Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/35d23128bc9f02ccfa583394b4c06113d2d79c4a.roa
File:                     35d23128bc9f02ccfa583394b4c06113d2d79c4a.roa (raw, json)
Hash identifier:          AHI7U/7KOHYHLR9myasOCMkLLetD5dr7D9rIjcFzhFU=
Subject key identifier:   17:1B:0A:77:13:A8:A8:F4:82:BB:2A:CC:09:E3:BE:57:80:77:45:8D
Certificate issuer:       /CN=6afeb237421bf785392eae0300cf585fb828024b
Certificate serial:       09A574
Authority key identifier: 1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/35d23128bc9f02ccfa583394b4c06113d2d79c4a.roa
Signing time:             Fri 22 Mar 2024 17:11:32 +0000
ROA not before:           Fri 22 Mar 2024 17:11:32 +0000
ROA not after:            Sun 22 Mar 2026 17:11:32 +0000
asID:                     272951
IP address blocks:        2803:6990::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632180 (0x9a574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afeb237421bf785392eae0300cf585fb828024b
        Validity
            Not Before: Mar 22 17:11:32 2024 GMT
            Not After : Mar 22 17:11:32 2026 GMT
        Subject: CN=35d23128bc9f02ccfa583394b4c06113d2d79c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:a1:8c:55:ae:12:8e:0f:86:7f:fa:6e:2a:
                    3b:83:65:16:bf:f5:13:f7:51:49:8b:41:9f:ac:ac:
                    c2:e0:c6:15:67:83:1a:a0:e5:f5:92:cc:29:65:b9:
                    1e:da:83:c1:8c:c5:79:b7:a6:3d:e8:b2:86:cc:4d:
                    24:43:5e:d9:c4:94:22:72:af:6a:0b:65:82:d0:11:
                    6a:6b:09:19:26:aa:ad:2b:47:19:9b:71:d2:c0:40:
                    74:5a:17:56:49:bc:4e:fe:5a:16:8f:e0:7d:ed:6d:
                    6e:9c:d7:85:09:c9:f7:0e:4c:8f:a6:c2:c3:26:65:
                    82:89:78:41:94:ac:f8:51:1b:66:4b:3e:59:c1:01:
                    47:39:d9:6e:55:7c:0c:29:3d:d5:7c:88:9e:ed:c5:
                    3c:ae:4c:66:f4:fc:91:8f:e2:8a:38:71:c1:4d:d3:
                    d3:a9:19:4c:7c:c5:1c:12:56:09:c7:54:60:4c:36:
                    53:6b:0d:2e:40:1d:5e:40:f1:ea:8e:4d:e1:f1:ba:
                    39:44:7b:51:db:3d:9d:b7:29:1c:06:4c:db:f1:49:
                    00:1f:9c:a9:4a:08:71:d3:d7:d1:e2:69:f3:a4:ba:
                    1a:04:a1:8d:dc:55:5f:e8:67:98:39:b0:ab:57:72:
                    3d:86:8a:55:dc:1b:db:45:ed:c2:30:4d:b1:72:c8:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1B:0A:77:13:A8:A8:F4:82:BB:2A:CC:09:E3:BE:57:80:77:45:8D
            X509v3 Authority Key Identifier:
                keyid:1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/35d23128bc9f02ccfa583394b4c06113d2d79c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/6afeb237421bf785392eae0300cf585fb828024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:10:80:2e:06:1c:43:da:77:41:52:35:6f:fc:8c:35:77:
         be:3d:c4:aa:62:dc:36:74:59:37:06:00:1f:94:47:79:a9:1c:
         f4:65:cc:63:fb:e2:e0:b0:7c:dd:91:b8:ed:88:1a:69:51:03:
         0b:5a:42:70:75:e9:c0:07:b4:2b:f7:a8:73:a5:9e:98:ca:6d:
         b6:f1:34:f8:d0:bc:9e:c5:1f:4f:c1:1a:83:fc:f1:fc:2d:b9:
         44:30:da:0f:88:68:0f:b1:ca:f0:23:fb:28:8f:46:46:91:d6:
         80:a0:bc:16:51:56:76:02:52:8a:c3:4e:0d:e1:de:3b:a3:31:
         21:12:96:dc:cb:9a:01:c9:f5:3a:2d:d5:da:76:de:4b:e7:e4:
         18:b6:f0:b4:d4:cf:9b:35:02:be:ab:c4:54:84:3f:9c:a4:a6:
         1a:aa:99:7b:f6:04:b0:53:57:25:b0:f2:65:22:e5:2e:16:ba:
         63:94:9b:b7:93:48:84:1d:bd:bf:4b:ea:b4:de:70:62:da:7f:
         94:32:24:79:5c:66:7e:00:61:ae:3e:d0:6a:a4:4c:72:f9:67:
         52:80:c8:0d:83:a7:57:63:d2:9a:5b:cd:cd:c2:b7:a1:a6:82:
         98:c7:26:2a:15:6d:b2:cc:ce:47:bb:fe:ad:94:b3:6b:26:4a:
         f8:eb:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----