Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/b9d3c99209d499066ef4f629d36d9633686d778e.roa
File:                     b9d3c99209d499066ef4f629d36d9633686d778e.roa (raw, json)
Hash identifier:          dvylyMgVvyjOUQVBkuK3ymG6tzcbAUhI2xbWKfTNSBQ=
Subject key identifier:   2F:7F:A7:6C:C7:20:43:93:14:66:8F:A2:49:D4:9D:8C:72:01:A9:95
Certificate issuer:       /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial:       23216B
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/b9d3c99209d499066ef4f629d36d9633686d778e.roa
Signing time:             Tue 26 Sep 2023 22:49:32 +0000
ROA not before:           Mon 25 Sep 2023 22:49:31 +0000
ROA not after:            Fri 26 Sep 2025 22:49:31 +0000
asID:                     262191
IP address blocks:        2803:84c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302315 (0x23216b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
        Validity
            Not Before: Sep 25 22:49:31 2023 GMT
            Not After : Sep 26 22:49:31 2025 GMT
        Subject: CN=b9d3c99209d499066ef4f629d36d9633686d778e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:30:cd:a7:fc:41:68:7e:9b:5c:cc:f9:3c:
                    24:72:98:3b:44:21:d1:d7:8c:16:17:42:26:53:7e:
                    fd:6b:86:7f:1f:50:d8:fb:5d:2c:ef:5e:2f:83:88:
                    6e:d9:bb:b3:eb:14:b0:42:a8:f1:12:c8:1e:b9:48:
                    6d:fc:17:c9:01:3d:39:a5:13:a9:3e:27:93:7f:9f:
                    44:a8:d0:a5:2f:c3:f3:50:87:a8:d5:c8:83:0c:3a:
                    39:1c:60:b4:cd:74:e9:11:b9:e5:0c:3a:cd:bd:04:
                    27:5f:09:04:e2:68:9a:ce:fc:04:1c:fd:f7:7c:50:
                    7a:aa:7a:61:d7:0d:a8:4b:f2:82:24:46:a1:4b:24:
                    3e:b2:56:a1:04:2c:8a:79:0b:f5:da:91:a3:b2:77:
                    ba:b6:48:f8:b6:48:52:1d:7d:2c:f2:b7:7d:66:27:
                    a9:a1:2a:cb:bd:1e:38:74:58:04:a5:e5:cd:a2:79:
                    e9:a1:dd:f2:4b:1b:8c:19:12:99:a9:7c:68:0e:d7:
                    2e:8a:9d:a6:31:c6:69:43:97:e8:de:95:8c:5e:18:
                    30:60:82:7e:aa:a2:05:69:2b:9d:36:6d:7e:5f:23:
                    a3:fb:73:b9:46:fc:4e:e5:e5:0d:d1:94:00:a4:fd:
                    01:b7:4b:c6:73:d9:83:c3:5d:b0:b9:f3:1f:7f:3e:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:A7:6C:C7:20:43:93:14:66:8F:A2:49:D4:9D:8C:72:01:A9:95
            X509v3 Authority Key Identifier:
                keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/b9d3c99209d499066ef4f629d36d9633686d778e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:82:0f:51:78:8e:c6:5d:e1:db:3e:a9:4b:17:26:3a:b1:4a:
         89:2c:5e:79:1e:e5:f9:ae:b3:82:94:bf:4f:e6:01:ee:f2:91:
         ad:78:9d:b7:78:fb:be:13:c2:ed:f6:ab:ea:2e:e0:5e:3c:45:
         db:8b:ad:50:d8:a4:e8:9a:f4:97:bc:94:b5:80:14:cb:a7:94:
         cf:1b:21:fd:db:27:cd:84:f8:79:13:39:de:d8:58:e9:fc:4d:
         45:c4:f0:cc:65:90:9c:ea:3c:57:8e:d6:9f:4f:d4:1a:8e:76:
         ed:6c:c7:30:85:54:00:99:d1:6a:1a:89:87:49:11:60:e7:c7:
         bf:d8:6b:ea:5a:79:fc:1f:1f:5c:75:bb:ef:dd:62:8d:4c:fb:
         bf:dd:a0:50:be:04:ec:8a:86:da:cf:75:4b:4f:2b:e2:ab:c6:
         51:14:58:d3:91:76:0e:37:01:fc:98:ae:b2:69:7a:ef:6a:7c:
         60:55:a3:eb:1b:94:3d:86:b4:c5:cd:fe:85:21:57:1a:84:6d:
         bc:c4:52:be:ac:2b:31:8f:41:fa:fd:e0:e9:ce:77:48:07:35:
         23:5a:47:e0:99:7c:66:01:f6:c3:b1:5c:2a:8b:24:11:54:4d:
         6b:c3:c5:2b:70:cf:cc:c6:d4:f0:05:19:73:7d:55:7c:84:e2:
         f9:7a:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----