Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/7ac2528292debdef3fd16d1f7243a49e68a2ad4c.roa
File:                     7ac2528292debdef3fd16d1f7243a49e68a2ad4c.roa (raw, json)
Hash identifier:          buopR1sDovNDY8cIgLilvqnfuUeOm62G65EVi5iMdU0=
Subject key identifier:   7B:52:43:47:3A:29:92:4A:EB:4E:32:0B:2A:28:5C:D2:BC:13:22:AF
Certificate issuer:       /CN=d6b918741dcd36c0f74f9623684dac9f1090b5af
Certificate serial:       0389EA
Authority key identifier: D7:3F:AA:ED:A1:31:F6:10:68:DA:FA:33:63:74:F2:F7:38:8A:04:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6b918741dcd36c0f74f9623684dac9f1090b5af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/7ac2528292debdef3fd16d1f7243a49e68a2ad4c.roa
Signing time:             Wed 26 Apr 2023 15:42:20 +0000
ROA not before:           Tue 25 Apr 2023 15:42:20 +0000
ROA not after:            Sat 26 Apr 2025 15:42:20 +0000
asID:                     271914
IP address blocks:        2803:b210::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231914 (0x389ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b918741dcd36c0f74f9623684dac9f1090b5af
        Validity
            Not Before: Apr 25 15:42:20 2023 GMT
            Not After : Apr 26 15:42:20 2025 GMT
        Subject: CN=7ac2528292debdef3fd16d1f7243a49e68a2ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:22:f6:f5:31:f8:94:62:a9:c8:93:18:ec:
                    cc:ac:8a:dd:e7:26:a9:b8:9b:6c:ab:a5:7a:a5:97:
                    00:90:0a:70:7c:1d:04:85:a9:7c:8a:d4:26:9b:9a:
                    e7:d6:e4:8d:7a:f9:ec:b4:03:25:1b:26:56:d5:9f:
                    6d:f8:d4:82:b4:aa:95:58:4e:0b:f0:eb:81:72:0e:
                    ba:1f:0d:ac:af:df:4a:05:ba:41:dc:62:1e:37:9a:
                    ef:52:fa:a1:45:1e:95:df:d5:85:9e:51:eb:04:2e:
                    6d:c3:49:a3:04:6d:0d:54:86:00:ad:54:e9:1d:40:
                    af:af:04:92:57:3d:ca:49:20:1b:cb:18:bf:8f:e6:
                    13:1e:c2:16:b4:5b:db:23:46:98:13:da:7e:d1:3f:
                    0b:fb:fb:6a:1b:c6:b3:29:b7:6a:ac:1a:c4:4f:d5:
                    b9:37:19:d2:19:5b:05:02:d5:1e:7d:28:8a:c6:6b:
                    1f:1e:d3:c3:46:0c:93:9e:cf:11:de:a5:1c:6e:55:
                    e6:f0:7f:b9:93:05:a0:51:11:0e:06:85:0a:75:ad:
                    1a:10:41:02:71:6e:2e:90:7a:9c:ce:b5:b2:53:57:
                    60:88:38:19:7a:19:70:06:72:df:bd:2d:a1:c4:2c:
                    73:18:03:c3:d4:3f:ae:cc:fb:f3:41:33:47:87:42:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:43:47:3A:29:92:4A:EB:4E:32:0B:2A:28:5C:D2:BC:13:22:AF
            X509v3 Authority Key Identifier:
                keyid:D7:3F:AA:ED:A1:31:F6:10:68:DA:FA:33:63:74:F2:F7:38:8A:04:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6b918741dcd36c0f74f9623684dac9f1090b5af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/7ac2528292debdef3fd16d1f7243a49e68a2ad4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14364b83-0370-4015-9af4-72224300ce49/d6b918741dcd36c0f74f9623684dac9f1090b5af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b210::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:50:dd:be:d0:69:c8:f3:41:c1:b9:00:ba:35:59:27:de:
         2b:51:f2:e7:23:71:1c:70:8b:1f:fe:37:41:33:f2:22:a1:9c:
         f6:42:69:65:72:ec:44:2a:96:b9:55:e1:3f:47:d7:4e:10:b1:
         a7:01:dd:87:2f:08:aa:e7:78:4c:3b:73:de:e2:9c:b4:08:a0:
         7b:29:04:4f:5b:3c:89:c5:cc:26:ab:b5:3c:c4:54:0a:d2:27:
         05:5e:9e:24:a3:fd:a9:53:7e:9d:ee:b0:39:f5:fb:ca:38:75:
         bc:55:8e:b1:69:70:c2:1b:7e:6e:a6:1b:4d:ea:c1:10:56:dd:
         6c:0d:fc:15:4e:a8:ad:ec:fe:8e:a3:25:c5:bd:9b:15:30:75:
         71:b6:69:df:07:16:6e:23:c9:74:d0:12:2f:92:8d:c1:41:a2:
         b7:08:61:46:f0:11:93:b8:17:5b:2c:13:7f:1d:c3:0a:4e:17:
         76:a2:2a:fb:31:e5:a7:48:88:44:7e:2f:a8:66:a3:8a:99:61:
         bd:97:aa:96:f8:05:14:7c:db:3a:8f:48:79:d9:cc:f8:63:24:
         f4:8a:4d:e9:31:59:62:c8:84:7b:9f:53:13:f4:c0:bd:c2:55:
         f2:1f:ea:6c:a7:cd:24:c8:e2:12:47:a1:68:69:0b:34:6d:da:
         6c:c3:7a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----