Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/55ba1d68121aec4620d4f8cc69c984677b1e69a5.roa
File:                     55ba1d68121aec4620d4f8cc69c984677b1e69a5.roa (raw, json)
Hash identifier:          D+2dQzBd/KogZeFJlE5xPMYbmDal6adnGf7TEhupaCk=
Subject key identifier:   D0:3A:D3:E6:B7:E7:A2:4E:E0:A7:65:2B:7F:71:EE:82:6E:94:E7:AE
Certificate issuer:       /CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Certificate serial:       0AE768
Authority key identifier: 79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/55ba1d68121aec4620d4f8cc69c984677b1e69a5.roa
Signing time:             Wed 31 Jan 2024 14:10:04 +0000
ROA not before:           Wed 31 Jan 2024 14:10:04 +0000
ROA not after:            Sat 31 Jan 2026 14:10:04 +0000
asID:                     272883
IP address blocks:        2803:5a90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714600 (0xae768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
        Validity
            Not Before: Jan 31 14:10:04 2024 GMT
            Not After : Jan 31 14:10:04 2026 GMT
        Subject: CN=55ba1d68121aec4620d4f8cc69c984677b1e69a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8b:de:d7:82:2b:6f:c0:ec:9b:a9:3c:e6:d9:
                    aa:a7:54:e7:90:89:ac:ca:73:61:10:fd:5c:d1:74:
                    e4:65:68:1c:f7:a0:0e:5f:80:bc:f5:25:58:51:eb:
                    f8:cb:7f:80:70:cf:5f:5f:5d:26:d1:65:7c:e8:a7:
                    5c:1c:3f:43:e7:f0:cf:2b:0d:e0:a4:15:3e:3d:72:
                    2c:27:49:4c:b5:dd:91:8f:be:ce:0f:f1:de:2f:43:
                    27:b0:80:71:91:4b:04:55:f2:e5:64:7d:b0:bd:f5:
                    c6:f3:ac:79:59:f0:90:23:4f:88:73:a0:02:0d:e1:
                    ea:de:92:e1:9a:d8:1c:97:72:59:3e:df:4d:4a:05:
                    20:57:9d:be:2a:83:f2:42:79:7e:80:04:24:98:c1:
                    2b:33:be:cf:a2:15:ea:08:56:4e:af:72:2e:2d:48:
                    a1:c0:46:64:f9:66:45:9b:a8:9d:e5:e6:97:39:57:
                    a1:fb:18:6f:b7:ac:c4:1f:db:ee:29:cf:a8:c5:93:
                    4d:d6:86:30:00:54:45:ca:24:ce:05:77:1d:eb:04:
                    03:93:b7:f7:89:af:01:f2:00:e0:ba:71:df:a6:77:
                    ca:d2:6c:63:08:7f:ec:44:e0:92:61:85:da:a8:eb:
                    1f:95:8b:fe:5c:17:99:19:0e:ed:f6:7c:59:77:7b:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:D3:E6:B7:E7:A2:4E:E0:A7:65:2B:7F:71:EE:82:6E:94:E7:AE
            X509v3 Authority Key Identifier:
                keyid:79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/55ba1d68121aec4620d4f8cc69c984677b1e69a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:aa:69:52:be:53:2e:2a:42:7a:6b:2f:f8:db:70:b9:3a:
         24:98:16:cf:59:a1:c8:1a:d4:3d:cd:59:7e:92:47:df:97:a9:
         dd:24:3c:96:1a:05:d8:d7:38:51:bf:11:00:ca:f3:6b:15:14:
         5b:32:bd:7e:ce:02:58:24:98:88:d9:e5:8a:1d:18:d7:a3:e8:
         31:c4:7b:12:bd:68:1f:9f:96:87:c4:7d:18:aa:13:c2:37:e8:
         0e:1a:77:1d:4e:4a:15:1d:62:b3:4c:87:34:6d:80:5b:da:56:
         75:f7:db:1d:f9:6f:82:7f:06:ed:47:13:02:66:e8:df:14:f1:
         e3:c0:e9:bb:ec:46:c5:b1:52:7c:65:85:01:b1:0f:5d:ee:ae:
         b7:69:68:d3:16:80:c4:28:d5:d6:ce:16:ac:8b:0a:3c:9d:8f:
         1c:aa:82:53:74:52:ad:ad:d0:48:bd:f8:86:79:bf:15:8b:f0:
         e8:40:0c:7f:5e:fc:88:b5:d3:f5:77:74:05:f0:6c:fc:9f:d2:
         a3:af:19:e9:dc:4c:11:a7:14:bb:51:03:15:e9:2d:f3:68:4a:
         04:28:d6:a0:a3:78:d5:40:aa:78:3a:2d:23:1d:86:98:4a:8a:
         ea:c2:03:4d:c9:6a:86:e8:bf:66:ed:75:e9:6c:15:e5:e5:89:
         53:0c:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----