Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/383b6ee10979d4c37f5d70380fb582ef767ac0bb.roa
File:                     383b6ee10979d4c37f5d70380fb582ef767ac0bb.roa (raw, json)
Hash identifier:          UM9mFCl2LmJJafwEJqDoWHQpBQXMlVOzKEviujJm+so=
Subject key identifier:   E5:EB:8E:C4:08:8D:3A:8F:05:0E:91:18:D4:5A:3B:5B:3F:D4:75:BC
Certificate issuer:       /CN=add8af711eb7401694e992ec4abe38f4bdf4a72d
Certificate serial:       11E843
Authority key identifier: D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add8af711eb7401694e992ec4abe38f4bdf4a72d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/383b6ee10979d4c37f5d70380fb582ef767ac0bb.roa
Signing time:             Tue 28 Mar 2023 08:30:00 +0000
ROA not before:           Mon 27 Mar 2023 08:30:00 +0000
ROA not after:            Wed 26 Mar 2025 08:30:00 +0000
asID:                     19429
IP address blocks:        2801:1ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173571 (0x11e843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add8af711eb7401694e992ec4abe38f4bdf4a72d
        Validity
            Not Before: Mar 27 08:30:00 2023 GMT
            Not After : Mar 26 08:30:00 2025 GMT
        Subject: CN=383b6ee10979d4c37f5d70380fb582ef767ac0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:b0:ff:ed:7d:6b:e7:4f:75:8a:ca:1f:fd:
                    61:25:e6:bd:6c:2d:ea:b5:ea:c0:d8:f6:f5:6b:12:
                    11:54:c7:a0:95:ca:9d:e0:d8:41:9f:87:c0:bf:19:
                    86:da:79:64:33:c3:4b:e4:1e:c0:11:cf:2c:dc:81:
                    40:4b:ab:c6:ea:a1:ae:3a:75:4c:53:d8:ef:21:35:
                    08:f5:b3:b2:1a:94:ff:d2:87:3c:df:fc:3a:10:ca:
                    04:29:8f:b5:e0:b3:e0:bf:17:f5:f3:5b:b5:04:89:
                    3b:fb:52:87:17:68:d0:cb:6c:4a:e9:f8:6c:aa:79:
                    2a:64:08:5b:00:04:6d:c8:c4:d0:42:e0:b7:3b:18:
                    a4:7b:93:31:b2:de:9f:2a:99:b6:9a:07:1d:f9:fd:
                    a9:fc:00:91:26:92:e0:88:17:3a:f7:51:30:79:03:
                    08:73:19:11:ff:5a:87:3b:86:10:17:2c:dd:8e:d1:
                    ff:1f:c4:e9:77:d6:78:a3:29:6a:c1:6c:cc:26:f2:
                    a0:f8:87:b8:f8:68:46:c8:2a:91:ca:77:1d:ee:0c:
                    69:1f:d2:78:18:3e:f3:89:35:1a:91:28:07:95:46:
                    84:69:20:77:7a:27:66:fa:fd:31:1e:40:9a:7e:31:
                    b3:ce:e1:9d:59:b1:7c:b1:10:5e:ae:f0:d4:ca:38:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:8E:C4:08:8D:3A:8F:05:0E:91:18:D4:5A:3B:5B:3F:D4:75:BC
            X509v3 Authority Key Identifier:
                keyid:D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add8af711eb7401694e992ec4abe38f4bdf4a72d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/383b6ee10979d4c37f5d70380fb582ef767ac0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/add8af711eb7401694e992ec4abe38f4bdf4a72d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:b3:74:e5:47:d0:68:56:fd:7f:18:4a:8f:51:db:ef:67:
         5b:3d:75:93:97:f0:e3:2e:b4:fc:e8:6b:98:ba:c0:42:09:a3:
         74:88:e6:15:64:d2:a8:f9:b9:36:0e:4b:93:1d:f4:60:f9:e9:
         e1:47:d2:f5:b8:de:34:75:0b:8a:4f:02:91:ab:8b:dc:36:f4:
         ff:a6:89:3a:4e:92:56:b7:90:a6:b7:0d:7c:b1:2d:83:d3:9f:
         f0:2d:30:50:19:68:9d:22:ed:66:08:e7:06:b5:cf:48:ef:f6:
         16:6e:0b:fa:dc:f9:51:28:59:66:73:62:37:b2:12:1a:5f:ae:
         7a:c7:75:b6:2f:6c:26:a2:4e:19:70:de:69:fa:69:cc:ee:d8:
         78:de:a8:55:47:a0:7b:ac:39:6f:63:ba:eb:4c:d8:03:82:06:
         9d:e1:1a:68:60:16:3b:40:bc:89:c2:5e:7c:06:96:96:4d:07:
         f7:62:d6:9c:01:f1:3f:21:f6:06:18:1a:9c:e7:c7:3b:36:f0:
         a6:42:a3:eb:fb:5e:67:fc:10:04:f8:f2:a5:93:e3:08:e7:6f:
         f7:2b:0c:ed:6e:da:ea:68:c9:a6:e3:52:e4:8e:1a:b2:18:62:
         41:b8:5d:56:20:74:ff:ed:72:7e:6c:82:b2:de:d8:a0:0b:ac:
         74:c9:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----