Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/8d4bef226cb26d3265789c10697a5ebad0566e19.roa
File:                     8d4bef226cb26d3265789c10697a5ebad0566e19.roa (raw, json)
Hash identifier:          0sLFwA5bUezx1n0qPOaLmrMAOvxknL23JSLAQ76QxF4=
Subject key identifier:   FD:0A:AE:8C:11:7A:55:F0:61:4D:4A:D5:C6:91:B2:51:7B:7B:25:2C
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       2725D0
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/8d4bef226cb26d3265789c10697a5ebad0566e19.roa
Signing time:             Mon 12 Feb 2024 15:08:15 +0000
ROA not before:           Mon 12 Feb 2024 15:08:15 +0000
ROA not after:            Thu 12 Feb 2026 15:08:15 +0000
asID:                     262191
IP address blocks:        2800:b70:d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565584 (0x2725d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 12 15:08:15 2024 GMT
            Not After : Feb 12 15:08:15 2026 GMT
        Subject: CN=8d4bef226cb26d3265789c10697a5ebad0566e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:c5:4f:85:78:eb:65:14:06:fa:06:aa:50:
                    0b:5a:c1:49:4e:5e:20:f5:38:81:3e:79:98:77:72:
                    35:df:fb:76:aa:72:06:cf:14:f2:ad:13:af:ac:9f:
                    0b:35:05:8e:be:59:0f:16:7d:9b:e4:df:93:bd:5c:
                    1c:4c:31:fc:2a:c5:07:e4:af:ad:cc:b9:38:41:d5:
                    2e:83:5c:fb:bb:07:79:87:2f:40:86:6e:d2:c5:06:
                    b7:1e:e0:25:77:14:ca:9c:0d:2e:9a:50:e4:da:34:
                    ea:96:3d:1d:1a:95:58:e3:8b:16:ac:a1:82:2e:28:
                    5e:d7:a1:8a:dd:8e:e8:cf:bd:5f:ab:c6:a4:66:93:
                    d4:b2:e3:32:41:be:62:a0:a2:4b:91:a2:3c:41:73:
                    05:2e:e3:94:34:ca:be:b4:df:9f:3c:f9:21:d7:41:
                    23:c9:5e:5a:a4:40:e6:f6:dc:ce:f9:12:34:74:a8:
                    87:e0:bf:f5:2f:d0:66:fd:be:6d:5c:ed:02:1f:de:
                    80:c7:37:0f:7b:23:ea:c6:12:b0:1b:a2:7b:5f:47:
                    29:e5:f8:b6:09:a2:ab:d3:9d:1f:96:c7:90:f5:f1:
                    0a:1c:e3:65:bc:b4:1e:f3:1c:95:f5:15:92:4d:b8:
                    82:3a:57:48:91:4c:34:96:b9:de:f0:54:2b:0d:bc:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:AE:8C:11:7A:55:F0:61:4D:4A:D5:C6:91:B2:51:7B:7B:25:2C
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/8d4bef226cb26d3265789c10697a5ebad0566e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         d5:f7:67:da:c9:d9:9d:f5:53:79:b5:ec:86:c0:93:f7:c2:97:
         47:9a:d1:3b:1e:d6:c0:ca:7b:34:57:f9:0c:6b:05:bd:77:6a:
         35:9f:74:46:4a:31:9a:ed:59:17:40:d3:9b:3c:af:cc:13:ae:
         71:3c:27:5a:dd:74:77:0f:52:fb:11:79:23:eb:62:fd:19:92:
         aa:c4:c1:4f:5c:cd:0b:a3:ce:4f:3b:3f:03:88:76:a8:ec:22:
         62:22:61:5b:fb:46:73:a2:14:06:b4:b6:bf:39:43:c4:02:3c:
         9c:3d:ed:f6:c3:c0:38:ff:6f:15:cc:0d:5c:82:1a:2e:15:fc:
         91:35:f2:47:80:cb:62:7f:dd:a6:3c:ec:da:d0:9d:d0:d4:c8:
         d7:6a:fe:40:9e:57:1d:92:6f:75:d4:2d:56:a6:ab:c9:19:cd:
         03:8a:e1:24:42:2e:5f:3e:57:b0:30:79:a4:ca:14:3c:60:a6:
         bc:f3:25:ce:0f:fd:3c:ce:e5:61:b4:b0:72:41:4f:a5:b7:97:
         e2:ba:40:d1:ef:42:b4:fc:2d:77:9f:db:0f:ab:8f:01:ab:ee:
         11:cc:ba:9f:9d:be:22:db:8e:2b:b2:64:29:06:45:83:6b:03:
         a6:9c:61:66:0a:6e:09:23:44:40:66:7e:93:d8:2a:4e:be:47:
         53:08:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----