Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/7dbfeb4fe1877b3f4f2ab8ed987fa0f5ccc8c37a.roa
File:                     7dbfeb4fe1877b3f4f2ab8ed987fa0f5ccc8c37a.roa (raw, json)
Hash identifier:          Fks8ezfr8oEHfNE7sbDyLoL5lkfnNukEj+SZMGR0DWo=
Subject key identifier:   9C:B9:27:CB:25:35:00:BA:7B:97:51:89:80:82:86:A6:4C:F9:A4:DB
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       2742EA
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/7dbfeb4fe1877b3f4f2ab8ed987fa0f5ccc8c37a.roa
Signing time:             Tue 13 Feb 2024 21:04:02 +0000
ROA not before:           Tue 13 Feb 2024 21:04:02 +0000
ROA not after:            Fri 13 Feb 2026 21:04:02 +0000
asID:                     262191
IP address blocks:        2800:b70:22::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573034 (0x2742ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:04:02 2024 GMT
            Not After : Feb 13 21:04:02 2026 GMT
        Subject: CN=7dbfeb4fe1877b3f4f2ab8ed987fa0f5ccc8c37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:1e:60:a6:b0:93:fd:c0:7d:20:09:20:6e:
                    38:03:6b:72:48:16:a8:9e:d5:d8:0a:17:dd:f4:5f:
                    75:7a:55:f6:67:77:ba:45:6f:15:fe:fa:3a:56:c8:
                    f9:53:7f:11:f2:bb:0e:29:7c:af:74:1f:25:33:1e:
                    ef:83:a6:ba:28:6a:cb:c5:85:2b:93:a4:7d:03:6d:
                    86:9f:a6:c9:68:b6:bb:d2:59:d4:f1:45:4c:56:35:
                    32:41:9e:1f:7f:09:61:d2:61:85:25:65:bf:b3:52:
                    60:61:f4:05:e0:64:76:61:31:7d:62:7e:f7:84:13:
                    86:b8:2e:ef:77:17:0c:7d:12:b5:5e:ae:be:d7:c5:
                    27:9d:cd:6b:b5:1e:83:30:43:ef:18:27:3e:0f:7c:
                    76:a2:24:8e:85:17:ef:18:c5:95:50:2a:77:0d:39:
                    7f:b0:19:26:56:13:7f:38:9e:6d:c1:d3:23:b4:1d:
                    67:d6:fd:c8:73:d4:e4:3b:13:35:a1:44:41:d0:a6:
                    67:ba:0b:24:3c:00:20:61:1e:bf:ee:b9:0e:f7:b7:
                    40:0b:4f:67:e3:99:3f:50:1e:e5:52:bb:70:f4:d6:
                    8e:ff:76:53:9b:11:a7:a6:fc:23:f6:6c:c6:60:86:
                    dc:00:08:6c:ca:80:94:be:f8:92:99:8d:f8:c0:ca:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B9:27:CB:25:35:00:BA:7B:97:51:89:80:82:86:A6:4C:F9:A4:DB
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/7dbfeb4fe1877b3f4f2ab8ed987fa0f5ccc8c37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:b0:e1:da:b2:b3:d2:0f:39:2c:22:dd:97:9a:e0:81:14:69:
         13:44:36:0d:9f:d9:03:18:6e:56:3e:5a:45:32:fa:02:56:2c:
         a5:1b:81:75:c5:04:1e:11:bf:ba:31:16:1d:5b:c5:f1:42:7d:
         ef:56:97:15:de:ba:dc:af:d6:20:24:76:bc:c5:32:74:54:bf:
         83:24:72:d4:d4:8b:37:ca:26:20:27:fb:e3:00:81:10:e5:6e:
         f4:df:f4:51:a9:b8:d2:4e:a8:90:90:99:88:4a:ac:66:8f:c4:
         d3:01:1c:c7:f5:82:3c:81:db:63:54:43:db:66:a7:59:da:3c:
         dd:4f:85:23:52:fe:94:30:c1:80:06:d6:fc:92:db:45:66:b2:
         ae:50:ad:d1:c4:7b:57:18:ec:fc:3a:03:83:f8:25:25:be:53:
         23:f7:f0:4c:49:19:93:80:2d:86:15:c4:fa:31:f5:87:e4:23:
         3a:52:43:41:fb:04:d3:d5:a5:6d:8a:8e:32:46:fb:c5:79:bf:
         29:e4:cd:aa:08:f3:25:db:16:e4:96:6a:ca:07:3e:a5:3d:89:
         99:31:35:f2:a3:d4:e6:89:d2:e6:20:a2:91:a1:9e:07:99:2f:
         29:ad:b9:1c:5d:fc:0f:80:f3:79:d3:c0:a0:ed:48:8e:2e:eb:
         32:ea:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----