Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/adc9352e41d7112f2a34cefe51dfca90e58b506d.roa
File:                     adc9352e41d7112f2a34cefe51dfca90e58b506d.roa (raw, json)
Hash identifier:          98X7hSf4a3VLPe1x6jMz1ddEXGosszHqozN37nDDN+0=
Subject key identifier:   63:31:1C:01:E4:A9:E2:A0:5A:0E:DB:C6:24:FA:FA:98:98:CD:32:AA
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       0707AE
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/adc9352e41d7112f2a34cefe51dfca90e58b506d.roa
Signing time:             Sat 27 Jan 2024 02:13:58 +0000
ROA not before:           Sat 27 Jan 2024 02:13:58 +0000
ROA not after:            Tue 27 Jan 2026 02:13:58 +0000
asID:                     273008
IP address blocks:        2803:b590:1::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460718 (0x707ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Jan 27 02:13:58 2024 GMT
            Not After : Jan 27 02:13:58 2026 GMT
        Subject: CN=adc9352e41d7112f2a34cefe51dfca90e58b506d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:fa:ad:81:73:93:e9:03:50:39:96:ca:08:
                    ab:46:af:32:56:34:34:ef:98:97:95:23:83:b1:49:
                    ac:c0:d2:28:4a:e8:a5:22:e3:bc:56:6b:73:3b:fc:
                    03:34:ee:05:ec:7f:6b:20:6c:ef:8e:22:73:e1:b1:
                    4b:68:13:93:17:25:5c:ef:73:0d:a1:43:6a:bc:47:
                    5c:98:31:8f:95:b7:b6:e7:0c:0c:36:e1:20:b8:b4:
                    10:ea:68:90:ce:1f:87:b8:78:ab:c6:07:96:e7:46:
                    f4:2b:53:34:72:7e:2d:b9:6c:c5:ed:cc:c3:36:5e:
                    e7:28:d6:32:3c:df:53:d9:19:c5:12:e2:4d:10:21:
                    b5:a8:0a:01:f8:06:9e:99:2b:66:e8:09:80:76:5d:
                    54:66:3e:94:1b:f7:7e:6c:02:17:b7:2b:69:b1:8b:
                    db:73:8b:58:32:1e:81:73:a8:36:bb:1a:e3:88:be:
                    6b:9b:e9:5a:e5:c0:00:c9:b2:1b:4a:22:e1:01:4c:
                    c6:d1:4f:30:b9:40:73:42:5b:9d:25:dd:56:8b:0f:
                    4f:ca:d9:49:98:0d:8d:8d:21:1b:c9:d1:49:ee:46:
                    9a:d8:d7:af:31:32:40:2b:b2:8e:3d:40:2d:d0:e7:
                    bc:48:53:45:2b:05:8d:81:60:91:2c:e8:22:62:a5:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:1C:01:E4:A9:E2:A0:5A:0E:DB:C6:24:FA:FA:98:98:CD:32:AA
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/adc9352e41d7112f2a34cefe51dfca90e58b506d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:5d:cf:30:83:35:f5:70:fa:e8:8a:eb:e7:89:aa:9c:19:
         39:6e:9c:1b:c5:b5:f7:d2:9d:07:c4:cf:ea:52:12:c0:4f:00:
         96:95:42:e2:92:b3:5f:86:5c:69:97:dd:11:73:6b:6d:18:ec:
         d3:0c:10:bc:f9:a0:3e:c4:cc:89:54:e3:d6:bd:d8:85:4f:35:
         f5:86:82:7b:57:a2:65:81:7d:3d:da:d7:a4:e1:ce:ad:79:59:
         76:47:6b:23:66:c1:a1:22:90:8f:11:9c:bd:29:04:f6:a4:16:
         54:74:03:a4:15:0d:71:25:96:03:49:57:73:a3:8b:c5:44:78:
         80:ea:15:f2:f2:83:00:12:30:13:cd:d9:e7:9f:81:62:7b:de:
         9b:5d:57:58:23:b3:54:d0:e3:d4:f7:d3:01:00:2f:87:0a:74:
         01:ff:74:1e:69:bd:14:13:3f:4f:d2:84:ba:c0:f2:5e:71:79:
         f5:23:5a:56:13:64:2f:fd:cf:f2:39:dc:89:2a:fb:69:33:fd:
         55:5e:06:94:ae:44:70:b9:9d:31:af:d2:41:ec:ca:33:e8:c3:
         20:b3:bb:02:a7:4f:36:30:f2:64:4d:e6:1d:98:47:9c:ff:c2:
         ae:94:7c:bf:06:11:84:36:b9:85:a2:e9:9d:5e:d3:ef:df:ee:
         8d:13:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----