Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8b4c1d0f1d98ce37710b61311a892a5d277f3245.roa
File:                     8b4c1d0f1d98ce37710b61311a892a5d277f3245.roa (raw, json)
Hash identifier:          eRBnkKVVC7FmIoglMp44dVHRXOrhdn+7IcQOg37F2XA=
Subject key identifier:   EB:70:79:90:88:DF:A4:A0:4A:48:2F:E9:2A:8C:AA:E4:59:76:0D:70
Certificate issuer:       /CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Certificate serial:       049BBA
Authority key identifier: 5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8b4c1d0f1d98ce37710b61311a892a5d277f3245.roa
Signing time:             Wed 16 Aug 2023 22:50:46 +0000
ROA not before:           Tue 15 Aug 2023 22:50:46 +0000
ROA not after:            Sat 16 Aug 2025 22:50:46 +0000
asID:                     22411
IP address blocks:        2803:c200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302010 (0x49bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
        Validity
            Not Before: Aug 15 22:50:46 2023 GMT
            Not After : Aug 16 22:50:46 2025 GMT
        Subject: CN=8b4c1d0f1d98ce37710b61311a892a5d277f3245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:68:28:1e:1a:6a:cc:15:5e:72:96:b6:b6:
                    a7:96:89:43:95:6e:43:f5:6e:85:29:44:03:de:50:
                    52:06:e8:c8:7f:91:5a:f3:db:94:b8:79:3b:d1:32:
                    93:80:d0:6b:07:8a:e6:61:fd:0f:76:63:9a:9f:24:
                    b4:3e:46:0b:ee:c0:3f:90:50:cb:8f:15:18:62:f2:
                    f5:f2:18:e9:63:e1:3d:13:14:34:f7:9a:c7:1c:a2:
                    62:b8:49:4c:89:d9:95:79:7e:b1:02:c8:d1:7d:b8:
                    f0:90:8a:fe:eb:5b:1f:5e:ed:44:83:97:c7:f2:25:
                    fb:6d:b1:15:c5:f9:42:95:eb:26:c6:61:b6:0f:da:
                    32:95:fb:d4:3c:c1:36:a9:6a:c4:5a:a6:0f:18:a9:
                    d4:86:79:43:4f:df:01:b2:1b:f4:ea:d0:ee:41:c7:
                    12:d8:f6:dc:53:97:ca:aa:ec:fe:84:58:5b:72:24:
                    62:cc:78:14:ba:24:55:f4:f1:3b:29:30:91:88:e1:
                    36:24:dc:e8:37:5b:47:68:f0:c2:96:55:81:d9:60:
                    a5:da:40:6e:45:54:eb:ea:1c:05:92:b5:67:06:20:
                    ad:d2:ba:e9:2a:bc:87:6e:f3:64:83:8b:19:39:24:
                    43:ec:93:f0:fe:37:be:06:0d:19:33:21:29:03:27:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:79:90:88:DF:A4:A0:4A:48:2F:E9:2A:8C:AA:E4:59:76:0D:70
            X509v3 Authority Key Identifier:
                keyid:5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8b4c1d0f1d98ce37710b61311a892a5d277f3245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:f4:d1:af:8a:7c:e4:71:24:63:55:9d:49:d3:e7:c2:3e:
         cd:82:81:59:4b:32:da:38:fb:65:88:ab:06:6c:8a:94:a1:d3:
         55:c8:e9:93:8e:e5:9a:e6:80:60:21:3a:20:eb:c5:76:cf:6d:
         23:2c:bd:49:84:3a:2a:b1:cc:8a:f0:d8:12:50:2b:22:17:b3:
         82:10:10:6c:0c:f8:5c:11:a8:ec:3e:86:bd:61:2c:56:32:58:
         8a:11:1b:5a:43:92:3f:b5:01:22:99:f3:75:ef:8a:4c:1b:b6:
         f3:0a:2d:86:a1:65:8b:bf:69:31:71:7f:78:86:a8:c3:61:b5:
         0a:6c:dc:ec:b1:07:5a:5a:68:3a:28:e9:22:bb:0a:16:03:3d:
         be:d5:53:3f:80:35:e8:f3:53:3f:79:1b:5b:91:9f:76:7a:ea:
         9a:21:85:a8:c7:a6:a3:aa:12:7c:90:20:e0:f1:7d:93:c4:90:
         b8:b3:e2:f0:f0:d4:dc:bb:de:21:72:8f:d4:0f:5d:f3:57:bc:
         ba:56:d6:f8:16:4a:e1:ec:9b:ab:1e:1f:18:fe:0f:2a:b4:91:
         f3:1d:df:67:48:e2:6d:a4:df:76:ec:5d:1a:70:e5:bc:b7:da:
         a4:4e:5b:ba:da:95:ee:b9:91:bc:f7:69:74:48:77:bd:b3:09:
         53:90:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----