Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa
File:                     5d40a8bc4bf11675581cc49addfb0841745d6528.roa (raw, json)
Hash identifier:          KWEtlRPphcW/pqso43Sl74GKaUVwNHoz0gG081m3fN4=
Subject key identifier:   5B:C7:9C:0B:4F:5C:49:84:50:D1:12:C0:77:1B:ED:80:5F:1F:97:D0
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       276503
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa
Signing time:             Tue 13 Feb 2024 21:08:13 +0000
ROA not before:           Tue 13 Feb 2024 21:08:13 +0000
ROA not after:            Fri 13 Feb 2026 21:08:13 +0000
asID:                     262191
IP address blocks:        2800:b70:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581763 (0x276503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:08:13 2024 GMT
            Not After : Feb 13 21:08:13 2026 GMT
        Subject: CN=5d40a8bc4bf11675581cc49addfb0841745d6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:74:14:3c:43:a2:bb:04:7e:d0:5a:0e:77:
                    00:c3:1d:33:5c:72:ac:ad:ff:1d:87:24:a8:de:db:
                    c3:48:14:90:48:01:c7:5d:76:40:49:0e:b6:b7:f1:
                    43:3c:d5:31:f6:35:e6:e5:a4:06:b3:fc:6a:7c:3c:
                    d9:f1:12:c1:78:84:32:c2:83:71:f7:fe:b9:61:96:
                    76:52:a9:4e:49:79:11:93:97:4c:ab:9a:ba:c4:75:
                    6e:b4:12:cf:d1:23:ea:38:15:cc:26:77:b1:8c:7d:
                    a7:9c:fd:cc:a6:a4:b3:cf:2b:8d:5d:9a:88:b6:2f:
                    11:61:ee:19:be:85:f5:d7:0a:9a:03:4b:8a:09:30:
                    83:79:41:70:bc:b2:7e:f5:cb:90:82:68:68:47:11:
                    c2:91:f0:13:4e:86:e8:89:f3:31:37:c1:0e:59:4b:
                    47:8e:66:3f:57:40:4c:c4:8b:0a:83:0c:c7:5d:58:
                    ff:bd:5d:68:11:9a:d0:6d:bd:a4:b2:81:7e:b9:14:
                    24:66:3a:54:7a:9a:50:55:8a:9d:af:16:b9:11:5e:
                    53:18:f6:dc:47:24:59:f9:6f:dc:76:e7:0f:e2:b9:
                    13:17:9b:50:1d:f1:64:0b:e8:b5:58:b1:35:f9:9d:
                    12:af:e6:c0:9d:a2:a7:13:ee:68:82:50:e2:91:0b:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:9C:0B:4F:5C:49:84:50:D1:12:C0:77:1B:ED:80:5F:1F:97:D0
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5d40a8bc4bf11675581cc49addfb0841745d6528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:37:dd:b8:6e:13:94:f1:71:8d:b3:e9:b3:8c:8d:ac:a1:
         99:42:f1:3e:d5:e0:18:f2:6b:ec:00:fa:5e:a6:ca:6b:b4:f3:
         c0:35:04:7d:91:a8:5e:bd:4f:cd:d1:5b:b2:76:90:bb:44:87:
         53:6f:ec:f0:6f:6b:a2:73:91:55:04:16:f0:e0:d3:8d:e1:ca:
         c0:3d:4b:97:ab:bd:3c:4d:d0:f4:eb:2e:06:78:b7:5f:c7:ee:
         41:20:60:5e:43:87:fe:7d:c0:dc:c0:27:82:4e:70:de:27:d0:
         06:04:31:5d:ca:9b:2b:48:0d:be:03:b7:e8:ef:c1:1d:59:94:
         56:33:1b:c8:ed:d0:df:53:10:b6:d2:53:2f:75:50:72:25:76:
         42:c5:27:33:03:d1:59:b1:08:c1:4c:94:78:0d:04:26:19:7e:
         29:f6:d6:6c:9b:91:13:b7:87:17:33:ba:a9:40:ac:1f:40:92:
         69:10:02:8e:df:b8:ab:68:ef:be:e7:a8:0b:27:40:d3:97:11:
         07:12:94:1c:aa:3d:43:04:b2:c9:e0:2e:0c:31:f9:16:9b:97:
         73:45:c1:c8:79:a0:4e:2f:d9:b8:97:aa:f2:90:c2:71:5c:9b:
         f5:04:9c:8d:89:40:40:5d:37:8a:b0:04:b3:c1:5c:d1:85:db:
         04:5e:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----