Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/fa49346f036ca90d8bc5d04b82972668682b6c74.roa
File:                     fa49346f036ca90d8bc5d04b82972668682b6c74.roa (raw, json)
Hash identifier:          yT4e6GNwNdNSa7wOdIdLmj+0dqNauKkFpPSHFAA/sjc=
Subject key identifier:   D4:E0:87:3A:65:81:7A:4B:AC:58:54:7B:4A:65:2A:2B:37:F2:1F:13
Certificate issuer:       /CN=b08b134d19c661a4a28b302fd9901173cb75358b
Certificate serial:       133841
Authority key identifier: 63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/fa49346f036ca90d8bc5d04b82972668682b6c74.roa
Signing time:             Tue 25 Jul 2023 18:53:42 +0000
ROA not before:           Mon 24 Jul 2023 18:53:42 +0000
ROA not after:            Fri 25 Jul 2025 18:53:42 +0000
asID:                     265556
IP address blocks:        2806:308::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259585 (0x133841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b08b134d19c661a4a28b302fd9901173cb75358b
        Validity
            Not Before: Jul 24 18:53:42 2023 GMT
            Not After : Jul 25 18:53:42 2025 GMT
        Subject: CN=fa49346f036ca90d8bc5d04b82972668682b6c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:d8:72:14:ff:75:20:43:e8:fb:90:ba:55:
                    44:fd:9d:8c:04:39:99:d1:80:d4:8f:a8:54:43:a9:
                    82:d9:0c:e8:cd:7f:76:46:92:bb:72:7b:43:ef:11:
                    89:06:d4:a9:bf:76:93:e6:0a:b8:ea:d2:55:6a:d3:
                    b3:18:b9:a9:98:e4:01:82:9c:77:81:a8:df:ce:b7:
                    1a:d4:2a:f5:98:d8:11:77:8b:d0:bd:ca:36:9f:7d:
                    88:36:ca:b1:2b:9b:43:bf:6d:83:4f:b2:3a:67:03:
                    fe:58:32:fb:23:3f:be:80:67:bd:e4:81:eb:e2:90:
                    51:4b:1c:6c:81:61:54:be:74:97:5d:90:01:d8:cd:
                    74:1e:03:7b:d5:de:7b:59:c5:d7:07:aa:49:39:46:
                    15:d0:52:4f:31:08:ec:21:d9:e9:12:81:6c:47:a5:
                    52:19:66:43:ba:5f:87:09:42:1f:29:e5:80:5e:5d:
                    5b:05:dd:ba:e8:1c:87:65:b9:4c:08:38:fa:cb:d8:
                    59:12:2a:18:be:f1:6f:de:87:8e:12:f9:30:b9:87:
                    b2:3a:3e:84:77:d3:ab:e4:15:41:55:8a:69:e6:ac:
                    5e:7b:9e:ac:c3:7e:1d:31:b6:6f:3b:aa:87:5f:33:
                    fe:78:4e:54:87:18:22:5e:13:77:f4:9e:ff:03:19:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:87:3A:65:81:7A:4B:AC:58:54:7B:4A:65:2A:2B:37:F2:1F:13
            X509v3 Authority Key Identifier:
                keyid:63:9C:22:C0:00:1B:34:C0:BF:FC:18:55:B2:11:0E:2C:71:4F:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b08b134d19c661a4a28b302fd9901173cb75358b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/fa49346f036ca90d8bc5d04b82972668682b6c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143bf6bf-4868-458d-8d64-0efb42c53a56/b08b134d19c661a4a28b302fd9901173cb75358b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:308::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:ce:03:08:a1:d8:b3:77:85:1d:f9:b6:13:f7:40:81:62:
         98:0b:62:f2:87:bb:6c:95:ca:03:5d:99:14:5c:3d:59:fc:41:
         07:6d:6d:b6:68:75:11:a9:1b:de:d4:34:ee:93:90:10:70:59:
         a4:a3:1a:0d:cb:fe:6e:14:de:4d:26:56:88:ff:7b:67:55:af:
         9f:50:0d:35:4b:81:2b:c7:4a:2a:a2:c1:92:90:4d:5b:64:f5:
         7d:40:f1:f8:b3:9f:1f:82:5e:80:33:c7:81:97:9b:9e:ae:56:
         43:35:3b:15:b3:f0:79:63:c0:20:57:3b:d4:94:df:ef:1e:e8:
         04:29:87:a9:0d:86:c7:47:6f:11:3a:7b:6e:d2:66:cd:f2:02:
         3f:a0:9a:68:db:c6:6b:b6:65:92:db:38:32:a5:aa:ad:eb:fa:
         11:37:23:04:7e:7f:3a:b6:26:9e:af:82:2a:b6:3e:8d:a1:db:
         3a:4d:22:4b:d4:b3:5f:c3:23:27:c0:7d:50:ac:40:2b:c1:23:
         5b:e2:8d:0a:05:3b:98:5f:fd:76:d1:e4:11:64:0a:96:47:0e:
         9f:a8:02:88:cf:1c:ae:1c:40:62:79:51:88:3d:66:36:70:a0:
         30:ba:fd:f9:81:e7:90:26:bc:e4:ad:b1:50:64:9c:0c:3d:bb:
         01:50:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----