Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3a2c0a9a14be66a5ddd19149de317845f01f5e29.roa
File:                     3a2c0a9a14be66a5ddd19149de317845f01f5e29.roa (raw, json)
Hash identifier:          Z8bsAHiTUpzhohfgrsKmQeJ+hJYtfINaFoP9qTqGB2w=
Subject key identifier:   7F:4C:80:24:36:CC:3E:7B:0B:56:2C:CB:37:21:F3:C9:82:77:AA:82
Certificate issuer:       /CN=89b43ca0a70451881fc86586450001a0c3042bd0
Certificate serial:       155172
Authority key identifier: 62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3a2c0a9a14be66a5ddd19149de317845f01f5e29.roa
Signing time:             Tue 20 Feb 2024 08:30:00 +0000
ROA not before:           Tue 20 Feb 2024 08:30:00 +0000
ROA not after:            Thu 19 Feb 2026 08:30:00 +0000
asID:                     271992
IP address blocks:        2803:9110::/32 maxlen: 64
                          2803:9110:1000::/48 maxlen: 64
                          2803:9110:2000::/48 maxlen: 64
                          2803:9110:3000::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397106 (0x155172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b43ca0a70451881fc86586450001a0c3042bd0
        Validity
            Not Before: Feb 20 08:30:00 2024 GMT
            Not After : Feb 19 08:30:00 2026 GMT
        Subject: CN=3a2c0a9a14be66a5ddd19149de317845f01f5e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:6b:90:a1:b2:ce:c7:3f:9e:80:db:0c:6b:
                    8e:d7:2b:16:dc:fa:b5:6e:93:3a:19:0e:2e:38:ee:
                    f3:d5:6b:f3:f5:0e:b6:bb:8a:ce:fd:29:db:14:59:
                    c6:79:9f:50:d3:18:c8:82:38:a5:96:06:38:93:42:
                    47:7a:3f:8f:de:27:bf:31:ea:a4:f8:3a:4b:2e:a9:
                    0f:74:41:d3:54:21:64:d4:e0:0f:ef:17:3b:4d:85:
                    89:07:34:35:87:84:72:c6:67:42:8a:de:7e:6c:a4:
                    70:65:9e:94:e5:20:04:a7:ad:a7:3a:e2:45:34:e1:
                    17:2d:70:4e:64:58:5f:23:60:c7:9e:e6:b8:f9:2f:
                    3a:9e:48:34:0a:fe:e0:59:d4:7f:4d:f0:4f:e2:a1:
                    44:c3:30:8f:4d:76:dc:04:d6:74:d0:01:28:5f:ab:
                    14:38:6a:be:0e:08:db:f9:07:1b:78:7d:2e:f5:98:
                    d8:26:e6:b4:18:5b:dc:49:e4:f4:52:04:66:46:17:
                    96:61:8c:3c:5f:4a:cf:c4:4c:f8:83:36:82:f2:ce:
                    68:34:3d:2d:a7:76:d8:51:f8:2c:30:28:f8:a2:81:
                    6f:21:e2:4c:36:1c:69:da:44:c4:fa:57:28:ed:e2:
                    1d:34:48:70:94:ee:85:f6:32:28:6e:eb:c3:f2:3b:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:80:24:36:CC:3E:7B:0B:56:2C:CB:37:21:F3:C9:82:77:AA:82
            X509v3 Authority Key Identifier:
                keyid:62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/3a2c0a9a14be66a5ddd19149de317845f01f5e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:a2:f3:90:a3:54:a5:d9:cd:fc:03:eb:22:08:4b:be:56:00:
         f7:92:37:3c:93:4e:46:eb:25:9f:9c:d0:4d:c9:36:22:4b:71:
         6e:f1:fe:c1:f4:fc:94:8f:6e:12:35:8e:9c:20:af:31:aa:09:
         90:61:40:13:12:11:a3:21:fc:66:ac:c4:98:f3:9e:46:69:39:
         34:52:a2:f7:fe:53:60:77:6c:02:0b:8d:95:c5:be:23:d6:af:
         a6:65:b7:17:15:60:8e:6c:af:1e:fe:8f:09:a9:1b:ae:29:ee:
         1f:73:74:31:3b:91:16:1c:f7:f3:a1:f7:67:78:9c:98:f0:95:
         77:d1:e4:c1:a2:9d:65:1c:30:9d:f1:5d:cc:24:b8:4a:45:fb:
         c0:06:6c:4d:be:55:8a:4e:55:7f:d5:bb:f0:2f:e5:8c:f0:d2:
         82:62:38:62:e5:02:2f:66:01:81:2d:93:22:c4:aa:35:c4:91:
         d8:42:df:24:f3:d0:04:6d:91:dc:5b:fa:3b:56:71:13:a4:5a:
         13:9d:c6:39:21:a2:13:74:5d:06:b0:52:57:fc:fa:ee:ba:d1:
         c4:cd:54:78:da:e1:c8:bd:e9:c3:48:7b:2f:6f:a3:37:9f:db:
         d8:5f:0c:c2:93:4e:11:0c:79:d3:d1:1e:60:88:3b:be:0a:b4:
         f4:9a:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----