Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/07a4581d33b1015b68049288ce5c2424b7c39558.roa
File:                     07a4581d33b1015b68049288ce5c2424b7c39558.roa (raw, json)
Hash identifier:          0SerwOUSuUT/p7rw/y43tOtTANmhzQEi2ezZX+Z+cMo=
Subject key identifier:   ED:97:FA:E2:5B:FA:2D:57:22:C6:43:FB:9B:46:0E:1B:93:B6:A0:FF
Certificate issuer:       /CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Certificate serial:       1394E1
Authority key identifier: 1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/07a4581d33b1015b68049288ce5c2424b7c39558.roa
Signing time:             Wed 07 Jun 2023 16:13:55 +0000
ROA not before:           Tue 06 Jun 2023 16:13:55 +0000
ROA not after:            Sat 07 Jun 2025 16:13:55 +0000
asID:                     270110
IP address blocks:        2806:3b1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283297 (0x1394e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Validity
            Not Before: Jun  6 16:13:55 2023 GMT
            Not After : Jun  7 16:13:55 2025 GMT
        Subject: CN=07a4581d33b1015b68049288ce5c2424b7c39558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:94:e7:4d:6f:c2:23:74:58:11:1d:54:d3:
                    5d:4d:4f:8a:83:dd:61:85:8a:5d:3f:09:ff:33:4f:
                    b9:79:39:d8:f2:e2:2b:60:a2:fc:c0:a6:9f:ef:a3:
                    55:2f:81:ef:d0:e9:05:17:9d:0c:2f:00:10:71:47:
                    ec:c0:2f:15:81:37:83:13:c8:94:02:41:14:54:b9:
                    9d:dc:fd:82:66:c1:ba:eb:11:17:5d:e8:2e:4b:2d:
                    02:05:5d:53:91:02:cc:31:52:3a:f3:d0:e0:d6:7c:
                    e8:35:0e:5e:54:34:46:cd:5e:63:39:32:ce:c6:ba:
                    f8:46:1d:f7:0b:e8:ac:e0:ce:17:9b:27:f3:d6:20:
                    8e:61:23:2c:2a:31:39:d0:55:72:30:75:a8:97:82:
                    6b:61:5a:ce:6c:98:02:19:ac:72:fb:e7:e8:bb:77:
                    69:49:94:88:d8:18:3c:71:e6:b6:b9:b8:7a:20:14:
                    6f:7e:33:49:5e:a7:ea:d3:bc:d0:e8:04:b0:a1:27:
                    ac:90:ac:12:2a:e2:61:64:aa:bd:e5:11:af:28:eb:
                    43:c9:7d:aa:1f:62:c7:25:0f:f9:36:ea:b5:cf:2e:
                    d3:b4:1d:94:6d:5b:2c:09:be:9b:b9:a2:5b:13:78:
                    3e:7f:c7:dd:b0:40:5d:88:00:60:b9:f6:ad:f1:a5:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:FA:E2:5B:FA:2D:57:22:C6:43:FB:9B:46:0E:1B:93:B6:A0:FF
            X509v3 Authority Key Identifier:
                keyid:1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/07a4581d33b1015b68049288ce5c2424b7c39558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:b2:99:5d:ff:dd:b8:d4:b0:99:fe:65:3e:44:41:b5:e8:cc:
         ba:13:44:b7:13:ee:d0:9a:41:ad:8f:15:56:cf:85:0d:84:3d:
         c3:42:d0:50:f0:08:63:73:b3:53:09:78:9f:b5:b5:78:57:86:
         91:8c:6f:6f:9e:f9:04:05:57:f6:d4:3c:6e:de:f2:e1:c8:7f:
         cc:e1:0e:c2:4f:85:7e:08:ef:14:45:4e:a7:f5:98:6d:9a:76:
         b6:20:ac:a5:03:72:e3:45:1d:43:3e:98:a9:8b:78:84:64:8e:
         0b:9e:40:53:c8:14:aa:de:4b:ea:bc:94:32:42:8d:f4:6f:da:
         57:39:a7:a4:ee:02:42:b7:ea:f9:f7:81:b9:44:78:78:7e:4d:
         10:d8:af:3c:34:13:22:35:fd:2a:3f:9a:d8:9a:c9:55:9b:0b:
         5e:52:33:1b:d7:09:cd:0f:c8:bb:89:1b:1f:77:91:bc:36:27:
         06:5f:24:1e:a3:89:de:ad:5e:99:06:d2:76:05:f1:92:94:76:
         b3:7c:5d:e0:3a:8f:10:58:18:2e:ac:78:c2:fc:ee:45:86:aa:
         e1:83:e4:55:45:eb:6c:b7:e3:6e:c2:70:31:40:e7:b2:2e:3a:
         63:0e:ef:df:0a:96:4d:38:5c:2a:38:98:b3:dc:3e:77:5b:a1:
         ef:bb:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----