Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4d8d108017877b6117528986804edfd170f4f45e.roa
File:                     4d8d108017877b6117528986804edfd170f4f45e.roa (raw, json)
Hash identifier:          kQv6Q2Xokksh8gNMGPqHB1XiSeKKHFjZ4dnm3gg/rEQ=
Subject key identifier:   5F:0F:3B:DB:12:B1:7B:9C:47:75:D6:09:15:3D:19:6F:E2:D1:90:C6
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       235898
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4d8d108017877b6117528986804edfd170f4f45e.roa
Signing time:             Sat 08 Jul 2023 05:06:49 +0000
ROA not before:           Fri 07 Jul 2023 05:06:49 +0000
ROA not after:            Tue 08 Jul 2025 05:06:49 +0000
asID:                     61461
IP address blocks:        2803:d700:da00::/40 maxlen: 40
                          2803:d700:db00::/40 maxlen: 40
                          2803:d700:dc00::/40 maxlen: 40
                          2803:d700:dd00::/40 maxlen: 40
                          2803:d700:de00::/40 maxlen: 40
                          2803:d700:df00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316440 (0x235898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:06:49 2023 GMT
            Not After : Jul  8 05:06:49 2025 GMT
        Subject: CN=4d8d108017877b6117528986804edfd170f4f45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:79:5d:93:9e:19:0a:72:b6:a7:d7:44:b4:89:
                    82:5c:c3:54:68:77:25:18:a7:90:0b:60:93:56:c3:
                    b4:73:f0:aa:b3:b0:ac:9e:ec:15:6f:2e:04:92:bd:
                    bd:18:b1:8c:fd:1f:12:3f:e0:43:92:92:e5:a4:5c:
                    25:96:e0:30:f7:5e:d6:9a:26:bb:2f:92:32:44:8d:
                    3e:99:a8:16:60:4b:4f:bf:08:8e:0f:8f:e2:5c:c7:
                    a8:42:23:6d:95:1a:34:76:28:3f:5b:b9:6d:2d:e3:
                    01:a6:2f:b2:9a:88:49:c5:84:cd:ec:3d:d2:ae:22:
                    d8:fa:6a:4a:67:fc:84:0f:9c:5b:d7:8b:85:2b:e9:
                    6d:c7:e5:9e:79:84:8e:26:e1:80:bd:7c:8f:27:c0:
                    b3:b0:79:1b:78:cb:79:43:6d:be:f0:d7:62:b6:72:
                    1f:94:f6:d8:65:8e:b8:95:a4:19:0b:97:49:f1:28:
                    1d:62:ed:23:8e:e1:d9:e6:b5:b2:b0:80:4e:e2:2b:
                    df:d1:59:ce:9b:71:4d:92:2b:e0:e6:e3:40:42:ba:
                    af:62:e1:e5:2f:89:14:4b:b6:23:5c:6e:24:3a:62:
                    6c:ee:2b:38:5f:47:ee:63:f6:d7:fc:6c:36:bc:20:
                    d1:64:b3:54:a7:15:e2:c2:56:ae:57:90:8b:a1:6c:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0F:3B:DB:12:B1:7B:9C:47:75:D6:09:15:3D:19:6F:E2:D1:90:C6
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/4d8d108017877b6117528986804edfd170f4f45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:da00::-2803:d700:dfff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:70:a2:66:d5:5d:ca:e1:5f:31:f8:56:db:33:f6:81:df:
         f4:de:27:d2:f2:b2:73:73:13:4b:9c:c7:a4:af:02:34:d0:ae:
         53:a7:44:d3:1e:f9:aa:4d:8e:8f:56:35:75:ba:a2:4d:ab:06:
         98:a8:05:88:1b:59:6e:63:ee:56:87:e6:76:23:67:24:a5:b4:
         18:06:03:2c:25:4f:99:d4:38:d9:8b:a6:f9:7c:33:ac:c3:c2:
         9b:32:cc:a0:bf:23:18:94:21:aa:9f:23:ba:40:d8:42:3e:4d:
         75:b1:ed:c2:27:a9:82:8a:08:99:71:e7:15:9f:27:66:4f:09:
         10:20:7a:c0:88:6e:cc:a1:c5:c7:a4:99:7d:5f:f5:8a:61:96:
         8d:ac:f7:94:21:6a:b1:cd:6a:c1:28:d8:85:30:e7:c0:cb:92:
         c6:fe:cd:ee:0e:b9:e1:6e:02:0d:e6:60:bc:86:fe:a2:4b:98:
         f3:93:03:7d:ff:5a:2d:8e:39:d0:c1:03:0e:48:a8:7b:56:76:
         56:8d:4e:7d:a2:40:7d:a8:40:ef:88:7c:6a:e6:1e:54:25:6b:
         61:54:a6:7f:3a:be:51:9d:f3:27:7a:29:fe:53:d7:fa:ed:db:
         ae:f0:9b:41:93:77:bd:f3:34:be:1f:61:a9:2a:2e:cd:ae:34:
         a5:32:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----