Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/8dbe708277f3e62019a6e04a581f09ee0f85a3ce.roa
File:                     8dbe708277f3e62019a6e04a581f09ee0f85a3ce.roa (raw, json)
Hash identifier:          V9mXJvZjhxQx1K5m7qaiyG7g02CnYIwcqe36ez0zyvs=
Subject key identifier:   E6:E7:B5:B7:B3:5F:33:35:5C:F9:45:08:05:D1:E8:80:0E:B6:03:FF
Certificate issuer:       /CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
Certificate serial:       155961
Authority key identifier: 89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/8dbe708277f3e62019a6e04a581f09ee0f85a3ce.roa
Signing time:             Sat 16 Sep 2023 15:17:31 +0000
ROA not before:           Fri 15 Sep 2023 15:17:31 +0000
ROA not after:            Tue 16 Sep 2025 15:17:31 +0000
asID:                     267929
IP address blocks:        2803:7e60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399137 (0x155961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
        Validity
            Not Before: Sep 15 15:17:31 2023 GMT
            Not After : Sep 16 15:17:31 2025 GMT
        Subject: CN=8dbe708277f3e62019a6e04a581f09ee0f85a3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:50:ac:36:6a:1d:d4:d2:aa:cd:08:3f:dc:
                    f2:c3:5c:61:4a:6c:d3:29:1b:e3:d6:54:58:a4:0f:
                    63:dd:d9:d8:26:fe:53:8f:6c:f5:2d:3c:0e:03:3c:
                    be:f0:61:19:cf:7e:e6:ad:61:cf:a3:67:6f:31:e4:
                    b2:a5:60:e9:a0:a8:fe:12:e3:ee:e5:c0:63:cd:57:
                    de:7a:64:71:69:cd:a4:91:1e:28:94:83:8c:a6:e1:
                    dc:70:d3:25:71:c0:a0:80:6c:d0:7f:85:b0:6c:e3:
                    55:8d:c9:90:9d:bf:35:e6:6e:f1:15:45:69:d7:10:
                    2f:dc:5a:cc:c7:63:c7:af:fc:4b:60:d4:c9:29:20:
                    fc:b8:c1:01:5f:ad:3a:aa:5f:c7:76:e8:0e:f9:5d:
                    97:a4:91:2a:a6:2d:96:68:29:3a:53:5c:04:49:51:
                    a7:32:c3:4b:ca:65:cc:ac:8e:8e:40:d4:3e:86:78:
                    1b:de:ce:ec:93:60:8e:dc:c3:d1:f9:93:cc:4b:a9:
                    20:5c:b6:d7:ee:27:a9:a8:27:39:97:5b:35:a0:aa:
                    e0:6f:4d:11:0e:fe:38:c3:e1:d3:fe:5f:a3:95:07:
                    31:b1:1e:ad:cb:c6:ae:e8:9a:8c:d7:05:aa:86:f2:
                    02:bc:49:79:5b:83:2b:62:4d:be:03:78:41:80:94:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E7:B5:B7:B3:5F:33:35:5C:F9:45:08:05:D1:E8:80:0E:B6:03:FF
            X509v3 Authority Key Identifier:
                keyid:89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/8dbe708277f3e62019a6e04a581f09ee0f85a3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/e2b62d0be638d98e406ee5e9dd9c9858052a3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:42:5e:5e:1e:ea:f0:c0:33:57:f3:c4:66:6a:ff:1a:57:52:
         d0:f7:9b:4f:af:6f:27:a2:ef:8d:cb:34:27:50:6f:15:c3:96:
         6d:79:e1:88:a2:0c:1f:73:43:35:5a:69:40:d9:00:09:76:e6:
         1d:76:7d:9a:77:24:0f:97:47:73:aa:ca:bc:d5:a7:99:cd:f6:
         f0:5b:99:c9:67:3b:4b:15:07:30:6e:a2:28:94:fc:9d:58:12:
         02:49:fa:8a:e0:a5:60:d7:62:56:2e:70:b5:46:e3:c1:cf:ab:
         3d:ec:ff:23:0b:62:1b:c4:cf:a9:e5:bd:c2:56:02:22:a7:81:
         be:1a:f0:80:65:e9:c7:b4:7c:93:db:bc:d6:d1:f1:15:d4:e4:
         00:e7:0b:07:14:04:74:43:d3:bc:69:76:b0:6a:fc:96:9e:82:
         1f:2f:22:ab:6a:83:8b:a3:22:98:93:01:2a:dd:aa:58:08:b1:
         0c:2f:97:e3:d0:ba:ee:d9:9a:03:2b:ab:2d:8d:ba:f5:46:cd:
         21:0a:88:97:62:46:6d:a4:54:95:5a:fd:e8:67:84:94:9c:6c:
         96:1e:3d:5e:59:99:bd:4f:90:2f:78:4f:25:a7:8f:30:82:af:
         5b:e4:fc:94:86:20:d6:95:38:12:42:db:f6:c6:5e:c0:23:c6:
         98:54:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----