Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/7fd5b5264bcba943bbb86d364cef7811061d164b.roa
File:                     7fd5b5264bcba943bbb86d364cef7811061d164b.roa (raw, json)
Hash identifier:          FR1n7ECf46OetX2d9qUnzVjPY0nF1zUBiOMfp9zJi74=
Subject key identifier:   E4:DF:C1:FC:4F:62:06:86:DF:80:8C:23:37:18:57:3B:D3:13:C5:EF
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E294F
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/7fd5b5264bcba943bbb86d364cef7811061d164b.roa
Signing time:             Wed 14 Jun 2023 22:08:15 +0000
ROA not before:           Tue 13 Jun 2023 22:08:14 +0000
ROA not after:            Sat 14 Jun 2025 22:08:14 +0000
asID:                     266833
IP address blocks:        2803:8780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928079 (0xe294f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 13 22:08:14 2023 GMT
            Not After : Jun 14 22:08:14 2025 GMT
        Subject: CN=7fd5b5264bcba943bbb86d364cef7811061d164b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:da:67:00:a6:51:0e:dc:f0:ec:b5:62:7a:
                    ab:f8:b3:b5:c4:57:1e:b4:ae:74:0d:fb:3c:d0:05:
                    a7:83:4c:87:6f:61:c4:96:0d:60:ae:53:56:64:6d:
                    7f:02:c1:cb:fb:23:d2:09:41:3f:48:55:2f:26:06:
                    b7:bf:66:0f:6b:2e:24:31:b8:02:b3:5c:36:a0:a6:
                    94:bc:72:e4:b3:a4:00:40:a6:f9:42:79:2c:d7:85:
                    27:fe:d8:a3:29:c8:0d:6b:77:8a:8a:5b:34:a0:e4:
                    28:f6:55:63:02:12:bd:3c:e3:b1:7e:ab:10:72:33:
                    b1:69:16:5b:34:dc:4a:78:e5:0c:62:2f:1c:a0:17:
                    be:30:b6:f8:33:df:28:98:50:c4:6a:cd:12:ef:8c:
                    c2:31:79:2d:f9:43:95:68:09:62:67:4b:c9:31:2e:
                    bc:f6:af:73:ee:86:5f:d0:4c:77:4e:ed:37:63:02:
                    32:e8:cb:a4:e9:94:c1:7c:9b:b6:67:5b:fa:c1:db:
                    eb:6a:fb:13:36:34:5a:1a:16:64:51:3a:21:12:20:
                    ba:48:5d:2c:22:4a:3c:0e:70:fa:c9:54:86:50:8e:
                    4e:92:0d:63:83:2b:56:eb:ff:ad:1b:c1:37:2d:bf:
                    f5:60:58:2c:0c:9a:27:84:24:b5:7e:2e:5b:6f:38:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:C1:FC:4F:62:06:86:DF:80:8C:23:37:18:57:3B:D3:13:C5:EF
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/7fd5b5264bcba943bbb86d364cef7811061d164b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8780::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:e5:1d:cd:b2:52:ec:50:53:8c:3f:51:b3:30:d6:f9:8c:
         4a:8a:8b:24:eb:8d:b9:06:82:88:2a:3b:73:8f:1e:cd:42:b5:
         fa:ce:8b:54:b1:35:57:c8:0a:c8:6d:c3:2b:66:e1:8b:9c:14:
         4d:2f:fe:9a:21:b1:a4:07:dc:72:10:b4:a1:d8:af:60:18:ef:
         bd:cc:f4:b4:54:2a:3d:62:ab:cc:ae:10:18:24:cc:bc:4a:a7:
         3c:6b:a1:d1:62:40:58:74:46:ed:ad:0b:5f:92:d2:12:a7:23:
         7a:07:b4:85:ae:ce:f2:fe:23:55:b5:c8:01:57:e6:06:27:9f:
         9a:0d:e0:12:80:50:76:df:de:e4:54:48:d9:0f:27:a4:b7:2f:
         8a:ae:ff:f8:c7:9d:47:4b:e3:7a:4e:1d:d0:b3:2b:dd:f9:be:
         d3:7c:df:0f:3a:cf:89:c0:b7:ea:a0:29:49:e7:4d:35:d3:31:
         65:aa:af:e1:5e:e1:40:f9:df:41:ba:2e:f1:05:d8:b1:5d:d1:
         b1:22:c3:f9:e5:9f:7f:02:e3:f5:b8:6a:dc:29:24:4f:06:93:
         25:b4:62:5e:dd:32:28:03:e1:f2:b3:78:0c:de:30:38:4f:e9:
         93:82:89:28:22:e5:50:1f:06:a9:d8:56:9f:90:4c:79:d9:4b:
         c9:5a:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----