Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/3f1ce433719b80ee4026e484cd50a69f393abe38.roa
File:                     3f1ce433719b80ee4026e484cd50a69f393abe38.roa (raw, json)
Hash identifier:          GULvjDW4yaSBxXiE6ugdQpVAaYRmrVuKot+727euw54=
Subject key identifier:   D9:7D:E7:E5:EC:66:F4:69:6E:93:88:A8:84:30:7A:D6:0D:DF:2A:CB
Certificate issuer:       /CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
Certificate serial:       0B6B
Authority key identifier: 4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/3f1ce433719b80ee4026e484cd50a69f393abe38.roa
Signing time:             Sat 06 May 2023 02:38:47 +0000
ROA not before:           Fri 05 May 2023 02:38:47 +0000
ROA not after:            Tue 06 May 2025 02:38:47 +0000
asID:                     272966
IP address blocks:        2803:8590::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2
        Validity
            Not Before: May  5 02:38:47 2023 GMT
            Not After : May  6 02:38:47 2025 GMT
        Subject: CN=3f1ce433719b80ee4026e484cd50a69f393abe38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:fe:a3:91:3d:0c:56:8c:89:74:3d:23:bf:
                    5a:ff:63:6f:cc:e4:b9:0c:b9:b0:82:79:be:78:5f:
                    df:85:7b:ff:9a:52:1e:6f:f8:ab:12:19:07:56:a4:
                    7b:81:64:d3:df:3b:da:2a:06:d9:69:1a:c8:1c:c8:
                    7f:0e:6e:8b:1f:b7:d0:30:ec:e9:f4:be:38:8d:73:
                    26:59:6b:9f:19:0f:ce:c2:37:23:cc:56:20:10:02:
                    25:50:e7:87:71:38:fd:85:1b:56:11:a1:c5:9f:eb:
                    3f:4c:c2:7f:ec:7c:12:f4:05:c0:7a:c4:35:20:da:
                    95:43:b5:94:16:34:32:ab:07:60:f4:6a:63:8a:a7:
                    3c:5f:98:0a:0c:da:f0:57:62:a0:6d:fb:a8:67:82:
                    e5:e8:3c:d5:7e:65:25:a1:54:23:5b:b7:6d:24:02:
                    3a:1c:dd:09:6c:95:94:89:7a:c4:64:e1:e3:28:8a:
                    a9:30:83:c1:ba:d1:a8:34:fb:c1:b6:08:7a:cf:a7:
                    65:27:09:2f:70:2c:80:42:86:13:d7:31:84:08:4b:
                    c2:9e:02:bc:63:99:5f:01:8f:f4:28:43:0a:6e:0b:
                    5f:26:76:fe:5c:53:10:ee:77:71:11:b0:32:74:64:
                    5b:bd:64:ba:d7:e6:4f:e4:91:e4:99:4a:dd:2e:90:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:E7:E5:EC:66:F4:69:6E:93:88:A8:84:30:7A:D6:0D:DF:2A:CB
            X509v3 Authority Key Identifier:
                keyid:4D:C4:BE:E7:70:29:F1:7F:3B:E4:82:4E:CE:46:ED:A4:FC:8A:A5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/3f1ce433719b80ee4026e484cd50a69f393abe38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34afbbb0-06bb-4592-b67e-b770ea21d9e9/ffc2b5824540185ebb5ef77b2098a0bec7a0d5e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:97:71:11:db:8e:d4:7f:c9:07:45:16:74:20:3f:25:61:
         07:80:01:25:42:44:d9:1f:f6:20:ae:9f:3a:1f:0b:c3:87:c6:
         fd:c6:b3:71:04:cf:94:97:99:b0:d1:88:eb:dc:49:17:2c:a9:
         15:35:9f:ec:02:f4:dd:f9:86:58:26:cb:6e:fc:fc:08:4b:73:
         ef:79:b6:ab:78:b5:fd:1f:ec:19:b8:f2:86:65:62:e1:20:1a:
         22:93:f6:49:df:0c:8b:79:03:f5:ef:fb:d7:c6:5f:45:2a:57:
         70:dd:9d:1d:f3:e0:af:c0:ac:98:ae:d3:17:87:5a:7d:90:11:
         cc:0a:13:6d:20:a5:4d:01:01:4e:15:c0:48:08:a7:fc:3e:2b:
         ba:84:ee:aa:d4:54:de:f1:e5:cd:74:3b:ec:00:24:d8:3b:87:
         3c:f7:f4:2c:9f:57:fe:f5:89:a5:84:2d:ed:78:80:fd:81:36:
         ca:32:ac:8b:d8:f9:48:60:6b:0e:a3:6a:4d:80:64:a6:ac:98:
         53:b9:da:13:e5:68:cb:d0:6c:b7:e9:25:62:58:b7:6d:12:f0:
         96:27:60:fb:71:ac:17:5c:c0:bc:00:69:35:cb:27:7a:21:0a:
         3f:61:91:d4:8d:71:6e:b6:c5:59:6c:a5:19:18:3f:33:f0:72:
         25:29:76:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----