Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/d829a6aa03907c6fd2a556512d586401b41c8baf.roa
File:                     d829a6aa03907c6fd2a556512d586401b41c8baf.roa (raw, json)
Hash identifier:          F4kygI2dyyZB6lr3XoWuXSTfmkjMV54VSYBmSFQEajQ=
Subject key identifier:   F5:D6:FF:1A:36:50:14:F0:51:06:2E:ED:B6:8E:08:89:6B:DB:2A:3E
Certificate issuer:       /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial:       1E3BC2
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/d829a6aa03907c6fd2a556512d586401b41c8baf.roa
Signing time:             Tue 07 Mar 2023 21:40:07 +0000
ROA not before:           Mon 06 Mar 2023 21:39:47 +0000
ROA not after:            Fri 07 Mar 2025 21:39:47 +0000
asID:                     265858
IP address blocks:        2803:7a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981378 (0x1e3bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9288132902323827f44806de3061debd517a8fd9
        Validity
            Not Before: Mar  6 21:39:47 2023 GMT
            Not After : Mar  7 21:39:47 2025 GMT
        Subject: CN=d829a6aa03907c6fd2a556512d586401b41c8baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:1c:8f:5a:34:44:f5:4f:22:9e:b5:b2:e1:
                    e9:69:46:58:4b:fa:98:aa:f5:82:da:c9:b9:34:ab:
                    65:33:d5:a4:18:68:af:23:e2:5b:5c:93:d5:2b:0c:
                    cc:a9:f5:b8:3d:c5:57:b2:02:60:08:9a:8f:0b:a5:
                    f5:fc:b4:7e:8d:be:38:98:c7:51:55:32:ae:e8:37:
                    53:98:0b:ae:78:3c:27:b5:c7:19:d3:f4:52:24:78:
                    9b:7c:2a:d4:dc:c2:f4:bc:e3:c5:6e:b3:48:37:cd:
                    b5:8b:de:ff:8f:76:7f:c3:72:e9:dc:7e:5b:9f:99:
                    71:c1:8f:e6:7a:58:17:d5:82:3c:3f:0b:d4:26:25:
                    77:c8:f6:73:85:bf:dc:73:47:db:2f:89:6b:82:b6:
                    34:91:8a:40:d6:71:78:c0:d0:80:69:e5:b2:bd:a3:
                    3a:f2:60:eb:9c:1c:38:5a:bb:60:4d:a7:9a:8f:aa:
                    26:e3:76:e4:57:dd:a2:6a:1d:32:67:16:fa:d7:f2:
                    41:7b:82:7a:95:38:c9:c7:c9:5e:72:8b:3e:2b:86:
                    10:3b:93:65:7e:46:40:79:64:a2:d1:02:28:d4:31:
                    9b:cc:a6:30:bd:61:39:69:c3:62:61:15:b7:03:68:
                    d0:20:f6:46:e0:43:be:48:00:b7:15:80:70:9d:a2:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D6:FF:1A:36:50:14:F0:51:06:2E:ED:B6:8E:08:89:6B:DB:2A:3E
            X509v3 Authority Key Identifier:
                keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/d829a6aa03907c6fd2a556512d586401b41c8baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:c7:36:cd:75:9b:c9:8a:c3:80:03:ca:6d:79:ad:e8:90:
         83:1d:c7:61:7b:1a:f5:ab:f7:c5:66:21:09:86:2e:cc:b0:56:
         65:9b:23:39:c9:95:86:a2:bc:e7:a4:fa:79:a1:ef:20:f9:5c:
         45:25:5f:33:da:c7:23:bf:49:f9:ff:78:d5:33:76:78:34:42:
         0f:f2:4b:75:e8:77:e4:4a:a5:a8:df:bf:4d:a9:7d:34:29:fe:
         d4:41:f0:60:08:f7:1c:e3:47:b9:ac:df:3e:2b:a8:21:0a:4a:
         a9:dc:9e:49:45:26:c1:6f:41:3c:d6:bc:73:ba:64:4d:d4:10:
         75:b2:fc:c0:3f:ce:aa:74:b3:ce:b1:b8:ce:f6:a6:cd:6a:c9:
         25:af:fe:21:4b:82:b8:69:59:ef:2d:ab:93:8d:ac:91:83:12:
         a1:00:df:e4:31:91:da:18:24:2b:c5:f2:cb:79:23:1c:e7:bd:
         1f:e9:40:0a:44:ad:54:28:5d:ea:82:2b:37:b0:2e:ac:b4:5b:
         27:5e:26:36:7b:a8:86:6e:dc:e0:88:75:d0:bd:4e:54:ce:52:
         55:f3:d4:d4:ec:5b:1c:65:b7:13:0d:a8:80:4e:14:26:e3:0e:
         44:8f:ac:9b:51:d3:e9:b8:cc:0e:69:d3:fd:a9:01:37:2b:91:
         47:03:ca:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----