Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/c04fa4ad73e6a948a25df26fcb7802d85d3f744a.roa
File:                     c04fa4ad73e6a948a25df26fcb7802d85d3f744a.roa (raw, json)
Hash identifier:          0MFJonobr4dB58TnrD/rvWiV8yWUFdFiF41IKfeKcgs=
Subject key identifier:   C6:5D:2F:EE:BE:89:18:2C:77:8E:40:FE:C3:09:5B:6E:01:41:07:8B
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       239F2B
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/c04fa4ad73e6a948a25df26fcb7802d85d3f744a.roa
Signing time:             Sat 16 Sep 2023 08:30:00 +0000
ROA not before:           Fri 15 Sep 2023 08:30:00 +0000
ROA not after:            Sun 14 Sep 2025 08:30:00 +0000
asID:                     3549
IP address blocks:        2803:efc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334507 (0x239f2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Sep 15 08:30:00 2023 GMT
            Not After : Sep 14 08:30:00 2025 GMT
        Subject: CN=c04fa4ad73e6a948a25df26fcb7802d85d3f744a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:5a:8d:b2:ea:f6:2e:69:19:ec:30:68:c6:
                    b3:6d:0e:6c:c8:e9:2b:6f:a4:0f:d2:3b:4d:04:2a:
                    21:22:b2:80:09:a4:c6:fd:82:2a:d9:83:77:7e:c4:
                    70:1f:cf:d2:57:7c:34:03:17:cd:9a:6e:d4:a9:63:
                    22:21:ce:54:34:96:45:04:1b:ee:15:47:49:d5:e6:
                    61:64:e5:ec:5e:f5:eb:3b:f4:46:f0:60:74:b0:a9:
                    50:0b:52:c0:cc:d3:cf:9a:d2:b4:63:2b:b6:43:04:
                    23:e6:e5:7d:a3:da:2d:25:66:45:62:08:af:44:d4:
                    de:f0:31:44:0f:f9:31:ca:28:1e:ef:e3:75:fb:90:
                    e7:e1:84:32:52:f7:30:13:30:d4:8b:e9:f8:2d:f5:
                    6f:a9:7d:89:71:9b:63:79:f8:23:94:05:fc:0a:7c:
                    56:60:2b:bb:07:7d:1f:3f:92:68:02:36:94:18:36:
                    5f:c0:fd:c1:02:83:7a:39:23:b0:86:e3:f8:54:5c:
                    4e:ab:21:05:3c:25:17:67:61:39:56:f7:5f:c6:7c:
                    67:84:23:7f:6f:94:60:42:e9:b8:80:9b:0a:d1:44:
                    ab:a5:27:8f:aa:75:05:64:3f:18:41:dc:2e:76:85:
                    17:19:1d:8f:45:70:46:2e:4b:89:80:ef:6c:31:0e:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:2F:EE:BE:89:18:2C:77:8E:40:FE:C3:09:5B:6E:01:41:07:8B
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/c04fa4ad73e6a948a25df26fcb7802d85d3f744a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:59:64:67:11:6b:32:48:c2:e6:ab:0a:8b:33:03:65:59:29:
         f9:bd:fd:a3:67:40:27:7d:94:e2:da:ec:36:64:5c:38:c6:85:
         2f:8a:30:31:02:ee:b7:b7:32:9d:67:91:b5:b2:16:a4:e8:c6:
         fe:8b:14:37:4e:8f:ad:ee:2d:09:50:61:90:72:23:fa:56:3e:
         42:76:50:0c:f4:dd:aa:48:47:c9:63:ea:db:5b:e5:05:84:60:
         4a:6b:67:38:b5:95:4d:29:f7:ae:d2:93:e4:0d:10:77:66:2d:
         c2:f8:f2:16:70:98:89:d0:d3:26:7c:41:b2:b7:73:57:f7:08:
         37:e1:0b:1c:c4:40:b3:ef:6b:f5:41:a6:2b:d7:a6:9b:f3:91:
         28:a5:bd:69:ab:1e:9e:8b:2d:1f:65:5f:b5:c2:c9:d6:f5:93:
         88:25:33:88:81:d9:66:ff:2c:f3:e9:36:cd:6f:a9:e7:f0:be:
         52:05:ab:81:b2:54:4c:fc:4a:92:b5:26:db:95:ae:41:59:14:
         f4:ac:b0:1b:d5:f5:4c:44:03:cf:4b:ee:0f:c8:4c:ba:69:21:
         05:71:64:7b:f1:8b:61:e0:28:35:7d:82:11:02:28:86:60:3e:
         22:50:4c:18:7e:84:b9:8d:ce:a7:3f:c5:7c:95:22:a4:e7:01:
         34:d5:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----