Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e605369f0d5b2761a906de5541e3bf30663bebd8.roa
File:                     e605369f0d5b2761a906de5541e3bf30663bebd8.roa (raw, json)
Hash identifier:          7DnkyG2wQfbUMNCQSkgwmIEZdUnO3oom/CJPBWi7wXk=
Subject key identifier:   05:F0:07:92:69:F3:DF:87:71:21:26:F4:55:2E:13:B0:66:67:83:BC
Certificate issuer:       /CN=905377f2c89ca66131e9c301a5406e6e9fbb8bda
Certificate serial:       01D047
Authority key identifier: 25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e605369f0d5b2761a906de5541e3bf30663bebd8.roa
Signing time:             Fri 07 Jul 2023 18:53:24 +0000
ROA not before:           Thu 06 Jul 2023 18:53:24 +0000
ROA not after:            Mon 07 Jul 2025 18:53:24 +0000
asID:                     270174
IP address blocks:        2806:3ee::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118855 (0x1d047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905377f2c89ca66131e9c301a5406e6e9fbb8bda
        Validity
            Not Before: Jul  6 18:53:24 2023 GMT
            Not After : Jul  7 18:53:24 2025 GMT
        Subject: CN=e605369f0d5b2761a906de5541e3bf30663bebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:de:88:2d:41:66:74:56:41:d2:5c:f1:e2:
                    9e:79:15:75:59:2c:be:dd:1b:9a:67:8b:fc:3f:d8:
                    9d:c3:b0:21:47:b2:8f:03:b1:2b:40:1e:aa:3e:8f:
                    79:e8:ba:cf:17:b7:04:12:6d:92:92:25:c2:b4:92:
                    fc:d7:1a:77:2f:34:df:a6:a9:ff:8b:db:87:b4:47:
                    07:6d:56:59:af:5f:a9:c3:69:f8:8c:85:ed:34:a4:
                    bf:03:1e:fd:ee:ff:0b:52:9e:fb:e2:66:fb:34:e2:
                    63:42:65:b8:fb:ab:d0:a8:a3:42:0d:48:69:82:d8:
                    61:65:51:45:96:42:2f:b1:49:0c:e0:d3:83:a1:1b:
                    02:80:c8:f5:96:6b:67:0a:c2:f4:5d:e1:a1:88:13:
                    ef:c6:0e:a9:ed:00:e0:26:e0:fa:20:4e:da:89:a3:
                    f2:6c:59:f5:74:92:64:dd:16:a3:c3:ee:ba:24:2b:
                    6e:9c:be:e7:99:bb:10:c6:3a:40:27:f9:3e:82:8f:
                    99:b8:94:46:95:cf:41:81:04:9d:56:b0:9a:96:06:
                    c4:aa:9a:33:b2:98:31:9e:3c:e4:d8:f5:05:70:5d:
                    03:6c:f2:d3:30:72:29:87:bb:5d:a8:4b:d3:35:ee:
                    5f:c2:a4:21:55:e8:ac:00:5e:f9:43:bd:a6:b1:77:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F0:07:92:69:F3:DF:87:71:21:26:F4:55:2E:13:B0:66:67:83:BC
            X509v3 Authority Key Identifier:
                keyid:25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e605369f0d5b2761a906de5541e3bf30663bebd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/905377f2c89ca66131e9c301a5406e6e9fbb8bda.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:67:4e:8a:3c:d6:1a:d5:3a:42:6a:c6:bc:5e:65:af:78:
         28:26:a8:c3:50:b0:f1:c7:35:fe:b7:6b:42:c1:06:e3:79:db:
         02:ee:96:3b:6a:eb:bb:78:1a:19:b1:c6:5e:d4:94:01:ff:7a:
         1f:b7:3c:98:1a:62:f4:b4:30:a0:70:d9:1d:6d:f2:26:cb:ab:
         de:37:8a:95:99:93:93:bb:c0:68:46:cc:b3:ff:b8:da:be:92:
         31:05:62:79:1d:bc:ef:0c:c4:50:51:ea:04:f7:73:af:ce:9b:
         f9:b8:6b:13:40:10:ab:61:96:de:2f:53:97:e0:18:f2:3a:1b:
         e1:98:e4:c2:fc:6d:ea:34:f3:b3:41:10:61:53:c8:2e:e3:00:
         29:cb:14:71:51:7f:e5:ac:25:2b:97:0c:e4:3d:8d:34:1d:e6:
         62:d5:54:30:75:64:a1:c6:e7:c8:53:c5:45:2b:db:23:ff:c0:
         a9:6a:67:d3:9e:05:fc:fb:34:78:03:a4:1b:12:62:2b:e1:b7:
         0f:15:65:02:41:42:db:41:70:57:54:14:5a:e1:0b:fd:c8:29:
         f6:d9:e6:26:26:4d:e6:2a:ca:69:5a:92:ac:dd:c0:49:aa:dc:
         a9:e7:aa:41:bb:90:a3:0c:bb:a1:51:70:ce:ac:c2:3a:7b:6a:
         39:ab:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----