Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/f160c2accd9aaa9e3e1dca1cecf02218c4e9986f.roa
File:                     f160c2accd9aaa9e3e1dca1cecf02218c4e9986f.roa (raw, json)
Hash identifier:          gV7pbUKrxA0g14lcHzKj/11ecOZjDow3M3DlBI7TE8c=
Subject key identifier:   53:B7:31:2B:68:95:98:54:36:02:08:7E:20:43:25:B5:59:E3:20:DF
Certificate issuer:       /CN=bbd5773c9592361f7d41f83e0b45f99e97eab894
Certificate serial:       07E8E8
Authority key identifier: 46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd5773c9592361f7d41f83e0b45f99e97eab894.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/f160c2accd9aaa9e3e1dca1cecf02218c4e9986f.roa
Signing time:             Thu 11 Jan 2024 04:01:19 +0000
ROA not before:           Thu 11 Jan 2024 04:01:19 +0000
ROA not after:            Sun 11 Jan 2026 04:01:19 +0000
asID:                     272069
IP address blocks:        2803:3310::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518376 (0x7e8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd5773c9592361f7d41f83e0b45f99e97eab894
        Validity
            Not Before: Jan 11 04:01:19 2024 GMT
            Not After : Jan 11 04:01:19 2026 GMT
        Subject: CN=f160c2accd9aaa9e3e1dca1cecf02218c4e9986f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:83:54:70:d5:59:97:a7:05:60:69:ef:ce:
                    5a:b4:2a:71:d9:37:fb:78:87:28:95:41:d0:4c:60:
                    7b:62:64:8d:31:2b:77:65:c8:c0:f7:5c:d9:9b:de:
                    ce:78:be:84:72:96:c5:ef:56:b0:5c:e3:54:c6:4f:
                    9c:dd:f7:eb:06:fc:af:ed:23:01:3c:c2:3d:dc:4c:
                    34:8f:f1:23:de:b9:c8:de:cc:92:74:b7:93:38:b4:
                    53:44:c2:e8:c2:af:43:da:d0:27:c8:b7:59:85:ff:
                    38:b5:e1:70:5d:cb:c5:c7:ea:51:88:2f:d1:01:cb:
                    b0:70:bb:f4:10:38:16:c1:bf:87:f0:03:44:a1:cf:
                    e6:a2:8b:6d:7c:51:0f:e2:6d:c1:e1:a0:db:0f:fc:
                    50:3e:f9:8d:48:a4:38:d1:f1:2b:1c:b2:5e:5b:6c:
                    84:b7:57:a3:22:95:ec:cf:18:9c:27:34:ab:06:63:
                    d3:5a:9c:3b:73:1d:fe:44:2f:7d:6b:3f:13:81:c3:
                    d6:74:84:ce:36:80:66:91:68:3e:5f:75:62:9e:ed:
                    1f:d3:7e:f8:b8:76:6f:aa:7a:38:f8:76:97:92:68:
                    c8:cd:7b:1e:95:e2:da:5a:fc:b1:88:b3:75:d9:f1:
                    8d:61:33:f9:ae:14:f4:ad:01:3f:b9:5a:53:c4:46:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B7:31:2B:68:95:98:54:36:02:08:7E:20:43:25:B5:59:E3:20:DF
            X509v3 Authority Key Identifier:
                keyid:46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd5773c9592361f7d41f83e0b45f99e97eab894.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/f160c2accd9aaa9e3e1dca1cecf02218c4e9986f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/bbd5773c9592361f7d41f83e0b45f99e97eab894.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3310::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:66:99:9f:94:50:54:33:bf:54:47:3a:fe:95:25:69:0e:
         83:c1:47:0a:bb:ba:ca:68:07:10:f1:53:91:ee:31:5b:02:1b:
         0c:c4:16:7b:cb:ef:e8:4c:db:d0:d1:56:d9:23:3d:5e:e6:4c:
         b1:92:a9:7c:81:c8:62:59:f9:f7:0d:02:fd:23:47:97:48:73:
         46:d5:a8:48:79:37:a0:4b:8d:07:2f:93:71:ff:60:5f:77:e2:
         6d:99:58:49:e3:1e:60:b5:83:1e:06:0c:37:91:28:81:92:3b:
         28:e0:86:00:76:85:e5:59:50:d6:ce:b2:e9:e8:bc:9c:f1:9f:
         6f:52:9a:f3:3a:eb:fa:45:26:b0:98:7d:e1:30:ca:18:fc:49:
         d1:03:00:dc:bd:b8:60:32:4f:1c:ce:5c:5d:6b:e1:29:5b:c1:
         2d:8d:16:0b:e8:5e:83:9d:3c:b3:0a:29:76:47:dd:36:dc:7f:
         70:bd:04:a9:85:08:33:21:f1:d4:b3:e4:a0:e1:05:9a:a4:e7:
         17:81:45:71:6a:ad:c7:c0:4a:69:aa:1e:41:20:0b:bb:09:45:
         0c:23:e6:66:b8:46:23:38:48:67:0d:8d:7d:d0:88:44:8a:7f:
         7b:c9:34:d0:54:ea:50:30:a0:72:2e:dc:c1:9e:cc:1c:25:d0:
         ee:84:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----