Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/75d50671fd7e0cf468348760441f84cad72ee13f.roa
File:                     75d50671fd7e0cf468348760441f84cad72ee13f.roa (raw, json)
Hash identifier:          H0ERgu2FqtJ1FYe8vidprcTkOQDWwXFOFd6nBWUHLdI=
Subject key identifier:   99:4A:6B:18:02:86:A5:46:F0:E0:E8:98:45:8A:23:6C:03:B6:50:E1
Certificate issuer:       /CN=77c6af10535d7591497a3cfee30c532d59f06798
Certificate serial:       1B744C
Authority key identifier: 46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/75d50671fd7e0cf468348760441f84cad72ee13f.roa
Signing time:             Wed 18 Oct 2023 16:59:12 +0000
ROA not before:           Tue 17 Oct 2023 16:59:12 +0000
ROA not after:            Sat 18 Oct 2025 16:59:12 +0000
asID:                     270052
IP address blocks:        2803:ede0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799244 (0x1b744c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6af10535d7591497a3cfee30c532d59f06798
        Validity
            Not Before: Oct 17 16:59:12 2023 GMT
            Not After : Oct 18 16:59:12 2025 GMT
        Subject: CN=75d50671fd7e0cf468348760441f84cad72ee13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:4c:e1:f4:85:5e:0d:75:3a:ad:92:7d:7b:
                    a3:39:79:e2:44:19:da:a2:9f:78:b2:1d:39:e2:ec:
                    19:e5:e2:b7:8f:7d:72:12:35:d8:6a:f4:5b:c0:1f:
                    f3:7f:83:83:ea:dd:c0:75:a4:4d:e8:49:f2:07:f4:
                    c1:f1:40:d9:42:4d:8a:cf:0a:29:b3:7b:1e:13:a9:
                    e7:21:6d:02:70:a1:60:a7:9f:e6:e4:c2:f2:09:a2:
                    ca:5b:b2:51:44:1c:ee:0b:16:bc:96:eb:e0:37:b8:
                    64:8e:1a:85:cb:c6:70:a3:3a:20:e1:a0:87:b2:4a:
                    5d:24:d9:f6:eb:d4:dd:83:5b:51:f2:ad:47:24:61:
                    08:02:8c:44:28:37:75:26:6e:bb:49:70:c0:63:13:
                    0a:c5:3a:35:43:fb:6f:51:94:89:3a:2f:4b:4b:e5:
                    9b:c1:53:ca:df:22:76:46:d2:88:3a:02:d1:24:ab:
                    38:b3:fb:30:64:ad:12:db:10:3a:00:5f:59:bf:cf:
                    ba:2e:7b:9c:0d:f5:44:b8:67:3e:f9:8a:ec:93:6c:
                    fe:3e:e3:66:36:3a:21:f8:c6:dc:52:a0:2e:9e:40:
                    0f:a5:ff:a4:36:0c:24:42:11:32:76:09:48:7f:a7:
                    0f:18:f1:c8:db:bb:3b:af:e8:bd:27:2b:64:cc:27:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:6B:18:02:86:A5:46:F0:E0:E8:98:45:8A:23:6C:03:B6:50:E1
            X509v3 Authority Key Identifier:
                keyid:46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/75d50671fd7e0cf468348760441f84cad72ee13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/77c6af10535d7591497a3cfee30c532d59f06798.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:44:67:24:04:c2:15:df:94:90:8e:18:cd:7c:45:13:f9:9e:
         f9:18:be:f2:7a:67:a9:55:30:1a:50:27:d2:2f:25:bd:aa:5e:
         ee:09:b7:44:f5:7f:08:9d:99:28:c7:0f:54:62:00:25:56:6e:
         d3:29:f4:8d:14:a2:45:d2:d9:55:1a:eb:45:9a:f3:ed:58:4d:
         2c:4c:ee:92:f1:3f:d9:b2:89:db:53:96:f5:37:45:8c:72:7b:
         05:e4:29:92:23:8b:f0:0f:f8:c5:ab:29:fe:23:38:13:57:90:
         cc:a9:98:9b:30:47:f3:ce:16:f6:39:3f:4a:47:1d:cb:08:a8:
         36:f4:2b:4a:56:1d:e5:0c:15:59:cb:54:52:94:13:10:7a:77:
         21:36:ee:14:ca:59:87:e0:6b:65:6f:31:cc:c1:18:07:0d:1c:
         cd:4b:72:b8:18:06:e0:5c:bb:b7:02:3d:ca:0b:9f:b5:41:68:
         0f:7d:70:a3:48:d6:a3:85:93:78:9a:88:f1:70:48:b3:f6:e2:
         fd:3e:f7:5e:f6:3e:30:cb:eb:ed:0a:a3:a9:6e:31:34:3c:f3:
         1d:83:1e:b2:49:29:4b:f3:38:02:ee:19:4e:cd:b0:0b:49:4e:
         35:bc:6e:d3:44:df:66:74:df:b9:dc:c7:db:91:64:65:4a:08:
         5f:c5:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----