Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/bf3bc0d406a38cebb12a40667186a3dd67401505.roa
File:                     bf3bc0d406a38cebb12a40667186a3dd67401505.roa (raw, json)
Hash identifier:          l9Uh+j0ICUrY+TyupfoDPzzzHLJCtNh8iedTYxKs+qs=
Subject key identifier:   7E:DE:C2:9C:91:3C:41:89:40:3D:5C:7F:2E:7A:7D:AF:F2:2F:A8:B5
Certificate issuer:       /CN=4c76dfe6832d28ce49a16b84a719874f801ebe5c
Certificate serial:       280B
Authority key identifier: 72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/bf3bc0d406a38cebb12a40667186a3dd67401505.roa
Signing time:             Tue 27 Feb 2024 03:17:55 +0000
ROA not before:           Tue 27 Feb 2024 03:17:55 +0000
ROA not after:            Fri 27 Feb 2026 03:17:55 +0000
asID:                     273078
IP address blocks:        2803:9a50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10251 (0x280b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c76dfe6832d28ce49a16b84a719874f801ebe5c
        Validity
            Not Before: Feb 27 03:17:55 2024 GMT
            Not After : Feb 27 03:17:55 2026 GMT
        Subject: CN=bf3bc0d406a38cebb12a40667186a3dd67401505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:25:96:67:3f:36:ce:95:a2:08:ec:b9:c1:
                    a6:b7:35:a1:79:5e:b4:92:d0:bb:5e:1c:3f:25:d1:
                    0d:6c:e1:df:1c:df:d2:cb:bc:4b:90:fb:8a:8e:1c:
                    ae:f8:f5:e9:af:94:8f:be:78:9a:af:10:b4:1f:27:
                    e4:8c:d3:13:bd:69:b5:5d:c1:8b:c5:79:43:90:ce:
                    1f:72:72:b7:96:11:cd:d2:b5:ef:97:cb:83:f1:7b:
                    d8:eb:0e:d0:da:f4:25:06:3a:da:84:af:8e:de:02:
                    a7:21:2b:44:a6:e4:ff:88:a7:fe:3f:7d:57:a9:0a:
                    6c:cf:77:0b:3f:2c:5e:bc:5c:4d:c9:98:af:ac:bd:
                    e4:68:20:52:d0:3d:bd:d7:bf:02:07:49:90:9d:62:
                    47:24:07:d0:82:c5:52:e3:f6:5a:3c:30:d5:d1:bb:
                    81:3d:c8:5d:fa:5e:30:11:6e:e9:fc:5c:5d:c5:db:
                    ae:35:3f:b7:b5:e5:1d:51:33:3d:ec:1b:92:aa:06:
                    ef:f0:51:e8:ff:f8:a9:58:40:3b:f6:ba:95:1e:46:
                    5c:fd:af:08:72:6d:fe:0e:1d:df:9b:ef:25:51:0d:
                    71:10:07:85:22:0d:23:60:cf:d1:bf:fd:bb:60:d7:
                    00:7e:77:86:84:a4:31:9b:06:0a:58:14:32:fb:e6:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:C2:9C:91:3C:41:89:40:3D:5C:7F:2E:7A:7D:AF:F2:2F:A8:B5
            X509v3 Authority Key Identifier:
                keyid:72:71:BB:93:E1:72:48:85:5C:66:B3:1D:E2:11:CC:D6:5E:FF:1A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c76dfe6832d28ce49a16b84a719874f801ebe5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/bf3bc0d406a38cebb12a40667186a3dd67401505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a3e899-f830-49a6-8499-df8b17610a6f/4c76dfe6832d28ce49a16b84a719874f801ebe5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:04:d7:59:bb:64:4f:e3:70:49:0a:24:ab:85:54:81:c0:72:
         66:5c:89:ed:07:ec:4f:ca:b9:83:7e:17:e8:b7:90:f5:31:5f:
         24:8c:8b:64:a4:a8:38:31:da:40:a7:df:5e:9a:06:31:18:be:
         27:47:ba:33:24:04:94:f7:29:e6:13:9c:25:a9:9f:7e:88:1b:
         48:34:70:36:cb:43:98:05:59:87:98:e6:9c:6b:81:19:2e:e9:
         05:8d:e9:2d:ee:5d:ea:ab:10:e6:0c:b3:cc:15:4f:ec:65:ec:
         26:3d:cd:63:9c:4c:73:31:9f:cd:7b:14:88:ce:b8:19:f1:52:
         e6:d7:50:55:10:ab:81:1e:0f:cf:76:c3:16:06:fa:5a:d8:02:
         a6:af:37:4a:06:b1:56:da:aa:83:80:7e:32:66:45:25:ee:96:
         76:9d:98:56:d4:f8:b5:bc:f9:eb:72:77:05:a3:9b:46:e5:02:
         e1:26:f2:29:78:10:ab:03:19:4e:cf:c0:a5:a8:74:81:6b:ce:
         2f:ee:c6:50:05:61:57:02:d5:b9:fc:89:9d:c1:82:be:07:93:
         0f:e3:66:0f:c3:f8:8e:61:e2:96:ca:98:c6:f0:1b:06:b2:e2:
         f0:9a:a4:39:fb:ed:c1:e5:50:b8:97:46:d1:cd:e7:54:9f:40:
         fe:3f:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----