:87:4f:4f:7a:01:
         47:90:94:21:84:57:8f:00:55:2d:48:9d:16:da:3e:a0:f9:fe:
         87:5a:a6:28:85:6b:bb:8b:7e:7c:6d:fb:19:ef:11:43:b1:7b:
         45:3f:34:7d:25:2a:30:a5:73:60:32:52:5d:88:03:5a:4d:55:
         4a:9f:f1:8d:cf:55:dd:9f:8a:70:d5:2f:4a:ce:12:1a:a2:7b:
         ff:86:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----