Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/620ee294a78a0b8015190b3e08d3e7bf7292b3e6.roa
File:                     620ee294a78a0b8015190b3e08d3e7bf7292b3e6.roa (raw, json)
Hash identifier:          mX1LK5bGj2y/UNpXQSMADn81aGPBHShmsKvg+SNk4AE=
Subject key identifier:   34:AC:27:79:06:E9:90:76:AA:3E:BD:1B:20:A1:14:01:D7:A4:CD:EE
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       25BF7F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/620ee294a78a0b8015190b3e08d3e7bf7292b3e6.roa
Signing time:             Wed 14 Jun 2023 08:30:01 +0000
ROA not before:           Tue 13 Jun 2023 08:30:01 +0000
ROA not after:            Thu 12 Jun 2025 08:30:01 +0000
asID:                     14080
IP address blocks:        2800:480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473855 (0x25bf7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jun 13 08:30:01 2023 GMT
            Not After : Jun 12 08:30:01 2025 GMT
        Subject: CN=620ee294a78a0b8015190b3e08d3e7bf7292b3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:6a:f9:53:e5:b4:7a:c5:88:b6:84:7e:23:
                    ea:44:4c:b7:b3:3f:90:27:97:18:72:b7:21:1b:55:
                    99:6e:fe:32:18:a7:25:fc:71:28:ca:c6:bc:97:5a:
                    9e:83:a1:c7:42:5c:74:94:7f:37:bc:6e:bb:dc:17:
                    eb:36:a9:c6:14:f5:56:2a:fa:79:07:db:4d:71:43:
                    7f:1d:49:e6:52:2b:0a:f0:c0:7a:50:5f:73:65:45:
                    ec:f0:ee:25:70:a0:cf:e0:27:c4:3e:9d:f6:7e:a7:
                    82:96:67:e9:29:ad:df:bd:a8:1a:38:2b:4a:3f:d5:
                    d3:d7:2e:c2:d8:87:0a:7e:d9:1b:2c:31:7b:92:90:
                    3b:26:33:96:34:6d:4f:0b:6e:1e:9e:b3:b2:d4:4b:
                    fe:44:b8:01:9d:5f:d9:3e:47:3f:13:e8:b3:b1:36:
                    77:93:28:41:46:ad:09:a7:b1:9d:2d:ac:2f:48:aa:
                    63:7f:69:85:f4:bc:27:b8:d2:8e:c8:dd:e9:ba:42:
                    c5:cd:df:71:0c:77:84:91:21:89:53:27:1d:b6:4b:
                    3f:27:1f:f4:ca:b3:a9:43:2d:4a:8e:37:bf:b7:74:
                    a4:d7:fe:5f:12:e6:0a:75:53:48:e2:65:c8:aa:4a:
                    08:ee:9b:7a:af:6b:79:16:ae:ba:30:ee:6c:ac:19:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:27:79:06:E9:90:76:AA:3E:BD:1B:20:A1:14:01:D7:A4:CD:EE
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/620ee294a78a0b8015190b3e08d3e7bf7292b3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:5a:51:42:b0:6d:cc:fe:ed:a3:23:9e:c7:08:b1:3b:39:
         c8:47:9e:0e:ee:ab:15:54:da:a2:2d:fe:1b:0f:c7:a7:73:27:
         8d:6f:76:ee:9d:27:4a:fc:ac:39:0d:7a:66:ca:bf:f9:6a:c8:
         64:cf:37:70:0d:81:fb:2b:6d:29:21:49:e2:ef:84:ae:4c:1c:
         05:7d:95:cd:20:c7:63:7e:0a:37:59:d2:49:ff:87:be:ff:fc:
         cc:6b:4a:f4:d0:36:21:da:c6:92:a5:3d:ef:ea:cb:fa:3a:46:
         9d:fb:62:09:ae:90:1e:8e:6d:28:44:13:15:1b:ee:0b:c7:ba:
         3d:9a:71:c8:b8:39:30:a1:ca:2e:25:5f:8b:05:93:3e:e7:69:
         e4:df:26:a8:f5:b1:62:c3:4a:cc:8f:87:40:45:fe:e4:98:4b:
         e8:53:b4:2e:96:59:e0:21:9e:53:0c:79:ac:95:2c:32:f2:88:
         a9:55:2b:56:61:33:db:81:5e:1d:f3:22:d6:75:e0:5f:8f:b9:
         7e:4f:5d:75:68:94:c7:0d:2e:8f:55:35:b6:d0:42:84:15:ac:
         ae:be:9f:5c:88:51:8e:80:c7:a9:34:66:8b:6c:bf:d9:bf:18:
         37:62:6d:52:62:e5:43:02:e9:21:ad:84:a9:c0:28:ef:be:33:
         9c:cc:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----