Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/9b49b62573b43f6bb5954d012aef7083584c481f.roa
File:                     9b49b62573b43f6bb5954d012aef7083584c481f.roa (raw, json)
Hash identifier:          Y5pDtoq5D6Qdvoy06i1VTdp/TrnCMqv6qHA3DWLYU/I=
Subject key identifier:   3F:42:08:C1:38:C4:3A:23:F1:FF:7B:C1:C9:19:47:C4:32:0F:72:B5
Certificate issuer:       /CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
Certificate serial:       33F8
Authority key identifier: 73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/9b49b62573b43f6bb5954d012aef7083584c481f.roa
Signing time:             Mon 30 Oct 2023 23:45:08 +0000
ROA not before:           Mon 30 Oct 2023 23:45:08 +0000
ROA not after:            Thu 30 Oct 2025 23:45:08 +0000
asID:                     272848
IP address blocks:        2803:a850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13304 (0x33f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
        Validity
            Not Before: Oct 30 23:45:08 2023 GMT
            Not After : Oct 30 23:45:08 2025 GMT
        Subject: CN=9b49b62573b43f6bb5954d012aef7083584c481f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:ee:bf:bb:98:35:00:4f:37:11:a4:d6:a0:
                    3d:97:65:75:e4:e2:7b:2a:94:4e:2f:37:03:81:9a:
                    6f:a8:f5:0d:f5:d1:9d:65:8b:68:a3:98:99:52:34:
                    19:26:17:08:68:68:ad:6a:f4:b7:49:c6:d3:48:7a:
                    71:64:0f:82:69:54:5b:09:f3:24:05:48:5e:55:4d:
                    a7:ae:17:6e:1e:d7:a4:ba:3a:09:ed:21:21:d1:e3:
                    ff:a4:75:f8:94:b9:ad:c8:16:3c:f7:20:99:2e:93:
                    a4:57:18:aa:d1:26:24:77:d2:98:45:7b:45:29:65:
                    0d:e8:dc:e6:7c:ad:1a:f0:e6:18:d7:2c:72:e0:9e:
                    dc:2b:bf:90:ff:5f:13:54:d9:21:c1:a0:e1:f3:72:
                    52:86:37:63:cc:f8:da:bf:4b:6b:3d:1b:1e:15:95:
                    c9:30:16:6e:71:30:71:0b:06:58:68:20:8d:f6:bf:
                    f0:2b:36:68:ac:fe:38:1e:2b:c9:df:ed:b8:3d:ab:
                    73:93:bc:80:c9:a8:d6:7e:27:00:2f:96:a6:9d:42:
                    0c:35:ee:8f:69:82:b6:3d:02:e0:ba:5c:41:47:e9:
                    a8:fd:71:41:82:0a:d4:e9:3d:47:5a:5d:f2:ec:a7:
                    6e:73:b3:91:ae:ae:89:b3:a6:63:f7:b8:07:29:f3:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:42:08:C1:38:C4:3A:23:F1:FF:7B:C1:C9:19:47:C4:32:0F:72:B5
            X509v3 Authority Key Identifier:
                keyid:73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/9b49b62573b43f6bb5954d012aef7083584c481f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:8b:7f:3a:f4:dd:1c:36:d4:40:11:23:4c:ee:53:19:38:
         cb:e3:fb:92:8e:9c:5a:02:b9:31:61:30:e7:47:59:7a:af:ae:
         66:37:a5:09:f9:9d:59:fe:99:2c:23:8d:4b:34:e8:30:5c:5e:
         fc:44:01:66:7f:9c:35:07:78:23:29:b5:4e:76:d1:a2:f3:51:
         48:26:8a:76:5e:47:67:5f:65:9c:2e:57:72:e4:92:86:f9:f3:
         d3:ff:c2:1e:b4:3d:f5:04:20:82:e4:61:43:0e:1f:e0:09:2c:
         8e:b4:1a:19:ce:02:bc:ec:7b:b3:85:ae:67:f9:c6:51:31:ea:
         6a:74:2e:50:40:c8:86:35:38:b2:12:19:e5:b0:8b:0c:77:74:
         e8:63:06:15:47:ed:be:2a:26:ce:f6:9c:6d:c3:cd:35:ea:dc:
         36:b5:16:2e:dd:00:7b:a5:29:b8:36:48:9c:fa:ad:50:fd:08:
         11:13:8c:2b:bb:dc:f0:32:57:5e:24:13:ab:84:98:83:44:14:
         cc:49:82:36:58:a7:b9:83:a8:2f:a6:52:c7:77:69:ba:af:45:
         42:24:4f:73:48:8e:e2:ea:d8:74:06:bf:18:1f:dc:a5:7c:42:
         09:26:3f:39:5a:b3:0d:9c:bb:f0:6f:1a:c6:50:e2:78:6c:27:
         fd:91:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----