Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/b536b981c96807da076a738ef64da7e859e65b74.roa
File:                     b536b981c96807da076a738ef64da7e859e65b74.roa (raw, json)
Hash identifier:          OeWmWBjxSpBHs/iwwoiiQjj1ZEa/VBvAOKgte9MUatE=
Subject key identifier:   FC:92:59:6A:46:72:C8:68:52:9A:B0:00:31:4E:17:13:68:50:A2:EC
Certificate issuer:       /CN=2844fc34dad2e9ab1b8d792185500633344de91d
Certificate serial:       23DB81
Authority key identifier: 5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/b536b981c96807da076a738ef64da7e859e65b74.roa
Signing time:             Thu 07 Sep 2023 17:50:56 +0000
ROA not before:           Wed 06 Sep 2023 17:50:56 +0000
ROA not after:            Sun 07 Sep 2025 17:50:56 +0000
asID:                     28100
IP address blocks:        2803:db90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349953 (0x23db81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2844fc34dad2e9ab1b8d792185500633344de91d
        Validity
            Not Before: Sep  6 17:50:56 2023 GMT
            Not After : Sep  7 17:50:56 2025 GMT
        Subject: CN=b536b981c96807da076a738ef64da7e859e65b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:1c:73:97:a7:57:a5:b3:03:1b:2c:9e:4d:
                    ec:74:fd:6d:b5:f7:e2:42:dc:47:50:79:01:fd:b5:
                    bd:6c:a3:ab:4a:d6:1e:62:47:bf:df:49:ba:5d:21:
                    48:f5:ad:d6:cd:37:72:f5:77:ae:22:09:ed:9a:e7:
                    ff:0a:42:cf:16:61:f8:9b:1d:19:65:09:c9:64:7d:
                    8a:2d:31:cb:c8:88:21:99:5a:97:12:c4:97:76:d5:
                    28:f0:10:ae:a2:20:ef:b7:3f:4c:59:75:71:fb:d4:
                    8a:a7:2b:96:2f:42:1c:e9:9c:c2:c7:50:3d:ff:d0:
                    11:c6:9c:db:fc:5d:50:94:7e:6b:16:82:49:ba:eb:
                    1d:b2:0f:6d:2a:bc:63:f9:b5:32:4f:b3:d6:59:7f:
                    a9:7e:f7:f0:8f:77:28:3e:e5:a7:f3:3c:98:88:bd:
                    42:fc:84:8e:70:e6:b9:a7:68:09:15:41:d7:84:80:
                    0a:90:03:0c:6a:11:6e:76:03:52:f6:b3:b2:1b:67:
                    62:84:fd:93:6c:47:59:38:91:bd:25:9d:6c:48:bf:
                    aa:a6:3d:7c:72:36:fc:f6:ff:83:63:bc:d0:fa:d5:
                    5b:9d:bf:c5:0e:b0:65:7c:d0:67:d4:86:ce:28:d2:
                    3e:dc:ea:49:07:69:28:0e:b6:fb:ed:7b:73:44:01:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:92:59:6A:46:72:C8:68:52:9A:B0:00:31:4E:17:13:68:50:A2:EC
            X509v3 Authority Key Identifier:
                keyid:5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/b536b981c96807da076a738ef64da7e859e65b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/2844fc34dad2e9ab1b8d792185500633344de91d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:db90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:ee:da:ee:fe:d5:ab:94:0f:b0:7c:f6:1a:f0:41:f8:ad:
         f5:11:a5:bb:c3:fe:08:98:1c:2f:f3:f4:a7:50:18:7d:34:7e:
         4f:6f:9a:6d:fc:10:6a:1e:02:e2:84:4f:6e:61:a2:89:d1:0b:
         b4:22:b1:86:a2:2f:c0:27:60:d6:67:51:c5:6d:9c:7d:6d:44:
         97:31:fc:81:e1:dd:45:09:70:67:3c:8a:43:a5:0f:a4:af:f1:
         99:a1:53:f0:f7:42:ce:1a:58:91:5e:63:c2:42:92:ee:9c:30:
         a6:e7:ce:55:48:ea:2a:8a:03:54:b7:db:5e:1d:ad:27:8d:00:
         71:8f:1d:d9:2c:45:a6:ee:17:3a:43:db:07:ce:2f:b2:fa:1e:
         aa:f8:d4:80:7d:c3:44:17:0b:0e:7f:22:45:c2:05:88:87:1e:
         e0:9d:aa:96:62:68:ba:40:68:8b:65:bd:54:69:2f:ea:22:34:
         e7:56:7d:34:f6:f7:60:ac:f0:02:b8:ca:29:6c:72:cf:8f:17:
         b0:e9:c9:83:51:15:4c:8f:9e:41:99:41:20:de:b3:58:4b:6d:
         83:de:34:59:4d:22:09:8d:8a:d3:9e:2c:88:03:a6:e1:8b:37:
         9f:6b:57:46:25:0b:49:70:4a:b3:7c:30:ae:d8:c0:d8:1f:76:
         1e:a6:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----