Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/ff1c18e7564203da405e58687325d2f70ddd45b6.roa
File:                     ff1c18e7564203da405e58687325d2f70ddd45b6.roa (raw, json)
Hash identifier:          6TcakGV+k8375xFMnLqUU3li8pRmHs7/bbjLeyyf4tk=
Subject key identifier:   2E:B2:D6:87:E0:F5:9D:D1:07:BC:F3:72:D6:65:3B:0F:12:16:BB:BD
Certificate issuer:       /CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
Certificate serial:       11C819
Authority key identifier: D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/ff1c18e7564203da405e58687325d2f70ddd45b6.roa
Signing time:             Thu 23 Mar 2023 08:30:12 +0000
ROA not before:           Wed 22 Mar 2023 08:30:12 +0000
ROA not after:            Fri 21 Mar 2025 08:30:12 +0000
asID:                     267686
IP address blocks:        2803:bea0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165337 (0x11c819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8864966ee9b1969ff07e2beb8bb4f6c083ced70d
        Validity
            Not Before: Mar 22 08:30:12 2023 GMT
            Not After : Mar 21 08:30:12 2025 GMT
        Subject: CN=ff1c18e7564203da405e58687325d2f70ddd45b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:f1:04:76:a7:ae:c9:17:d9:16:e3:7e:81:
                    1b:54:1a:15:67:64:a2:d4:11:a5:2a:a8:b5:4e:7d:
                    cb:5f:95:97:b0:5e:65:fd:69:a3:51:c7:48:a4:7f:
                    54:74:67:c3:98:b8:18:29:84:f0:3a:84:31:06:5d:
                    2f:71:fa:3f:55:7f:85:a7:0d:f1:22:89:7a:4d:d2:
                    ce:f6:dc:97:98:87:d3:d7:c3:20:cd:9e:69:3f:65:
                    e5:b6:2e:19:94:69:d7:d1:0f:80:24:b9:2a:36:f1:
                    5c:51:ed:eb:9e:b8:4a:79:82:68:5a:bc:64:5d:e6:
                    0a:a5:a8:85:ca:5c:ce:26:bc:46:84:83:70:d9:e7:
                    84:de:c1:e1:ee:4a:92:e4:25:e2:99:73:7b:fd:21:
                    ca:bb:cc:05:57:03:56:3e:da:0b:89:37:c7:12:23:
                    d8:49:ab:ca:7a:b2:45:44:68:5d:fa:97:be:d3:98:
                    5f:de:1b:1c:6f:51:84:b7:93:81:0b:12:46:73:de:
                    18:55:65:41:d5:2a:5e:a4:2f:51:6c:be:26:71:0d:
                    1f:21:16:ee:77:65:54:0f:1b:30:95:68:87:0a:d8:
                    1f:64:c4:cc:55:0d:3a:68:bf:fd:45:3c:46:26:db:
                    50:11:a8:8d:3c:09:c7:0d:3f:3a:d8:d9:e3:c8:e2:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B2:D6:87:E0:F5:9D:D1:07:BC:F3:72:D6:65:3B:0F:12:16:BB:BD
            X509v3 Authority Key Identifier:
                keyid:D5:40:B7:6A:AB:B4:BB:00:4E:24:7F:15:42:7E:3A:63:33:4C:B9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/ff1c18e7564203da405e58687325d2f70ddd45b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/338af84c-2399-49a6-8ac1-a3335d5de813/8864966ee9b1969ff07e2beb8bb4f6c083ced70d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:1f:d1:cc:77:97:a4:23:cd:92:53:0a:65:aa:2e:21:34:
         be:2c:f0:b4:4d:64:93:ef:9d:9e:69:17:50:61:65:dd:b3:8f:
         31:21:78:d0:21:34:f4:c0:2c:ea:ee:17:92:85:65:17:75:6e:
         41:6c:8a:34:24:30:1e:57:64:08:d2:1c:9e:27:08:0b:74:53:
         ae:68:72:0d:40:5d:cb:40:93:ba:40:43:f5:cb:f7:00:4b:97:
         32:0e:58:20:6f:06:03:42:a4:87:09:25:bf:46:bf:ff:bc:0f:
         a5:ee:4e:54:f0:c8:d7:2f:b8:48:e2:c0:20:ea:f3:5b:d5:aa:
         82:0d:cd:96:48:f0:21:20:fb:39:b4:cd:1c:f6:78:8d:a9:8d:
         f1:fb:14:19:cb:14:5e:ba:9e:87:50:7e:23:fc:e6:cf:c6:09:
         27:5e:e8:3c:fb:5c:e1:93:97:b9:03:43:16:91:96:68:64:73:
         a6:55:56:22:46:f9:a4:1d:52:51:44:1f:b4:32:5a:9c:c4:83:
         33:91:7a:de:cc:a5:8c:76:c1:68:b1:66:15:32:7b:39:56:ce:
         b5:3c:2f:f8:0b:fd:bc:87:ec:7f:31:ce:91:e0:fb:e9:4e:9b:
         08:47:c7:4e:8c:f8:e3:8c:1f:b0:d0:a5:37:99:74:c3:f8:f8:
         1d:83:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----