Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/126aafd060611a2f7c293922e7ed903aadd1bdc9.roa
File:                     126aafd060611a2f7c293922e7ed903aadd1bdc9.roa (raw, json)
Hash identifier:          hPFbeUZF51GXIGbtiH4CjOqRiqrGRTstg48TIplvzC0=
Subject key identifier:   37:AA:75:74:BA:42:97:70:38:C0:F8:27:3E:87:82:C6:B9:6C:7A:4F
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       274C03
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/126aafd060611a2f7c293922e7ed903aadd1bdc9.roa
Signing time:             Tue 13 Feb 2024 21:05:06 +0000
ROA not before:           Tue 13 Feb 2024 21:05:06 +0000
ROA not after:            Fri 13 Feb 2026 21:05:06 +0000
asID:                     262191
IP address blocks:        2800:b70:20::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575363 (0x274c03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:05:06 2024 GMT
            Not After : Feb 13 21:05:06 2026 GMT
        Subject: CN=126aafd060611a2f7c293922e7ed903aadd1bdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:85:24:02:13:d2:7c:00:06:53:26:e8:cb:
                    9f:55:09:93:09:59:8d:e6:94:aa:48:23:a7:22:f2:
                    c4:64:e1:b8:a4:82:a7:d0:d3:8a:82:45:0a:fb:68:
                    3a:bd:49:46:3d:56:d9:0e:c4:ad:5c:00:32:7c:d8:
                    4c:1e:bc:7b:10:ad:fa:92:e3:4c:18:e7:d8:a4:8b:
                    d3:23:f4:59:b4:93:6e:e1:3d:55:6f:42:c2:69:51:
                    7e:20:05:86:05:c0:a5:8f:02:cd:68:4b:96:b8:fd:
                    21:d0:b6:fd:39:da:4a:b5:7b:e5:48:cf:ce:12:3f:
                    1e:6e:bb:21:bf:93:39:05:d4:fd:58:f9:45:ae:8f:
                    f0:73:1f:81:c1:6c:ad:77:49:75:d9:47:c5:e9:b7:
                    ad:ff:fa:57:37:b6:53:0c:ad:19:89:a6:73:44:40:
                    57:bf:e3:64:76:25:1f:bc:e1:75:71:f2:20:66:9d:
                    b6:ec:ee:c7:55:a2:49:d5:97:b6:08:9c:68:e1:9c:
                    0d:ba:85:5f:56:25:16:db:4c:c8:84:ff:3d:97:a7:
                    84:b6:d3:1f:39:08:6f:a7:56:04:25:98:e3:7e:35:
                    64:01:cf:bd:c6:97:b6:89:df:fc:21:ad:9c:d4:10:
                    9f:47:2c:55:92:17:1a:4f:17:39:2f:a7:92:95:f9:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:75:74:BA:42:97:70:38:C0:F8:27:3E:87:82:C6:B9:6C:7A:4F
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/126aafd060611a2f7c293922e7ed903aadd1bdc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:a0:79:05:55:74:a3:22:a1:be:dd:b4:2c:b0:72:db:ec:
         0f:60:64:f5:13:2c:3c:21:1e:3d:e7:8f:89:a5:1d:71:40:cf:
         f2:c9:9f:bc:7c:85:c7:57:36:8d:aa:8d:66:65:6c:cb:f0:90:
         b0:b8:f4:10:de:c2:64:e0:11:a8:a7:dd:a4:08:d8:48:bf:b6:
         68:3b:0c:7d:3e:60:ba:1e:8b:1d:8c:fb:5d:f6:8d:f8:33:5e:
         71:4e:3e:0b:6b:d3:fd:4e:48:8d:11:95:75:27:09:04:08:20:
         41:56:87:3a:0f:51:e0:ac:b1:3c:eb:b3:da:86:71:a9:f7:b8:
         50:c3:e9:56:ae:2d:d4:59:3d:5c:d9:91:d2:06:42:8d:59:49:
         6c:e1:09:4a:32:45:9a:a5:07:22:53:1a:77:84:e6:87:6c:0a:
         63:c2:c4:b3:4b:c6:00:36:b7:95:18:7b:ec:8b:3b:fb:5b:d8:
         66:cc:e4:ed:2d:15:b5:a3:d7:b7:78:7d:b2:3a:27:b8:c9:64:
         97:8f:ce:12:5f:5c:d2:45:d6:bd:88:50:e1:c0:22:67:62:df:
         03:bc:f1:69:a2:c0:22:5e:84:cb:44:13:26:f7:79:db:4b:c2:
         6d:5a:df:a6:4f:8e:42:7c:09:76:41:c1:a0:a4:61:a6:6f:fa:
         bb:53:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----