Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/5b968f1b8010bd1a11337f2b47893242cc3c8e8d.roa
File:                     5b968f1b8010bd1a11337f2b47893242cc3c8e8d.roa (raw, json)
Hash identifier:          MGcMZam0HKdw7mTG8cRurv/uX5yVN75um4EOm279oEY=
Subject key identifier:   EF:59:F1:B2:6F:47:F4:A8:2D:33:90:88:D3:B1:C0:4A:95:A2:75:6A
Certificate issuer:       /CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
Certificate serial:       27020D
Authority key identifier: 58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/5b968f1b8010bd1a11337f2b47893242cc3c8e8d.roa
Signing time:             Thu 15 Feb 2024 16:20:29 +0000
ROA not before:           Thu 15 Feb 2024 16:20:29 +0000
ROA not after:            Sun 15 Feb 2026 16:20:29 +0000
asID:                     266786
IP address blocks:        2803:120::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556429 (0x27020d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdb97cf62e833130f9a26635a4dd549cfb148ee
        Validity
            Not Before: Feb 15 16:20:29 2024 GMT
            Not After : Feb 15 16:20:29 2026 GMT
        Subject: CN=5b968f1b8010bd1a11337f2b47893242cc3c8e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:8c:05:78:37:aa:75:34:b2:70:16:aa:32:
                    ae:f2:15:e3:43:7e:1b:61:0e:5b:5d:b1:c1:55:65:
                    a0:6d:c7:6d:46:4a:9d:a1:1f:3c:c8:c7:2c:89:83:
                    ce:19:c1:42:19:43:83:ad:4a:ad:81:5d:4c:0f:47:
                    25:d7:7a:5b:c1:75:00:e5:af:75:eb:46:ef:31:29:
                    4d:0c:5e:1d:0d:ac:14:7c:37:0c:37:21:9a:f9:e0:
                    a5:3d:b0:de:93:c6:8c:31:a6:e0:8b:a4:65:07:cc:
                    d3:fe:6b:cc:93:24:fc:bd:b8:b0:d6:c9:2e:8c:1e:
                    42:39:cc:8e:f4:2d:19:e3:73:d4:23:e7:25:69:8d:
                    fe:85:ae:a9:3f:88:a0:99:c2:6d:87:80:d1:3c:78:
                    d9:f3:0c:45:17:b5:c5:22:82:01:0d:4f:c6:5b:e5:
                    3f:1e:de:ec:5e:4b:54:80:8e:ca:9a:ff:d9:14:40:
                    9c:65:57:e6:99:bc:4f:42:65:2b:ee:69:a1:eb:7e:
                    e2:a3:4d:1c:83:44:f5:70:96:55:93:b7:2d:b5:47:
                    61:81:de:c8:e7:69:c6:0c:97:58:8a:a5:dd:fb:c0:
                    9d:41:d4:3f:55:df:11:d5:f2:c0:10:22:f2:70:47:
                    62:1f:f7:55:e7:30:86:3e:7d:f6:8d:93:f8:82:75:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:F1:B2:6F:47:F4:A8:2D:33:90:88:D3:B1:C0:4A:95:A2:75:6A
            X509v3 Authority Key Identifier:
                keyid:58:B3:52:F4:7C:1F:FE:E8:12:53:83:B4:E5:57:57:D4:7A:79:62:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccdb97cf62e833130f9a26635a4dd549cfb148ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/5b968f1b8010bd1a11337f2b47893242cc3c8e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d0fcbc-f487-4087-95de-8cfc847bc9ad/ccdb97cf62e833130f9a26635a4dd549cfb148ee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:120::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:c0:45:f8:aa:a7:f2:07:aa:e1:b0:9f:e2:86:b8:87:c6:
         33:8e:9f:6f:32:b4:49:2b:e7:42:11:2f:ec:f0:e9:4b:54:dc:
         80:65:48:9b:de:e4:dd:d2:4c:eb:0d:8c:30:30:0a:9f:d6:70:
         c6:79:e9:37:a6:9c:b5:30:f5:fe:4e:40:af:15:43:88:72:8d:
         70:79:81:70:61:d2:e6:7e:25:57:85:90:e1:86:e6:3f:1f:8d:
         aa:83:9c:c5:b9:ea:8a:75:70:5a:7b:db:2e:9c:91:f5:c8:d3:
         f7:d8:b5:18:09:5a:06:eb:71:64:fe:64:bc:46:08:71:18:51:
         39:55:d9:80:0d:a2:53:56:e5:92:7d:48:4f:0b:ca:c8:ce:aa:
         d5:d7:46:dc:ad:06:69:54:22:e4:9b:69:73:64:82:7e:2c:20:
         95:ec:ba:59:18:20:38:a6:e1:d0:01:3b:f6:ff:b3:92:2e:3a:
         f0:72:4b:0b:35:85:c4:3f:b7:3e:68:fc:0a:34:99:28:fc:2d:
         72:90:fb:96:0f:45:42:4c:5e:cc:3c:72:25:4b:bb:2e:9c:77:
         c4:f0:7e:17:a9:bd:4d:e8:46:08:c0:56:ae:ae:32:1d:f2:28:
         5c:b3:27:b2:95:05:01:3b:1e:90:1b:42:12:4c:34:1b:70:da:
         96:b7:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----