Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5fd350ddab2bf84dd9565c1fc7d868a16c2f3a28.roa
File:                     5fd350ddab2bf84dd9565c1fc7d868a16c2f3a28.roa (raw, json)
Hash identifier:          7KYmsQN1cdEmV8ci/ru3cTgDjoHp8kMPjvI7lnvMHxc=
Subject key identifier:   9D:A1:10:3E:08:59:C2:A6:29:13:16:E4:CA:BA:D0:97:08:A6:16:E1
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       272B95
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5fd350ddab2bf84dd9565c1fc7d868a16c2f3a28.roa
Signing time:             Mon 12 Feb 2024 15:08:58 +0000
ROA not before:           Mon 12 Feb 2024 15:08:58 +0000
ROA not after:            Thu 12 Feb 2026 15:08:58 +0000
asID:                     262191
IP address blocks:        2800:b70:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2567061 (0x272b95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 12 15:08:58 2024 GMT
            Not After : Feb 12 15:08:58 2026 GMT
        Subject: CN=5fd350ddab2bf84dd9565c1fc7d868a16c2f3a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:25:5a:c6:c4:65:b6:c0:e1:cb:03:4d:c2:
                    5a:fc:f2:c2:8e:a3:03:ad:dc:86:cf:04:5a:bd:73:
                    42:e2:17:0e:4b:f5:c4:9f:38:e0:8a:a5:80:50:7f:
                    48:aa:33:14:20:92:34:b1:d3:78:d1:bf:fa:02:61:
                    4a:48:77:7c:6e:4c:cb:43:da:78:65:1d:a7:50:42:
                    f5:33:87:2e:06:d4:4a:f5:b0:3b:2a:76:2f:55:34:
                    e8:13:8a:75:f0:18:c4:75:c5:87:62:7c:e9:bf:a7:
                    da:2b:e6:47:49:55:98:5e:df:b5:6e:98:53:d9:50:
                    e7:e5:96:c4:37:08:5f:88:b3:5c:79:10:93:b1:56:
                    5c:77:bf:07:3f:84:a2:93:19:49:b7:ac:ca:14:f4:
                    f4:90:9d:f2:39:b0:e0:24:7a:76:1a:7b:05:5d:fa:
                    71:bc:e5:04:55:99:2d:df:fd:a6:0b:d0:25:6a:e3:
                    d0:70:0d:d9:2a:57:df:aa:72:5e:87:e8:6b:4a:90:
                    34:6c:e7:fe:bf:17:81:98:a9:b3:d7:01:88:f2:7f:
                    d0:18:73:9e:4b:57:b9:97:ca:eb:8c:11:35:3c:62:
                    cc:f5:a5:09:a6:ca:d4:fd:30:8e:9b:73:6d:65:c2:
                    bb:16:9c:d8:94:70:f5:e0:b5:66:c1:5a:7f:3b:bd:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A1:10:3E:08:59:C2:A6:29:13:16:E4:CA:BA:D0:97:08:A6:16:E1
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/5fd350ddab2bf84dd9565c1fc7d868a16c2f3a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ec:40:e4:d4:00:24:5a:0b:bc:98:25:89:0e:29:05:a5:90:
         9a:7b:a9:00:68:eb:34:b7:20:89:bb:f0:32:cf:06:0f:72:0b:
         43:49:8f:fd:1b:e5:f7:c3:23:2a:e1:bd:10:8a:20:c5:9a:d6:
         02:54:b1:1c:41:31:57:06:b3:b9:26:ce:3b:5e:7b:fd:8a:4e:
         2b:b3:6c:c0:b2:a4:5e:3e:4d:52:38:a8:c4:a2:04:be:88:65:
         bb:5c:d7:47:47:ef:23:5b:bd:42:63:7a:6c:54:b3:80:52:fc:
         47:c0:ae:74:4c:62:dd:d9:f3:06:fd:4b:86:c5:34:25:cf:8b:
         aa:be:da:1d:27:ed:0d:84:86:8b:08:76:9b:cb:f8:78:a2:cb:
         90:fe:fa:16:26:09:65:d1:12:2c:1c:93:79:f3:b9:90:d5:40:
         cf:39:f4:3a:64:df:63:b9:d3:ea:a2:96:f7:4e:4c:e3:c3:6c:
         44:3c:63:e0:ea:31:ad:ad:11:bf:11:10:ef:bd:28:2f:28:64:
         4a:51:6c:64:38:c5:cd:b8:b0:0a:18:6c:97:a7:1f:9c:7c:f3:
         81:b8:7c:f1:78:cf:98:78:df:23:d1:c9:e1:5f:2a:17:fb:60:
         cc:7b:41:a0:9a:f5:f5:bb:2a:5a:2d:c7:db:dc:7e:45:58:c1:
         df:5d:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----