Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/fd7af49d11be26e710a6fe9d57b7f4f82eb2d4d3.roa
File:                     fd7af49d11be26e710a6fe9d57b7f4f82eb2d4d3.roa (raw, json)
Hash identifier:          zthwxSWYqEE0pCEe1NnDic4lD398IksZVnfl9W8IDzc=
Subject key identifier:   ED:0A:82:CA:54:24:12:74:18:03:D4:E6:C1:45:AA:27:58:1A:16:14
Certificate issuer:       /CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
Certificate serial:       0C768A
Authority key identifier: 9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/fd7af49d11be26e710a6fe9d57b7f4f82eb2d4d3.roa
Signing time:             Thu 23 Nov 2023 19:05:44 +0000
ROA not before:           Thu 23 Nov 2023 19:05:43 +0000
ROA not after:            Sun 23 Nov 2025 19:05:43 +0000
asID:                     52425
IP address blocks:        2803:be00::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816778 (0xc768a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
        Validity
            Not Before: Nov 23 19:05:43 2023 GMT
            Not After : Nov 23 19:05:43 2025 GMT
        Subject: CN=fd7af49d11be26e710a6fe9d57b7f4f82eb2d4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:11:0b:82:9f:2c:e4:d6:18:4e:ee:8b:c0:
                    83:4d:ed:1d:b6:7d:0e:66:46:86:7f:ac:01:59:1d:
                    95:ff:07:ca:d4:b8:db:da:a1:b7:17:27:a0:71:7c:
                    6c:d4:c5:c2:51:91:25:2a:d5:62:a6:4a:d4:dd:ee:
                    85:28:72:f8:35:3a:e3:55:89:0f:d4:2d:fb:27:0f:
                    c6:b5:4a:16:47:0d:73:14:15:f8:9a:4a:17:ff:f5:
                    1c:5b:15:d8:6d:0a:f0:fd:c8:14:8a:60:09:a5:ca:
                    ea:83:5b:18:c3:6b:00:8c:bc:ac:08:d2:27:3a:ce:
                    a1:46:e0:22:f9:dc:d2:99:4e:d4:bc:21:38:71:a0:
                    26:96:a4:e1:b3:20:32:4b:43:18:da:67:35:7d:9c:
                    03:25:03:af:8c:a7:2a:32:97:b4:50:52:54:e0:61:
                    e1:34:c6:f5:1a:0f:ae:07:bf:62:62:c9:8b:6a:3a:
                    76:44:9b:f7:4b:d0:26:74:54:47:df:57:07:3f:e2:
                    7d:6a:87:e1:db:ab:99:79:cd:f3:1b:57:ad:7b:ad:
                    07:2c:45:11:c5:34:d3:20:42:89:f3:43:c2:63:65:
                    ff:95:b5:3e:ea:84:a1:91:b3:81:ce:a8:d0:a9:bc:
                    0b:f4:38:a7:43:fd:7f:26:21:d0:dd:77:24:b8:1e:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:82:CA:54:24:12:74:18:03:D4:E6:C1:45:AA:27:58:1A:16:14
            X509v3 Authority Key Identifier:
                keyid:9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/fd7af49d11be26e710a6fe9d57b7f4f82eb2d4d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/47b57565cafdf0ca1cb66c80d161a63b2210edb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be00::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:c6:e5:c7:5a:63:7c:62:d6:8f:9e:40:e4:69:93:4a:1f:63:
         c1:ee:35:13:d0:e8:f9:37:23:84:73:8a:7a:6a:0e:99:93:06:
         b5:20:ac:8d:dd:05:ac:eb:a0:1f:5c:30:c5:f0:dd:a2:9f:82:
         1a:3e:5d:79:85:c1:74:1f:93:bd:eb:62:fb:43:e7:9c:a0:2d:
         74:28:0e:ed:83:bf:70:bb:52:c1:bf:c8:a5:85:3c:07:c5:e4:
         29:88:ad:2a:2c:41:3d:0a:1e:0e:40:3c:b2:15:55:c1:7f:6d:
         4d:6a:dd:12:17:93:ff:e1:dc:9f:02:06:23:d8:c1:bc:7a:58:
         91:d1:09:87:3a:13:85:36:bb:22:c7:e9:5d:c5:9e:48:04:52:
         92:ef:63:fa:4e:76:e1:a3:51:af:11:af:68:d2:74:a0:6c:a0:
         89:16:3c:cc:be:12:0b:cc:e1:5d:96:02:26:28:b5:eb:72:b2:
         ed:8e:54:36:c2:50:dc:c7:63:b7:8c:8c:af:53:28:96:81:ff:
         50:a5:26:3d:58:6a:93:77:74:e7:f5:e1:6c:b1:85:03:54:ee:
         67:bc:25:aa:c9:44:23:b3:42:88:57:fb:14:50:a3:6f:24:0e:
         b7:45:4f:43:14:30:06:87:0d:9a:36:ff:06:fa:f0:79:43:50:
         6a:52:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----