Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6e4afbec95f0f3149df26189437d0d497b6ac64c.roa
File:                     6e4afbec95f0f3149df26189437d0d497b6ac64c.roa (raw, json)
Hash identifier:          7SFcah+7HU4P0dxavIvOIG3bXty7R1TJ/QzU1IX7ziE=
Subject key identifier:   73:50:C9:44:5D:44:55:80:EB:1A:CB:08:30:BA:E4:83:BC:CD:43:CA
Certificate issuer:       /CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
Certificate serial:       1C05
Authority key identifier: 73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6e4afbec95f0f3149df26189437d0d497b6ac64c.roa
Signing time:             Sat 28 Oct 2023 20:20:03 +0000
ROA not before:           Sat 28 Oct 2023 20:20:03 +0000
ROA not after:            Tue 28 Oct 2025 20:20:03 +0000
asID:                     272979
IP address blocks:        2803:a850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7173 (0x1c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
        Validity
            Not Before: Oct 28 20:20:03 2023 GMT
            Not After : Oct 28 20:20:03 2025 GMT
        Subject: CN=6e4afbec95f0f3149df26189437d0d497b6ac64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:78:43:d3:57:b3:97:60:71:87:99:3b:7f:
                    1a:db:0a:53:51:f3:f6:31:14:d0:e7:bb:6e:31:3f:
                    fc:9b:3c:ac:42:d8:fa:75:ad:03:c5:6c:62:16:f9:
                    2c:79:77:9b:32:65:e8:d5:8e:84:c3:d7:f5:b5:92:
                    da:e7:0f:7f:5f:5f:d3:cc:33:24:45:4c:ec:f9:25:
                    49:e5:1a:f5:84:c9:f6:90:16:a4:35:6d:30:57:74:
                    df:71:82:1a:28:e7:92:17:96:78:8d:37:19:37:f3:
                    63:a0:af:b0:2d:3b:ff:01:86:10:3e:f7:dc:d7:d6:
                    30:29:e5:d0:c6:17:3e:70:d1:bb:8f:0c:35:8e:ea:
                    8e:bd:f3:3d:c5:d4:7a:74:0e:ae:bf:c2:59:53:e9:
                    cf:80:af:1f:da:54:ae:52:f9:88:ca:87:f7:84:b0:
                    46:27:4d:39:12:e8:b0:89:a8:0d:d4:da:04:60:05:
                    26:87:69:9c:74:ba:f6:35:bd:31:c8:49:93:5a:f9:
                    83:95:61:43:0a:6a:d5:5b:50:c9:41:82:86:b2:20:
                    1e:07:77:4d:49:5d:7e:17:47:ea:95:53:a9:cf:f6:
                    df:ea:16:92:c7:5f:54:0c:b2:1c:6f:87:4d:2d:f4:
                    ff:12:1e:2d:a7:ae:01:6e:b2:a8:7a:a4:24:ff:be:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:50:C9:44:5D:44:55:80:EB:1A:CB:08:30:BA:E4:83:BC:CD:43:CA
            X509v3 Authority Key Identifier:
                keyid:73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6e4afbec95f0f3149df26189437d0d497b6ac64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:af:b9:77:f2:bc:00:36:0b:b1:0e:9b:3e:6d:36:98:b6:d4:
         d1:ab:68:40:bb:dc:17:ac:f0:02:6f:5d:85:5e:c4:63:a2:1c:
         e5:a9:3f:7b:17:0e:c9:d6:bd:b6:48:07:81:ba:fe:3c:55:73:
         91:35:da:2e:05:ac:a7:11:9c:23:49:64:dc:51:6c:c5:80:25:
         d0:35:48:ec:45:41:18:94:bb:75:31:55:61:0d:63:d6:bf:fb:
         a4:4e:63:a9:79:d4:e5:da:79:2e:93:fa:f4:ad:76:bc:3d:c6:
         5f:e7:a3:8f:13:e0:ef:43:92:7b:26:c2:f6:71:c0:5a:b3:4a:
         fe:fc:5a:b3:1f:fd:48:16:47:3a:d5:12:5f:40:61:86:e1:3e:
         10:80:af:3c:41:0b:43:d7:4f:4b:7b:98:e4:b3:b8:16:0d:e3:
         f7:7b:2b:ba:18:79:e3:d5:f4:13:f7:a3:aa:f6:57:f2:9e:98:
         39:b7:92:be:86:d4:1c:3c:c1:76:3e:f9:14:31:40:f0:84:3b:
         6e:c3:a6:d3:40:14:7e:76:d3:ed:ac:09:67:c9:4d:d8:9c:95:
         15:f0:b1:df:f3:1d:0a:88:e8:5d:66:cb:28:b4:a6:56:5c:86:
         af:4e:eb:c6:22:15:d4:d6:1a:4e:31:ca:c8:96:b9:ba:d9:ca:
         77:b7:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----