Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7271872acea34d4d23b1651095575cceda19ecdb.roa
File:                     7271872acea34d4d23b1651095575cceda19ecdb.roa (raw, json)
Hash identifier:          ww2F//xA23N1KthBQSYtlqzryAiFcaqCtoMSNflqyZY=
Subject key identifier:   40:8E:DF:A6:5D:99:22:65:92:D7:99:C2:BA:E3:EB:2F:29:C6:6D:DF
Certificate issuer:       /CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
Certificate serial:       1A3AFC
Authority key identifier: 54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7271872acea34d4d23b1651095575cceda19ecdb.roa
Signing time:             Sat 05 Aug 2023 13:19:36 +0000
ROA not before:           Fri 04 Aug 2023 13:19:36 +0000
ROA not after:            Tue 05 Aug 2025 13:19:36 +0000
asID:                     10753
IP address blocks:        2803:ee60:e0::/44 maxlen: 44
                          2803:ee60:f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719036 (0x1a3afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a5488123c2689d948f7eb4b73b6005b88be1ca
        Validity
            Not Before: Aug  4 13:19:36 2023 GMT
            Not After : Aug  5 13:19:36 2025 GMT
        Subject: CN=7271872acea34d4d23b1651095575cceda19ecdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c8:b7:af:7d:d6:6a:6a:dd:52:7c:34:0a:dd:
                    2f:22:d6:30:69:65:52:a1:05:8b:b4:22:f6:84:2b:
                    2f:7c:21:77:48:32:a5:f9:42:cf:f9:4c:29:35:89:
                    13:cb:f6:91:31:8a:32:f4:4f:af:5a:0d:92:93:cf:
                    4b:b8:e2:20:fe:19:db:80:1e:34:74:33:e4:d5:62:
                    d4:0b:21:68:23:eb:3d:fa:41:9e:ba:aa:bf:05:9b:
                    20:7a:dd:a6:32:31:96:90:03:59:36:b5:aa:7f:c1:
                    27:7a:f0:ba:70:03:3e:5c:eb:96:98:06:72:7f:84:
                    46:d2:8c:81:43:f3:db:08:55:07:c9:f1:cd:f1:66:
                    eb:c2:35:0f:a7:0d:56:c1:57:61:20:36:5a:e5:86:
                    b5:f1:d1:fa:93:24:d2:91:f8:ae:73:70:82:20:7f:
                    97:9b:5b:ce:f1:68:16:a6:50:f0:83:c6:1e:3e:c6:
                    9b:d3:4a:b4:cf:ae:9d:80:9f:d8:7e:86:31:3b:99:
                    0c:51:3f:da:ea:4d:d0:ff:8e:3e:35:00:85:f3:89:
                    c9:21:4c:02:28:38:40:40:ab:7e:85:39:5d:58:6c:
                    e6:7a:fc:95:a1:47:8e:03:80:bb:b3:c5:23:26:b1:
                    d3:ea:b4:1a:6d:cb:4a:86:61:4d:15:cc:d2:ba:1e:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8E:DF:A6:5D:99:22:65:92:D7:99:C2:BA:E3:EB:2F:29:C6:6D:DF
            X509v3 Authority Key Identifier:
                keyid:54:F1:6F:BA:22:CF:BD:0E:86:5A:AF:6D:67:43:85:24:C4:62:C2:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27a5488123c2689d948f7eb4b73b6005b88be1ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/7271872acea34d4d23b1651095575cceda19ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09d82754-9806-40e7-b46b-c61074594732/27a5488123c2689d948f7eb4b73b6005b88be1ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:a7:68:36:aa:1e:c3:2f:30:cd:9a:01:f3:1e:4f:77:8c:
         06:1a:94:c2:69:99:6f:30:0f:82:eb:6f:73:c8:15:da:c5:f1:
         2a:2f:ec:b3:a2:56:03:7a:9c:e7:0e:88:a5:e8:a3:16:1a:48:
         62:d6:3c:e8:f0:8e:69:f4:14:93:dd:38:59:da:a9:05:90:49:
         41:d8:09:e5:85:e3:21:16:25:81:24:df:99:b7:e8:82:af:a3:
         ea:cb:59:19:7b:42:23:b0:e1:2e:c3:29:d0:28:e1:42:a3:29:
         ed:dd:17:bd:7f:1b:39:ce:f2:3b:ec:c2:ca:ca:17:65:ef:ef:
         d9:62:19:35:1a:ab:a5:f1:3c:2d:c5:00:9a:d4:22:b2:28:07:
         db:c5:af:db:8a:0b:de:40:52:7d:20:c4:a4:aa:60:93:9a:79:
         a0:4b:89:18:84:55:87:5c:9a:36:93:c9:f4:8a:fa:60:dd:ed:
         d9:88:a5:eb:6f:cf:e0:a6:b2:e4:23:2d:85:97:b3:c1:d1:61:
         1f:4d:bb:59:f6:9e:9f:84:c9:3a:5c:d9:54:4a:ee:6c:8e:cb:
         d0:b9:08:aa:7c:0d:06:69:35:e7:47:e3:ea:9b:a9:b8:a8:88:
         54:43:05:d8:83:4c:f3:f2:52:00:05:9f:2d:10:ab:9e:67:8b:
         66:62:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----