Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/f504acdef0373f13f8f8bc2359bd04dbf667cd02.roa
File:                     f504acdef0373f13f8f8bc2359bd04dbf667cd02.roa (raw, json)
Hash identifier:          UzIGWsCIg0o3GVUrdOeZMfqOPmm8lL2EI9XQn7hboU4=
Subject key identifier:   D9:94:D8:8C:00:08:37:16:C6:95:47:15:94:B9:64:CF:74:AF:BD:75
Certificate issuer:       /CN=45381f882e81a9a999fed42cdb1bc294fb1c62fe
Certificate serial:       0BCE
Authority key identifier: 8F:2B:83:BC:A9:34:46:93:72:16:22:B0:4B:7E:18:A1:2B:B9:39:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45381f882e81a9a999fed42cdb1bc294fb1c62fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/f504acdef0373f13f8f8bc2359bd04dbf667cd02.roa
Signing time:             Thu 07 Sep 2023 20:34:25 +0000
ROA not before:           Wed 06 Sep 2023 20:34:25 +0000
ROA not after:            Sun 07 Sep 2025 20:34:25 +0000
asID:                     262589
IP address blocks:        2801:1a:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45381f882e81a9a999fed42cdb1bc294fb1c62fe
        Validity
            Not Before: Sep  6 20:34:25 2023 GMT
            Not After : Sep  7 20:34:25 2025 GMT
        Subject: CN=f504acdef0373f13f8f8bc2359bd04dbf667cd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:f4:52:b8:7a:03:40:df:ad:0f:9f:22:ef:
                    ec:29:46:e6:d5:b2:96:34:78:64:a6:f9:2b:cd:57:
                    9a:e6:c1:af:45:12:fd:76:3d:2b:9f:04:41:7c:e8:
                    b3:b0:c5:ab:f9:ae:9f:d8:44:25:51:5a:e2:70:7f:
                    0e:71:2f:e4:31:e8:81:e4:bd:da:7c:59:08:48:3f:
                    8c:e3:02:d1:d9:13:f0:78:9e:41:82:00:80:18:60:
                    44:0f:ed:5e:e3:89:23:72:dc:53:f5:ec:22:70:f3:
                    c4:31:9b:44:cb:eb:83:06:ff:16:4c:52:da:74:39:
                    3d:8f:be:70:21:1b:4f:42:00:ac:6e:af:6f:84:98:
                    3b:0f:f5:e9:89:d3:d8:d8:a7:df:cd:97:3a:14:7b:
                    d4:3a:ea:57:f0:5a:dd:5d:cd:1e:61:45:db:0b:2f:
                    88:27:38:20:07:cb:77:c9:bc:24:e0:e5:14:9c:f1:
                    55:86:03:bc:a8:84:f1:1d:5f:6a:d4:d5:e2:a2:4a:
                    6a:63:23:50:12:4a:f4:6b:34:1a:6c:c9:34:35:0a:
                    57:45:4b:d1:61:c3:03:99:40:1a:04:64:ef:b7:75:
                    01:3b:1e:a3:e4:8e:97:7d:fa:94:9e:b3:a1:1d:18:
                    d3:16:19:ff:07:1e:03:a8:7d:d6:02:89:76:a6:5e:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:94:D8:8C:00:08:37:16:C6:95:47:15:94:B9:64:CF:74:AF:BD:75
            X509v3 Authority Key Identifier:
                keyid:8F:2B:83:BC:A9:34:46:93:72:16:22:B0:4B:7E:18:A1:2B:B9:39:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45381f882e81a9a999fed42cdb1bc294fb1c62fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/f504acdef0373f13f8f8bc2359bd04dbf667cd02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/45381f882e81a9a999fed42cdb1bc294fb1c62fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:9c:0f:56:50:89:3e:8c:3a:09:8d:f0:6e:1f:f3:0d:7b:65:
         82:26:21:a1:08:59:4a:d5:0f:50:5f:19:9b:fc:fd:99:42:3b:
         bd:05:bd:2d:a0:2c:b4:84:31:56:7d:29:15:82:b0:53:37:8f:
         5f:fd:72:6f:d1:97:63:8a:b9:32:c7:13:08:20:61:4d:10:bf:
         9b:4e:cc:c9:0f:57:d7:5c:a1:0e:a6:a7:b6:41:b1:1b:84:fc:
         7f:4c:6b:29:02:a5:9e:11:9d:d6:d1:1e:31:ba:9c:08:c3:45:
         cb:db:15:20:53:81:3b:81:d0:4c:73:a3:52:11:33:de:a7:5d:
         3d:8a:d4:6a:4d:f2:e1:19:2d:b1:36:80:37:e2:ec:4c:7f:7a:
         c0:e7:4e:7f:d7:52:15:37:f3:07:10:10:8d:b6:82:e3:f8:28:
         25:24:28:67:fd:31:96:65:06:67:41:92:69:54:a0:83:ba:7b:
         e3:7a:21:87:42:36:13:3b:d3:e2:2a:21:46:c0:3a:38:4e:a8:
         3b:78:30:cb:df:51:64:cf:06:e5:82:c6:ac:aa:03:5e:33:4b:
         ac:a2:ea:78:f2:f0:99:11:06:09:9d:dd:de:db:29:90:ad:53:
         0c:39:98:d5:c4:b4:52:1b:1f:61:f5:05:ce:6c:d5:ae:c0:93:
         38:21:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----