Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/8711b837ebc0a1aecd86fd1e9bb0a5369a6cabdb.roa
File:                     8711b837ebc0a1aecd86fd1e9bb0a5369a6cabdb.roa (raw, json)
Hash identifier:          1WHG/P1b/lbfEG/MD4mzoF57jI6bmAU63ZJsDHFETJM=
Subject key identifier:   D6:F1:71:31:F3:17:98:DA:FA:D2:AA:8F:87:8B:18:94:0B:94:5B:80
Certificate issuer:       /CN=36a6485e1a54ec808a146215bd1372815d55a3ec
Certificate serial:       146F1F
Authority key identifier: 37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/8711b837ebc0a1aecd86fd1e9bb0a5369a6cabdb.roa
Signing time:             Mon 08 Jan 2024 20:20:29 +0000
ROA not before:           Mon 08 Jan 2024 20:20:29 +0000
ROA not after:            Thu 08 Jan 2026 20:20:29 +0000
asID:                     27884
IP address blocks:        2803:910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339167 (0x146f1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a6485e1a54ec808a146215bd1372815d55a3ec
        Validity
            Not Before: Jan  8 20:20:29 2024 GMT
            Not After : Jan  8 20:20:29 2026 GMT
        Subject: CN=8711b837ebc0a1aecd86fd1e9bb0a5369a6cabdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:d8:1e:7a:5a:40:52:f7:ed:5a:bc:57:bd:
                    7f:25:d7:cd:c5:3f:ec:62:4b:05:66:67:7c:02:9e:
                    c4:ac:48:fb:62:cd:05:67:22:25:30:0b:82:b4:cf:
                    4c:9f:84:11:6f:73:b8:39:12:b6:7b:d6:b3:17:14:
                    34:0b:dd:ba:93:38:3d:c6:96:24:17:e1:3f:88:83:
                    02:a4:dc:11:f2:e0:07:d1:c1:0e:ba:91:be:ce:ce:
                    80:79:82:2a:2d:55:69:e2:82:68:2c:8f:3b:6d:09:
                    41:6e:96:21:e4:c9:3d:9f:6d:33:e6:88:71:13:fa:
                    30:ef:29:97:99:d7:af:28:6b:2e:bd:f9:b2:07:07:
                    ab:cc:37:84:42:5c:9b:b1:c0:0d:80:e3:e6:26:20:
                    c3:fb:06:c6:0a:38:41:85:68:d8:66:03:d8:81:ef:
                    68:01:1e:42:b1:89:fa:eb:ab:22:bf:72:d7:71:3e:
                    52:df:24:41:fe:9a:7a:3b:4f:98:ec:95:cc:68:69:
                    5f:4e:fd:a8:7c:b4:5d:59:67:15:48:1d:9a:00:b8:
                    48:a4:4a:ae:58:4d:8c:4e:1f:67:77:67:50:bd:cd:
                    08:03:72:10:25:54:d4:b3:23:70:65:60:cf:d9:ff:
                    22:fa:a0:8d:6b:a6:3e:71:d1:2f:dc:86:1b:c7:2e:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:71:31:F3:17:98:DA:FA:D2:AA:8F:87:8B:18:94:0B:94:5B:80
            X509v3 Authority Key Identifier:
                keyid:37:0E:68:AA:D5:F5:C9:33:82:6E:A8:F4:FE:7D:2A:48:01:8F:D0:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36a6485e1a54ec808a146215bd1372815d55a3ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/8711b837ebc0a1aecd86fd1e9bb0a5369a6cabdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d1f980e-a277-4fea-ab81-a6f8772f8344/36a6485e1a54ec808a146215bd1372815d55a3ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:80:fe:87:50:af:94:94:32:af:ad:42:59:96:18:77:df:
         9e:3a:9c:ef:36:c9:c7:a4:ac:8b:62:39:6b:6a:46:e2:16:21:
         b4:0c:df:b2:64:be:be:a1:65:e8:3c:21:67:84:eb:00:cf:ff:
         90:f4:f1:b5:79:88:43:f3:f7:e5:ad:21:2d:2e:bf:3f:5b:46:
         35:3e:d3:f4:59:da:91:04:01:4f:0c:30:7b:e3:2f:36:15:3f:
         37:54:67:7b:e6:78:1a:cb:f1:eb:c9:c9:04:76:cf:23:66:47:
         97:3a:9f:ad:37:39:90:f7:b3:69:2b:61:0a:5a:20:48:0b:4f:
         9f:e1:e2:c3:80:7d:2a:db:46:2d:ab:47:63:ea:b9:db:e4:59:
         86:2e:e5:9e:c0:8a:b8:1f:3d:42:db:32:34:10:ed:72:5c:5d:
         b7:4b:02:0a:eb:06:47:b6:29:d0:f4:fd:f9:80:09:14:15:f5:
         8d:2a:17:9d:c0:cc:31:32:04:fa:d1:72:4d:3d:0b:20:1a:44:
         81:6c:3f:fc:f7:9b:a7:d1:4f:bd:a0:95:b9:9e:ab:fe:90:3c:
         44:b2:c6:41:51:cd:6b:16:3e:a5:75:f1:86:d9:26:68:49:0f:
         4a:00:ae:64:0d:37:6e:46:30:37:b1:38:2d:d8:75:86:60:9f:
         1a:12:30:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----