Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/9b5ebb8318e856b3eddbe799f9da5806b28896a3.roa
File:                     9b5ebb8318e856b3eddbe799f9da5806b28896a3.roa (raw, json)
Hash identifier:          I1VA4wembrSoW58sTgDvmQkQn3OgPqKzoPogdntUlwk=
Subject key identifier:   8D:32:95:09:56:73:E9:0B:7B:DE:41:46:1D:32:6A:3D:29:12:CE:D1
Certificate issuer:       /CN=882c151d64a5abc60260065962ff60f9ff1199f1
Certificate serial:       054F
Authority key identifier: 66:33:11:11:BF:28:CA:0E:9D:62:A7:D9:BF:1C:6B:57:C3:53:EB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/882c151d64a5abc60260065962ff60f9ff1199f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/9b5ebb8318e856b3eddbe799f9da5806b28896a3.roa
Signing time:             Sat 14 Jan 2023 00:03:14 +0000
ROA not before:           Fri 13 Jan 2023 00:02:29 +0000
ROA not after:            Tue 14 Jan 2025 00:02:29 +0000
asID:                     64114
IP address blocks:        2803:e190::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882c151d64a5abc60260065962ff60f9ff1199f1
        Validity
            Not Before: Jan 13 00:02:29 2023 GMT
            Not After : Jan 14 00:02:29 2025 GMT
        Subject: CN=9b5ebb8318e856b3eddbe799f9da5806b28896a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:94:54:1f:fa:ba:28:76:96:1b:c4:04:50:
                    57:ed:9d:60:3a:08:60:da:15:3c:36:88:c0:00:0e:
                    f4:bb:8c:f5:8d:30:71:17:eb:31:27:f1:fe:c8:ea:
                    d6:7e:cb:89:80:74:23:f0:68:7d:eb:e4:cf:70:06:
                    66:9d:70:50:fe:97:9f:d9:e7:6d:be:8f:ca:aa:2a:
                    51:64:e6:42:41:eb:69:a3:74:b3:29:35:c5:bd:27:
                    35:98:f1:a3:15:9c:17:1b:8f:28:ed:7d:f5:d2:03:
                    4a:63:b6:4d:44:87:1a:a0:33:92:c5:52:62:ab:ac:
                    00:e2:4e:18:3f:41:d1:94:27:e8:11:85:bb:87:1a:
                    72:fc:bd:5a:51:e3:a9:88:a3:01:6f:33:d1:9b:46:
                    66:c1:27:10:86:b6:ab:1d:2a:5a:7c:ca:71:7d:8d:
                    5c:c3:e3:e7:5d:7d:b3:85:f2:9f:a8:40:47:e1:07:
                    cf:1a:ff:d0:57:5c:18:f4:5c:f1:e7:4a:95:ef:e1:
                    35:44:82:ed:81:49:4c:e2:5a:79:27:1a:10:ab:d4:
                    3b:71:d7:de:c4:b2:78:9e:95:31:e3:59:73:31:e1:
                    09:13:85:c5:5e:6d:4a:99:ae:45:35:44:9c:59:d6:
                    59:d9:a9:6d:67:c1:48:31:ff:98:f4:04:1f:75:e5:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:95:09:56:73:E9:0B:7B:DE:41:46:1D:32:6A:3D:29:12:CE:D1
            X509v3 Authority Key Identifier:
                keyid:66:33:11:11:BF:28:CA:0E:9D:62:A7:D9:BF:1C:6B:57:C3:53:EB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/882c151d64a5abc60260065962ff60f9ff1199f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/9b5ebb8318e856b3eddbe799f9da5806b28896a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/249bcc54-d32e-4419-9e7a-cb5fc57e65d5/882c151d64a5abc60260065962ff60f9ff1199f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e190::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:26:59:22:d6:87:f8:f6:f5:a7:8a:69:48:fc:69:b3:6c:4e:
         0e:04:81:c2:b1:4f:b4:5f:21:68:9c:fb:bb:db:04:36:08:b4:
         98:f7:f1:f0:6e:21:8f:a8:76:c2:b4:9a:60:35:e3:10:fc:f5:
         96:b1:b1:22:39:6f:9e:5e:e3:70:fc:24:4a:f9:79:2d:d2:7b:
         4a:4a:2b:6d:60:17:7d:e0:66:55:b5:8d:1f:b6:9f:aa:c1:6f:
         31:f7:52:58:9c:54:e7:f5:c7:25:5f:22:35:d3:6c:d8:ab:77:
         4b:5a:46:93:05:04:71:0d:1c:2c:2e:c6:fa:95:b9:88:26:a5:
         85:3f:82:fb:e3:6a:4c:41:3b:0c:e2:6a:eb:e2:30:bb:56:59:
         32:be:ab:1b:a9:c0:2b:f3:f2:f3:c0:99:b1:05:f1:6a:9e:b9:
         fc:7b:1e:fc:b3:3d:53:50:a2:c8:f1:1c:8a:a3:f4:55:8e:0d:
         ea:eb:8a:c5:38:71:36:0f:c2:30:1f:af:ba:c1:2b:13:da:ce:
         6e:59:b0:d5:a0:90:30:1b:7e:b5:70:71:d3:a4:ba:ea:ac:5e:
         50:d2:12:fa:64:81:56:c4:f2:fa:ac:ee:33:e6:f7:c1:28:08:
         5d:3e:d4:0d:e7:7c:7c:e3:14:9e:7c:f4:cb:07:b4:d0:ba:74:
         23:dc:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----