Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/3a8d1a8682f18a000c36377dcc532cf37b8a4271.roa
File:                     3a8d1a8682f18a000c36377dcc532cf37b8a4271.roa (raw, json)
Hash identifier:          RwxfFkTJdDhBGJME8oNSfLICzGI62INO+D/+cW4/wbI=
Subject key identifier:   52:29:B9:7A:F5:32:C4:5B:39:5F:59:CD:AB:ED:D1:D3:6B:12:4C:6C
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       113F0D
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/3a8d1a8682f18a000c36377dcc532cf37b8a4271.roa
Signing time:             Wed 07 Feb 2024 05:21:21 +0000
ROA not before:           Wed 07 Feb 2024 05:21:21 +0000
ROA not after:            Sat 07 Feb 2026 05:21:21 +0000
asID:                     270081
IP address blocks:        2803:8be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130253 (0x113f0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Feb  7 05:21:21 2024 GMT
            Not After : Feb  7 05:21:21 2026 GMT
        Subject: CN=3a8d1a8682f18a000c36377dcc532cf37b8a4271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:4e:58:c2:3d:e1:56:c8:92:03:16:c8:f2:
                    47:aa:8a:75:a9:87:6f:86:18:15:7d:df:98:94:eb:
                    32:a3:4f:a9:d0:41:e6:84:7a:d5:60:8f:8c:e1:73:
                    cb:f5:ab:e3:9c:e2:ec:db:35:03:97:ad:76:ca:8f:
                    e1:4f:6a:21:de:39:bd:e5:26:be:1f:d3:2f:9a:bf:
                    e4:3e:14:9e:af:c0:37:99:cb:e7:8f:da:39:1c:98:
                    9c:09:53:3c:ac:1f:c4:fa:7d:af:50:13:c2:2f:38:
                    8d:81:d6:72:35:1a:63:39:de:fa:f7:0c:6f:9e:1c:
                    cc:d2:8f:5f:7b:65:28:21:b8:8c:59:32:65:a5:41:
                    d8:5c:d3:a8:9e:5d:5c:0b:5e:00:df:eb:68:88:7f:
                    cb:11:63:61:23:8d:99:f8:d9:55:56:56:d8:01:ef:
                    3e:af:6c:3b:f3:89:9e:bb:ec:00:15:b0:0a:cf:5d:
                    1b:37:38:08:67:09:06:67:71:49:36:c4:a2:45:69:
                    a7:a4:59:92:3d:62:08:1e:df:67:ff:75:d3:f4:93:
                    a7:6d:bc:ee:7f:8c:c7:3f:c2:84:c5:9a:bf:2e:a6:
                    f9:9c:ec:0c:b5:55:f0:34:7f:b7:67:e7:87:ad:fc:
                    fa:b1:c8:0c:09:45:f9:37:2e:61:5f:a8:f9:45:6f:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:B9:7A:F5:32:C4:5B:39:5F:59:CD:AB:ED:D1:D3:6B:12:4C:6C
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/3a8d1a8682f18a000c36377dcc532cf37b8a4271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:8a:f8:65:88:79:86:8e:a8:29:37:1d:71:19:12:d0:d3:
         86:ad:3e:41:33:50:71:ee:8c:f3:19:c9:e6:05:a5:bc:2a:72:
         2e:56:9c:e9:26:c9:f5:65:5d:8e:0a:bc:6a:d8:e7:45:31:1b:
         dc:17:1b:39:b3:73:bf:b2:27:43:67:4d:d2:82:45:7a:ac:5d:
         ed:0b:4f:ce:f2:17:20:41:13:96:dc:a6:97:48:9a:e5:80:4f:
         8f:28:e9:cc:c2:56:55:ce:1f:c6:21:58:00:41:e9:2f:74:04:
         6c:f3:bb:60:0d:80:a1:0a:62:c1:d2:eb:cc:19:e8:e5:4e:64:
         90:8f:d5:1d:b4:56:f6:96:a8:f8:81:cc:ec:c6:d9:62:ef:5b:
         f3:1d:54:81:2e:2c:72:92:67:a0:5b:e2:2e:a1:09:2c:3c:95:
         a6:dd:ea:38:60:65:17:18:8c:f9:fd:81:c4:b6:3a:41:c8:e1:
         c9:49:88:a8:4b:42:35:4b:d1:11:4e:7f:3f:4e:18:0e:f1:89:
         b3:10:44:d6:51:f8:bb:41:05:e2:35:e9:55:0e:7b:9d:83:b9:
         1b:47:3c:65:51:05:bd:1e:c6:e2:29:b8:0e:a0:c4:f6:ee:93:
         53:14:93:4d:b2:80:28:cd:44:d3:e5:cf:5e:a6:d8:da:1d:8c:
         10:99:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----