Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0873c45831ef8aa675dd4f6165cd1ba6824fe0f9.roa
File:                     0873c45831ef8aa675dd4f6165cd1ba6824fe0f9.roa (raw, json)
Hash identifier:          igH0fk2KsuhzWg6kxwGZl+S0ov3gMh0TdyQk8EWELsg=
Subject key identifier:   01:2C:D2:F8:E5:84:7D:CC:CA:7E:E7:1E:16:5F:A4:64:D1:16:FD:D2
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       04AAE2
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0873c45831ef8aa675dd4f6165cd1ba6824fe0f9.roa
Signing time:             Sat 13 Apr 2024 17:11:44 +0000
ROA not before:           Sat 13 Apr 2024 17:11:43 +0000
ROA not after:            Mon 13 Apr 2026 17:11:43 +0000
asID:                     28001
IP address blocks:        2801:165:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305890 (0x4aae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Apr 13 17:11:43 2024 GMT
            Not After : Apr 13 17:11:43 2026 GMT
        Subject: CN=0873c45831ef8aa675dd4f6165cd1ba6824fe0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:a8:98:af:ac:8e:f5:29:32:74:44:d8:e9:
                    30:22:3e:cf:dd:c5:d9:8c:39:df:23:b1:71:6d:d8:
                    8f:6f:58:37:9d:f2:ab:15:fc:d2:cd:8d:29:43:8d:
                    f1:de:de:78:01:2e:04:55:c2:4c:11:fd:10:9c:34:
                    02:ff:9e:de:b7:fd:4a:25:cf:c0:8d:15:d2:60:0a:
                    c8:d6:79:40:1d:ad:fe:ac:7b:23:b1:9b:c7:e0:4b:
                    c9:01:3b:e9:84:6a:1f:bf:d4:1d:c1:4d:14:af:e4:
                    27:93:1b:27:ec:4c:12:c3:6b:e0:2b:bc:fe:21:a7:
                    f0:48:6d:da:fc:4d:56:fe:94:b1:ac:f5:4d:8c:b2:
                    6b:3d:99:5b:34:47:e8:90:cb:d9:bd:5d:b6:7f:ba:
                    4a:4f:24:a6:b3:29:da:73:28:a9:6b:f9:ee:e6:f3:
                    c2:ac:1e:c1:11:07:5e:4b:95:bf:9b:a3:a7:cb:50:
                    28:4a:88:ac:be:93:1e:4d:8d:26:cf:b2:2d:ff:2e:
                    de:05:19:15:af:d7:18:a9:f7:bf:0c:1c:01:c2:93:
                    f7:9b:c7:fd:38:c7:b9:82:b0:da:61:19:6d:2f:95:
                    ea:38:1c:fe:1a:15:b4:cc:35:5e:41:96:f3:31:be:
                    b0:94:3d:ac:54:86:cd:ec:67:09:ac:51:a4:83:d5:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2C:D2:F8:E5:84:7D:CC:CA:7E:E7:1E:16:5F:A4:64:D1:16:FD:D2
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0873c45831ef8aa675dd4f6165cd1ba6824fe0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:90:7c:1a:d3:23:40:0a:41:ad:5c:79:34:54:c6:d7:b6:a9:
         a9:ab:17:90:39:34:8a:fb:ec:ff:f5:3d:fb:bf:57:a1:6e:80:
         a5:12:09:2b:d0:e0:b3:55:3f:45:95:fd:8f:5f:78:b2:78:0b:
         d2:f2:3f:85:96:a8:af:f9:30:7c:d4:a0:d1:11:96:5b:56:08:
         44:ad:bd:dd:f9:25:30:0f:55:5d:9d:12:c6:08:89:b2:a7:45:
         1d:60:c0:c6:2a:07:83:fd:f1:eb:64:77:ad:88:1b:8a:c3:f0:
         bb:94:d1:66:dc:52:3f:68:87:3c:e4:54:15:22:7c:21:70:29:
         fb:5a:48:d3:ed:16:30:5d:e4:c1:63:a9:e9:5b:c5:f5:49:45:
         b0:5c:9d:c2:b2:10:72:d0:54:3e:2f:33:e6:4f:87:83:af:bb:
         eb:8e:68:5c:5b:f2:f6:fb:6c:e3:1c:84:7f:c4:95:3f:6c:f9:
         18:f0:8b:ff:d9:72:5d:a0:ac:66:f7:06:73:aa:84:8a:fe:f0:
         cc:a5:69:0e:a2:8c:4e:5e:0c:65:76:72:a5:c1:d1:61:45:af:
         cf:8e:a4:ff:73:73:5f:02:8d:71:d5:d9:45:6c:c2:4a:ed:95:
         3e:73:0e:2f:1e:5d:75:41:2b:58:a4:30:9d:94:46:2b:57:1b:
         a9:04:13:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----