Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/700468fb18595dfa12b800344d7009f8e7c5d08a.roa
File:                     700468fb18595dfa12b800344d7009f8e7c5d08a.roa (raw, json)
Hash identifier:          z+TCOqh9PytXbDVthP0B91efQLRfYJrDiTFI1M0ujW0=
Subject key identifier:   2D:86:BF:1F:BE:CE:CD:4F:AC:5A:C0:C0:DA:3A:A2:A0:A7:85:1E:77
Certificate issuer:       /CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
Certificate serial:       0BA1EB
Authority key identifier: 52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/700468fb18595dfa12b800344d7009f8e7c5d08a.roa
Signing time:             Mon 08 May 2023 17:15:53 +0000
ROA not before:           Sun 07 May 2023 17:15:53 +0000
ROA not after:            Thu 08 May 2025 17:15:53 +0000
asID:                     265605
IP address blocks:        2806:361::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762347 (0xba1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
        Validity
            Not Before: May  7 17:15:53 2023 GMT
            Not After : May  8 17:15:53 2025 GMT
        Subject: CN=700468fb18595dfa12b800344d7009f8e7c5d08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:4f:07:6d:7d:17:67:e6:ef:f5:8c:de:ff:
                    93:62:1d:33:c6:e7:88:4f:cb:dd:59:c1:fc:ea:10:
                    73:9c:71:d8:48:9b:d0:6d:03:f1:d2:12:bb:d1:87:
                    64:17:3d:89:f5:e5:20:96:da:fc:6b:99:6c:9b:e3:
                    c1:14:0a:ba:87:86:30:a8:29:e8:ac:84:0b:47:86:
                    73:1b:f1:1a:a0:8a:90:20:8a:5e:b3:54:02:f4:4d:
                    1e:8e:e6:34:9d:f1:ad:87:64:c5:1d:25:a4:43:88:
                    0b:cb:53:7b:fd:0d:1c:4f:e3:fe:7c:df:d2:43:05:
                    74:51:c2:72:76:dc:f9:0c:a1:6e:0b:0c:20:0b:e1:
                    53:ee:46:5f:d4:32:e2:98:ad:08:3a:73:d7:52:1b:
                    6f:49:b6:03:c6:4a:6e:e5:f4:8b:b5:0f:ac:85:c4:
                    bb:b9:de:9d:2d:4f:e6:8a:59:f9:2b:f4:3f:e1:24:
                    7c:53:49:53:85:37:5e:0f:72:1a:23:78:f0:44:73:
                    e9:b0:d6:15:8f:19:80:ea:6b:15:d0:12:bd:4b:a8:
                    35:30:a4:16:7d:d8:1a:d5:e6:7c:8d:b2:9e:bf:24:
                    fe:34:62:ff:54:37:7f:e1:35:47:93:34:19:dc:b6:
                    3a:c4:a4:37:c1:f9:9c:4e:b1:e5:70:a4:f1:44:32:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:BF:1F:BE:CE:CD:4F:AC:5A:C0:C0:DA:3A:A2:A0:A7:85:1E:77
            X509v3 Authority Key Identifier:
                keyid:52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/700468fb18595dfa12b800344d7009f8e7c5d08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/6ab2d820979a406ed3e6351e0a821ee6b903737f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:93:55:67:39:88:cd:fb:7b:58:a4:62:03:71:38:49:9f:4c:
         4e:56:c5:6e:ff:6a:64:48:a2:77:4b:fe:06:6a:7a:63:8f:87:
         6d:c5:28:1f:aa:4b:42:ec:5d:ce:1d:1b:b3:31:4b:23:d4:83:
         23:1e:54:72:25:29:ab:fa:e0:c7:67:e2:df:f7:eb:97:48:2e:
         55:97:66:3f:4d:6d:14:2c:f7:f9:bf:8b:42:20:b0:2b:e4:5e:
         c5:ef:84:7b:dc:52:2f:0a:c5:a7:57:61:d3:67:0f:b7:2d:0e:
         f0:c2:b6:4b:ab:bc:4e:f3:4d:db:7b:db:10:a5:69:e7:a0:21:
         5a:83:a2:a6:6c:1c:c8:63:85:8c:79:ab:b8:d7:12:bc:82:79:
         2d:3a:bb:d9:33:c5:13:c7:e1:18:df:18:c9:17:5e:33:cd:63:
         58:40:54:0d:4e:88:c5:c1:5c:13:9b:83:6e:b9:6e:60:c3:a1:
         0e:6e:e1:a3:0e:8e:2b:ad:93:d4:76:6c:a6:47:0b:16:f6:7e:
         12:a0:66:27:48:43:c0:a6:67:48:9c:2e:a3:46:46:bb:79:57:
         b0:a8:bd:a0:3f:73:ae:11:6b:25:de:f3:65:95:16:50:c0:75:
         05:b1:e0:eb:06:b4:cc:d3:5a:65:c1:de:70:78:61:50:90:eb:
         b5:38:74:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----