Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/43183ca98fc49ebe1107a484b40fee5696776077.roa
File:                     43183ca98fc49ebe1107a484b40fee5696776077.roa (raw, json)
Hash identifier:          /XB1UAoY0l//2kvR6y6V0mO12lNibWGZBeT8P4nS0wc=
Subject key identifier:   1C:E9:83:F6:B1:87:24:BB:0F:DC:A5:2D:3A:39:F9:60:F1:DD:23:BC
Certificate issuer:       /CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
Certificate serial:       0C0A65
Authority key identifier: 74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/43183ca98fc49ebe1107a484b40fee5696776077.roa
Signing time:             Tue 06 Jun 2023 20:25:17 +0000
ROA not before:           Mon 05 Jun 2023 20:25:17 +0000
ROA not after:            Fri 06 Jun 2025 20:25:17 +0000
asID:                     1239
IP address blocks:        2800:3e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789093 (0xc0a65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
        Validity
            Not Before: Jun  5 20:25:17 2023 GMT
            Not After : Jun  6 20:25:17 2025 GMT
        Subject: CN=43183ca98fc49ebe1107a484b40fee5696776077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:ac:fb:ad:27:c9:15:97:18:36:af:b6:61:
                    19:89:9b:60:a1:78:a1:b9:72:05:3c:d8:37:fd:b5:
                    dd:62:6d:0f:25:85:82:05:9d:4b:5f:47:83:04:8f:
                    f9:b5:bb:72:fa:68:19:c7:17:35:d2:d8:a7:7b:3d:
                    da:8d:bd:c7:f6:dc:44:37:2c:86:a1:eb:04:d2:6c:
                    83:a1:79:74:76:7c:92:dc:13:05:62:a4:bd:a4:4c:
                    0e:d3:2d:09:85:ec:d5:e0:23:73:1d:94:b6:b6:ca:
                    89:a6:fe:32:21:58:10:63:f3:0f:71:4d:bd:37:83:
                    39:ae:27:f7:23:2f:46:ed:2e:65:88:c3:6a:1a:28:
                    e2:c0:c2:0e:23:4b:c2:6c:0c:67:43:99:f2:00:f7:
                    43:ae:cc:b0:32:38:6b:ae:ea:6d:30:58:54:a5:92:
                    46:16:be:2e:34:4a:da:d8:dd:12:16:a9:af:f5:d9:
                    60:e1:fd:1d:ca:12:c3:5b:42:18:6e:5d:b3:b0:a3:
                    e9:05:1d:87:b5:ef:65:cb:28:65:50:1a:a6:32:cc:
                    b5:36:a2:15:bb:e0:26:5b:f3:e5:e3:24:b1:69:92:
                    62:51:56:be:2f:61:4c:f4:4a:cc:23:9d:dd:a1:2b:
                    d8:21:3a:91:ea:cd:7a:01:32:2b:d0:90:35:09:bf:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:83:F6:B1:87:24:BB:0F:DC:A5:2D:3A:39:F9:60:F1:DD:23:BC
            X509v3 Authority Key Identifier:
                keyid:74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/43183ca98fc49ebe1107a484b40fee5696776077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:93:96:1e:2a:0f:ad:c9:ee:c3:34:6c:fb:9d:2c:81:ef:d8:
         5f:88:8b:96:01:57:90:3c:92:8b:75:0a:bc:af:d5:be:80:6d:
         2b:0a:bd:a8:23:d7:45:4c:3b:ad:ba:52:3a:1d:fa:e3:a7:00:
         1f:d1:64:a7:4e:46:1f:89:b8:4a:16:77:53:f9:f2:b8:d7:d5:
         66:68:07:e8:57:cd:6a:43:1d:84:08:a3:be:0c:55:5c:21:b0:
         d3:0e:8f:cf:d1:5f:4d:2c:25:cb:b3:f8:8a:f0:7a:68:60:cc:
         cd:76:86:aa:19:74:76:81:2a:40:c9:12:a4:5e:a1:e1:d4:7e:
         f9:6f:d6:4f:71:22:3a:49:a3:03:c2:95:32:77:74:f2:22:16:
         0a:c5:e8:8d:95:f2:ca:bc:cc:3e:06:fb:b3:9b:da:ad:bf:87:
         3b:b4:79:62:89:23:15:e9:00:14:d7:8e:3f:cc:1e:f7:3d:c8:
         5d:e2:62:1b:7e:7f:8a:6c:3d:c6:bb:a3:af:bb:a3:1d:e8:49:
         60:d7:2b:09:a8:b7:4f:0a:e4:69:18:96:92:1a:ee:88:37:e9:
         15:58:5d:0f:1e:55:e4:ae:2d:fa:f7:72:eb:ac:6a:48:80:1a:
         ee:2b:b7:be:9a:ff:e5:63:12:61:f8:be:ee:ca:1c:93:c2:08:
         47:5b:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----