Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/92ddfea3213378c6fccaae4c31ce2207604aba93.roa
File:                     92ddfea3213378c6fccaae4c31ce2207604aba93.roa (raw, json)
Hash identifier:          Uvmc7Q7m9niPiTxH0qJYAso7uTvD0i1G3NugdB+DuPw=
Subject key identifier:   04:FE:1C:68:AC:A0:D4:9E:BB:2C:9E:0A:07:03:7F:5A:4F:86:8F:D0
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       220E94
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/92ddfea3213378c6fccaae4c31ce2207604aba93.roa
Signing time:             Fri 05 Apr 2024 17:39:55 +0000
ROA not before:           Fri 05 Apr 2024 17:39:54 +0000
ROA not after:            Sun 05 Apr 2026 17:39:54 +0000
asID:                     273084
IP address blocks:        2803:b0e0:99c9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231956 (0x220e94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Apr  5 17:39:54 2024 GMT
            Not After : Apr  5 17:39:54 2026 GMT
        Subject: CN=92ddfea3213378c6fccaae4c31ce2207604aba93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:69:7a:71:86:02:22:2b:b1:93:59:b7:9f:
                    d1:ea:3f:9d:6b:10:ba:4c:88:57:32:4f:68:da:e3:
                    ed:fa:a8:b1:fb:54:c1:3e:bd:19:d7:0c:cc:6b:2b:
                    6c:bf:37:bd:ae:70:dd:f3:1e:bd:bb:d6:ae:0d:db:
                    20:86:2a:61:e1:25:d2:b4:8c:c2:8d:59:3a:17:bc:
                    8f:d4:19:da:da:a7:19:fa:e0:c4:6d:12:76:fd:14:
                    5f:91:f9:f7:4f:21:6f:b7:a1:cd:e0:ad:af:49:b7:
                    7e:66:17:49:b0:57:26:30:61:5b:d2:5a:e8:0e:78:
                    fb:c1:eb:38:df:d3:42:d2:18:15:b0:eb:41:21:0b:
                    e6:7e:12:09:5b:e3:e4:a3:ff:78:9d:84:32:da:04:
                    6c:42:d4:a6:77:15:30:22:37:a9:1f:f1:d6:22:c3:
                    fb:4f:44:ab:45:7e:6a:8e:22:f5:76:07:7d:2e:bb:
                    f0:f7:25:e6:f5:be:32:e8:f2:fc:43:09:64:35:5c:
                    76:b7:46:63:36:d8:68:64:44:23:53:b6:fe:4f:d6:
                    09:61:8c:90:36:83:49:45:6b:e5:19:69:04:1f:a0:
                    57:15:be:46:9f:99:2c:76:1f:27:3b:99:d1:bc:69:
                    fd:d2:15:71:d0:d6:84:18:d2:44:9a:25:a9:7b:31:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:1C:68:AC:A0:D4:9E:BB:2C:9E:0A:07:03:7F:5A:4F:86:8F:D0
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/92ddfea3213378c6fccaae4c31ce2207604aba93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:99c9::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:0e:3b:6c:91:00:07:72:d7:1d:13:aa:5c:77:f4:cb:f7:
         d6:a6:e8:ea:18:5a:cd:ac:3a:1d:22:ea:00:df:58:39:06:6b:
         10:76:59:2b:b6:d8:79:af:b8:14:a1:e9:dd:36:5d:20:3c:6c:
         4e:44:e1:c4:e8:cd:0f:d3:80:62:1d:7f:35:7b:8b:85:33:4a:
         dc:01:0e:fa:52:c2:75:c8:e7:bf:e3:92:7f:16:4c:b3:ee:92:
         13:fa:da:4a:30:3a:a4:ed:cf:88:e2:01:c3:5a:21:da:29:e9:
         36:f1:99:9c:52:a4:56:0f:26:5e:38:63:26:a0:ef:18:63:29:
         72:cc:a7:95:1c:dd:49:04:68:1d:e5:36:d3:fe:6e:5a:81:84:
         5f:8d:0a:b6:64:a8:2c:ec:39:0e:00:c7:c5:46:88:45:b8:7e:
         f3:42:05:dd:1e:9f:d3:d0:48:71:8a:a8:1a:99:16:ac:e3:ae:
         0c:b9:16:8c:c9:0c:97:c4:58:a9:b0:66:0b:6e:61:5b:32:cb:
         34:5b:b1:6b:7c:60:67:1e:65:47:d3:59:be:11:45:7a:31:da:
         f9:9b:5d:ce:5f:a2:30:9e:3e:d8:9c:09:e4:9c:aa:93:1c:48:
         35:14:5f:d5:75:df:b6:fd:11:90:71:17:d9:35:f9:ae:d4:b5:
         30:c7:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----