Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/4c778c148c2daf8061ec48ecb0985eb2653cd9be.roa
File:                     4c778c148c2daf8061ec48ecb0985eb2653cd9be.roa (raw, json)
Hash identifier:          2mHPUznqSpyyIrcnMxbE/kz9ydqPLEt8nA62YnjTHDE=
Subject key identifier:   DB:D5:86:1A:4E:6A:D9:44:39:26:91:5C:70:69:89:BF:D6:23:62:03
Certificate issuer:       /CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
Certificate serial:       1EE179
Authority key identifier: 84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/4c778c148c2daf8061ec48ecb0985eb2653cd9be.roa
Signing time:             Fri 24 Mar 2023 08:31:51 +0000
ROA not before:           Thu 23 Mar 2023 08:31:51 +0000
ROA not after:            Sat 22 Mar 2025 08:31:51 +0000
asID:                     263732
IP address blocks:        2803:af80::/33 maxlen: 64
                          2803:af80::/48 maxlen: 48
                          2803:af80:caf3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023801 (0x1ee179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
        Validity
            Not Before: Mar 23 08:31:51 2023 GMT
            Not After : Mar 22 08:31:51 2025 GMT
        Subject: CN=4c778c148c2daf8061ec48ecb0985eb2653cd9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:d0:24:c5:de:72:10:76:a8:70:40:46:94:
                    5d:b4:22:fc:61:c9:98:36:3f:75:00:ac:9f:6f:7c:
                    5b:00:e5:cc:53:f6:7a:de:2d:d2:8f:c0:eb:37:64:
                    66:27:56:2b:87:a3:b4:ff:5f:8d:0d:d0:2b:bc:9d:
                    cb:eb:28:86:6f:59:4a:33:e7:d3:89:c8:0d:30:4e:
                    ef:22:02:99:40:2a:34:c1:7f:40:65:5b:02:ab:41:
                    4e:ae:f9:32:e2:d9:fe:bd:2a:28:83:5e:af:6b:ac:
                    40:14:5a:f8:ee:1e:0a:1b:e2:b8:f7:34:76:68:b2:
                    86:c4:dd:55:3f:3b:df:fa:9a:bb:4e:cc:82:f1:81:
                    00:e7:76:2f:b8:d0:c7:c9:06:dd:e1:cb:6b:2d:e7:
                    b4:f8:1f:1b:1d:f2:b4:1f:30:8e:be:78:7c:c9:1c:
                    89:eb:1f:ad:6c:e9:f4:6a:6c:b3:87:a2:4d:f0:54:
                    09:4c:c1:cc:02:f9:5d:a1:8a:ed:c6:d2:63:40:d0:
                    b9:1e:d6:9a:cb:9f:c1:72:d2:7b:20:6c:f7:bc:8e:
                    cf:dc:55:d0:1e:47:28:24:f9:4f:a7:71:7a:34:cb:
                    36:b6:1b:a6:8e:e6:cd:f9:cb:ec:53:60:62:90:07:
                    43:10:29:df:12:fc:97:eb:ff:9d:5b:35:5c:27:ed:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:86:1A:4E:6A:D9:44:39:26:91:5C:70:69:89:BF:D6:23:62:03
            X509v3 Authority Key Identifier:
                keyid:84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/4c778c148c2daf8061ec48ecb0985eb2653cd9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/33
                  2803:af80:caf3::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:71:12:74:08:6e:d1:71:44:40:65:e5:b6:c6:ab:32:39:a8:
         94:6d:f5:16:3f:db:41:5b:c8:38:e8:91:06:65:a6:5b:78:5e:
         1f:bd:8c:cd:9c:6d:01:37:69:82:9f:44:38:c3:72:ba:e5:f9:
         db:10:72:34:b4:da:f2:28:f4:f8:24:46:6d:f7:b0:53:93:0a:
         42:f8:39:bf:95:de:ab:a4:20:2d:df:10:09:97:0a:09:36:57:
         41:4b:db:f0:45:15:34:e8:0b:7a:3d:6f:40:1f:db:93:8f:ca:
         fc:26:cc:97:1b:0f:21:3a:89:f7:cc:5e:96:04:c3:2e:e6:59:
         85:06:e2:5c:b2:87:40:66:59:2d:7f:26:2d:fc:63:7c:94:d0:
         98:5b:66:52:fd:c0:c3:3a:4f:c3:fd:fb:fb:21:bc:6a:7b:b5:
         d1:b1:1a:31:c2:b1:65:7a:3d:ad:6f:66:cd:66:09:9f:65:ed:
         19:2b:2a:c8:83:33:bb:37:a2:ca:df:84:56:cb:d0:74:27:98:
         ed:6c:70:7a:e9:11:f5:4c:4b:1f:53:6d:73:d1:5b:b6:c7:84:
         76:6f:d2:7c:82:57:50:7a:37:1a:d0:e3:26:92:ba:04:b3:99:
         a7:79:3a:7f:a4:19:ec:85:47:d9:de:68:73:7a:48:03:06:ea:
         8c:70:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----