Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/fdbdb6d4a757cf48aca1a58765c0947cd3b991dc.roa
File:                     fdbdb6d4a757cf48aca1a58765c0947cd3b991dc.roa (raw, json)
Hash identifier:          MtKSlUOipLMIXjs3haZ5oTJLg9b4hNkRp/2edpOGMSo=
Subject key identifier:   B8:7C:8C:1C:25:72:82:0A:4F:15:96:AD:9F:A6:6F:21:6A:61:FF:74
Certificate issuer:       /CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Certificate serial:       0AE719
Authority key identifier: 79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/fdbdb6d4a757cf48aca1a58765c0947cd3b991dc.roa
Signing time:             Wed 31 Jan 2024 13:36:53 +0000
ROA not before:           Wed 31 Jan 2024 13:36:53 +0000
ROA not after:            Sat 31 Jan 2026 13:36:53 +0000
asID:                     272883
IP address blocks:        2803:5a90::/32 maxlen: 35
                          2803:5a90:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714521 (0xae719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
        Validity
            Not Before: Jan 31 13:36:53 2024 GMT
            Not After : Jan 31 13:36:53 2026 GMT
        Subject: CN=fdbdb6d4a757cf48aca1a58765c0947cd3b991dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:be:ed:8c:b8:d6:fe:b5:2f:f0:78:7e:7c:
                    dc:4a:ee:66:c7:b3:e3:ba:e0:40:b4:d2:16:1a:21:
                    91:09:5a:bc:2b:ab:25:7e:8f:be:a5:eb:35:f2:ce:
                    89:c5:a2:c6:41:c0:44:51:5a:b1:5d:11:2d:24:0e:
                    25:d8:e0:7e:44:78:bc:ae:af:72:1d:72:7a:a7:f8:
                    6d:a6:aa:bc:ed:16:b9:be:43:d9:5e:82:93:e3:f6:
                    63:7a:ba:5e:cd:db:05:e5:5c:f8:b0:49:d2:f5:2f:
                    88:40:92:d8:2f:e7:9d:2c:68:7c:45:26:f4:b2:e6:
                    5b:d2:62:f7:f1:44:62:e0:77:77:e8:e0:74:7d:99:
                    45:55:d5:7a:f5:c8:32:01:ee:48:0e:ab:e6:57:3f:
                    6e:7f:c1:98:0b:10:e1:4f:00:65:99:bf:b5:34:18:
                    70:73:3f:10:1c:2c:bb:9c:76:79:61:1a:be:9c:38:
                    35:54:0b:3e:c6:23:55:21:35:23:3b:c3:8e:7c:57:
                    be:5f:1d:43:97:83:3c:a8:52:d5:7a:c1:7e:d7:cd:
                    03:92:25:c4:61:ef:e9:21:b8:1a:61:09:18:2b:07:
                    c2:26:7b:50:fd:c8:15:5e:ed:48:51:a3:5e:5e:cb:
                    41:c7:63:e7:df:8c:ab:bd:30:17:a4:7a:a4:2b:61:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7C:8C:1C:25:72:82:0A:4F:15:96:AD:9F:A6:6F:21:6A:61:FF:74
            X509v3 Authority Key Identifier:
                keyid:79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/fdbdb6d4a757cf48aca1a58765c0947cd3b991dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:95:e9:8d:5c:06:ca:91:7f:5e:41:07:3b:2d:4c:e0:0c:8d:
         25:81:01:13:aa:b5:2d:da:a0:22:68:00:bd:8f:c2:c7:ba:da:
         64:3b:5b:a7:62:60:11:44:90:58:15:36:0a:c7:b1:bb:18:51:
         a8:5b:f1:da:eb:93:5a:c8:93:c0:f4:4b:67:36:f2:bc:f2:0a:
         26:48:38:44:2e:bf:a1:4a:09:0d:e0:52:ef:9e:a8:a7:72:3d:
         c6:b2:ec:67:0d:9f:c5:f9:41:b2:88:86:b8:0a:16:bf:f3:f3:
         48:95:8a:d4:9b:4e:89:67:13:0e:1c:82:09:8d:27:e6:8f:e2:
         bc:af:7e:22:56:c4:3c:e3:74:28:c3:17:27:ff:b4:32:ca:c8:
         b7:1c:b1:ba:4a:0c:02:c7:7b:f2:89:98:93:82:6c:4f:2d:69:
         1d:c6:7e:0b:a6:71:33:3b:33:e3:d5:be:a6:c8:2b:c1:c8:91:
         b5:2b:7d:cf:12:92:31:f7:51:3a:7b:68:d6:3e:58:64:21:31:
         ed:93:fb:1c:3b:62:4f:df:93:b3:0d:7c:a2:e6:4d:6c:3e:72:
         c9:cc:d2:41:ed:fe:b4:0c:6d:4f:14:98:59:7e:f0:98:62:35:
         fa:fb:d5:6d:8d:6a:aa:01:fb:7a:8f:7f:aa:43:4e:94:b0:8a:
         8c:8f:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----