Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/2927a7d88a43f1721d7238688d16971bcf1c5399.roa
File:                     2927a7d88a43f1721d7238688d16971bcf1c5399.roa (raw, json)
Hash identifier:          iOYNq5nY/VOh5Y67Wp6INg/vARA/rbc39wj2SmZWdvQ=
Subject key identifier:   BB:ED:98:ED:AE:F2:1F:14:22:D2:AD:9E:4D:DD:7B:2E:C1:7E:FA:C3
Certificate issuer:       /CN=96a71b323517284a72a07373f4fbd5c14a4e186c
Certificate serial:       05D9
Authority key identifier: 15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96a71b323517284a72a07373f4fbd5c14a4e186c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/2927a7d88a43f1721d7238688d16971bcf1c5399.roa
Signing time:             Tue 14 Feb 2023 17:57:16 +0000
ROA not before:           Mon 13 Feb 2023 17:56:05 +0000
ROA not after:            Fri 14 Feb 2025 17:56:05 +0000
asID:                     272950
IP address blocks:        2803:2990::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a71b323517284a72a07373f4fbd5c14a4e186c
        Validity
            Not Before: Feb 13 17:56:05 2023 GMT
            Not After : Feb 14 17:56:05 2025 GMT
        Subject: CN=2927a7d88a43f1721d7238688d16971bcf1c5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:90:e7:0e:b2:f3:f0:47:5c:fc:92:9c:08:
                    a3:3f:0c:21:ff:eb:3c:d7:f5:52:6b:ae:c2:eb:84:
                    5c:28:52:bb:8c:1d:49:d6:7c:b2:0c:1e:05:e2:79:
                    bf:e8:7f:7e:48:b7:94:14:dd:a7:41:09:8c:af:de:
                    2f:e4:8e:87:c8:26:4e:06:5a:5d:3e:34:da:c3:f9:
                    19:18:74:8a:6c:65:80:7d:32:f0:41:c7:89:d1:ee:
                    48:f1:d2:c0:ac:f5:66:6c:b2:08:47:e5:62:77:4a:
                    f0:d0:32:f9:e9:37:ae:e5:b6:88:31:62:6d:b3:6b:
                    1a:f4:18:5f:07:9a:60:31:9a:5c:de:07:0d:4e:fd:
                    45:75:08:a1:2c:24:fd:13:e7:59:65:14:b1:97:c4:
                    a7:86:f1:d4:d2:27:a6:08:9e:86:26:21:e6:fa:78:
                    fa:04:87:cd:37:68:39:93:a7:51:32:53:af:ee:1d:
                    bc:e8:63:02:c2:ae:c0:4d:43:54:2e:80:96:8f:50:
                    28:2e:b8:7c:3e:bd:89:dd:f6:62:40:77:4e:b2:98:
                    a5:99:71:d4:75:7e:d4:84:12:21:33:44:68:21:58:
                    f4:c3:91:9a:b8:93:fa:c9:36:73:84:55:6b:29:ca:
                    af:05:2f:63:1e:b2:d1:2b:5b:04:9d:e2:98:ca:ea:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:ED:98:ED:AE:F2:1F:14:22:D2:AD:9E:4D:DD:7B:2E:C1:7E:FA:C3
            X509v3 Authority Key Identifier:
                keyid:15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96a71b323517284a72a07373f4fbd5c14a4e186c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/2927a7d88a43f1721d7238688d16971bcf1c5399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/96a71b323517284a72a07373f4fbd5c14a4e186c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2990::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:43:1a:6e:b9:d3:ba:d6:11:05:ee:aa:eb:bc:16:0c:27:5e:
         30:97:fc:36:32:6b:0a:37:d7:05:69:e6:8b:e7:d0:c1:75:9f:
         d2:34:1e:7b:53:43:ad:60:3d:78:30:73:a4:46:8c:b1:b0:43:
         74:cf:61:45:37:6c:f7:a2:00:03:ef:68:2a:10:28:43:ed:1b:
         fa:d9:3c:21:fb:45:2d:72:bd:fa:e9:c9:7a:eb:af:13:7c:2b:
         56:0f:58:58:8b:71:97:35:c8:7f:fd:e6:87:78:c6:85:e8:30:
         de:26:d1:5e:ad:59:48:b0:cb:df:69:f3:4f:bd:d0:b8:f5:ea:
         b0:55:d1:dc:3f:0e:f3:2e:86:75:98:fc:51:2f:b2:7a:87:e2:
         71:bc:46:63:f3:05:d2:8b:64:ec:80:68:3b:e1:19:20:e1:78:
         04:40:51:8a:31:12:4b:fc:d1:c8:2d:06:f7:f8:db:d7:66:ea:
         3b:fc:1c:75:d0:91:55:b2:84:9f:9d:f2:85:07:24:77:ab:42:
         73:08:e8:43:c8:7e:76:fe:da:3d:06:57:94:5b:6f:f5:42:cc:
         35:19:69:dc:9f:d4:42:fa:e7:34:fb:92:81:05:7d:0c:b2:45:
         6a:aa:f1:b5:3d:62:7e:76:92:25:d8:73:98:f2:52:4d:fc:4b:
         35:77:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----