Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/feea1772f5d5606409ca18d1e0cbd65739c5cf02.roa
File:                     feea1772f5d5606409ca18d1e0cbd65739c5cf02.roa (raw, json)
Hash identifier:          zkjlyE8ISp4qcAwSU4hBnUK9NsciZ/CzQbfhsNbjR0U=
Subject key identifier:   69:7D:B9:DF:8E:9E:88:22:A2:B6:7D:D4:FA:AF:1D:EA:C3:B2:0C:AC
Certificate issuer:       /CN=6afeb237421bf785392eae0300cf585fb828024b
Certificate serial:       020D
Authority key identifier: 1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/feea1772f5d5606409ca18d1e0cbd65739c5cf02.roa
Signing time:             Thu 16 Feb 2023 13:51:29 +0000
ROA not before:           Wed 15 Feb 2023 13:51:11 +0000
ROA not after:            Sun 16 Feb 2025 13:51:11 +0000
asID:                     272951
IP address blocks:        2803:6990::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afeb237421bf785392eae0300cf585fb828024b
        Validity
            Not Before: Feb 15 13:51:11 2023 GMT
            Not After : Feb 16 13:51:11 2025 GMT
        Subject: CN=feea1772f5d5606409ca18d1e0cbd65739c5cf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:64:ba:2f:26:15:7e:10:fa:88:ab:b6:17:
                    d3:0d:ae:af:01:e3:4e:a1:3e:03:10:55:c7:b0:36:
                    99:5f:1d:12:a7:d5:82:f1:15:1f:2b:38:81:c0:fd:
                    10:58:9e:80:95:60:d0:09:a9:3c:eb:be:a5:95:3f:
                    0d:f6:8b:4e:52:16:8d:ee:07:b0:1e:9f:a6:f2:b1:
                    44:cf:1f:26:c2:82:77:4f:b2:14:00:4f:26:fb:44:
                    23:ed:2a:6e:af:00:da:8f:47:56:33:dc:f8:6c:39:
                    6d:e7:68:37:d8:db:25:c8:7b:57:2d:77:43:a7:f4:
                    1f:46:44:74:57:dd:71:49:64:ed:22:62:9a:7e:b1:
                    4d:6d:2e:05:e4:28:ea:70:be:57:cf:79:43:0b:0d:
                    62:51:61:4b:75:0b:0e:e3:9a:fc:58:ec:c3:8b:8a:
                    60:76:1e:33:78:12:c3:c2:d7:4e:57:c2:bf:e9:99:
                    a6:ce:93:52:50:24:01:39:89:67:1b:0e:38:7e:47:
                    6c:91:f9:c2:44:1e:82:5c:d7:52:f3:b7:b7:1a:5f:
                    43:29:30:eb:52:98:55:56:73:ee:dd:35:4f:90:68:
                    8d:3a:9a:12:f8:0a:d6:89:1e:b8:d9:28:80:a6:40:
                    db:66:17:d6:aa:94:77:b9:dc:f2:6f:fe:06:6c:f8:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:B9:DF:8E:9E:88:22:A2:B6:7D:D4:FA:AF:1D:EA:C3:B2:0C:AC
            X509v3 Authority Key Identifier:
                keyid:1B:5E:4F:6D:13:E7:91:2B:B2:A7:A7:98:1F:BE:C8:42:2B:6C:C7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6afeb237421bf785392eae0300cf585fb828024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/feea1772f5d5606409ca18d1e0cbd65739c5cf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b971b10-c757-4e35-a5ec-468aed2fef72/6afeb237421bf785392eae0300cf585fb828024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6990::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:91:d2:0c:cc:92:4e:2f:c4:33:25:79:c6:36:63:00:b8:9e:
         2e:f4:5e:57:94:e0:31:c4:bd:74:46:55:59:80:e7:12:58:4a:
         ad:b8:d6:56:84:01:2b:6f:9a:fc:19:d5:9d:70:63:d6:57:a2:
         40:37:94:83:14:6c:c2:3c:40:71:de:a4:0b:d4:1a:a3:0f:93:
         76:40:98:ef:dd:2b:fd:7a:78:ec:18:0c:12:e5:ee:00:ab:53:
         8a:8b:fc:ea:5c:76:cf:2e:b5:66:0f:9e:ac:c9:d5:97:6f:49:
         d8:ee:32:1b:e0:cb:ea:dd:62:98:de:be:00:a5:da:06:e9:16:
         45:f4:de:13:a5:6a:eb:90:13:23:86:4f:e3:f9:71:7c:d7:f9:
         de:0b:42:71:06:fa:f7:ab:2e:bc:30:89:22:2b:d5:9d:1d:fe:
         5f:b6:b0:83:6a:74:86:76:de:f8:db:2c:00:ab:14:a8:78:1c:
         9f:82:58:2b:d3:44:4d:b7:4f:55:0a:49:c8:37:54:cf:11:c7:
         28:61:cf:2a:c5:46:7d:fe:d1:46:07:56:51:cc:03:f6:b2:a8:
         3a:9c:90:06:70:b2:d9:81:67:32:02:cf:09:25:27:b0:cd:bb:
         f7:8f:49:7e:06:23:13:2d:85:ef:ab:8d:0c:21:cb:75:79:38:
         ed:cd:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----