Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/276378e5abe7ad0e5ac59451c23ea6909e39d270.roa
File:                     276378e5abe7ad0e5ac59451c23ea6909e39d270.roa (raw, json)
Hash identifier:          x6XNjCL/t1cpnj5JxDPt+F6ynHa4U0SuXuHrbsGmG9s=
Subject key identifier:   24:E9:76:B7:23:4C:10:1C:1E:BF:B4:D2:8E:C4:D0:72:26:0E:42:C5
Certificate issuer:       /CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
Certificate serial:       217F65
Authority key identifier: 9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/276378e5abe7ad0e5ac59451c23ea6909e39d270.roa
Signing time:             Tue 27 Jun 2023 23:15:53 +0000
ROA not before:           Mon 26 Jun 2023 23:15:53 +0000
ROA not after:            Fri 27 Jun 2025 23:15:53 +0000
asID:                     28007
IP address blocks:        2803:780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195301 (0x217f65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba2f644c32a04220d0345745022ddbc3a8a05a
        Validity
            Not Before: Jun 26 23:15:53 2023 GMT
            Not After : Jun 27 23:15:53 2025 GMT
        Subject: CN=276378e5abe7ad0e5ac59451c23ea6909e39d270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:e4:f9:6a:51:a9:81:ea:04:64:4c:97:69:
                    d0:34:8e:e4:51:02:e1:7b:a5:2e:8c:ee:28:15:06:
                    e7:c4:2e:f7:63:b0:74:c9:68:1d:51:5b:d1:0c:1e:
                    76:a2:d9:b1:c8:05:24:b5:22:5f:37:91:1f:95:e0:
                    50:f7:34:40:da:b4:c4:35:53:55:0f:21:d9:b8:49:
                    0f:28:93:ba:35:0d:05:9d:43:37:a0:35:4a:ac:95:
                    1f:df:76:bb:9c:7c:0d:f2:8c:fa:f3:07:c3:da:e6:
                    8a:c6:86:43:95:3c:bc:63:b7:79:23:c5:6e:c4:f2:
                    47:ca:e1:0e:50:39:de:27:73:20:99:eb:73:cd:e8:
                    ac:9a:3d:35:ab:fc:c5:32:90:de:43:1b:9c:11:42:
                    f3:17:d9:f2:54:f2:28:41:41:10:10:5a:1e:ed:3d:
                    1d:30:76:bb:0b:2f:5d:33:9d:7e:52:34:99:78:5b:
                    aa:50:ca:aa:89:34:eb:96:01:24:89:08:83:01:1f:
                    0d:a8:21:b2:7f:4b:dd:41:f4:08:34:43:dd:86:b0:
                    67:cd:5e:4d:ff:b4:15:39:8f:2a:60:41:18:a7:10:
                    5a:ba:82:3b:72:b9:d0:bb:2d:a9:10:e8:83:fc:16:
                    b9:53:34:b9:89:2e:c0:21:33:7a:6e:4c:37:0c:23:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:76:B7:23:4C:10:1C:1E:BF:B4:D2:8E:C4:D0:72:26:0E:42:C5
            X509v3 Authority Key Identifier:
                keyid:9D:76:4E:19:9C:DE:89:A1:12:E2:95:76:1B:05:6B:AE:9B:79:D3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfba2f644c32a04220d0345745022ddbc3a8a05a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/276378e5abe7ad0e5ac59451c23ea6909e39d270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5cc51dc8-ddeb-4374-a4aa-358bb2f1649a/cfba2f644c32a04220d0345745022ddbc3a8a05a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:52:93:02:47:0e:81:3a:28:4a:93:c7:7e:8b:af:e8:a6:73:
         7c:e5:df:91:57:3f:3b:06:02:23:12:8c:98:29:ca:52:ff:b0:
         8c:db:f0:1e:ea:d7:5a:f9:2c:18:a1:d4:83:2d:72:6b:fd:cf:
         50:0c:a4:f0:a5:a0:66:8e:a9:aa:fe:b3:57:46:03:ad:1f:5f:
         66:36:b8:4f:42:3a:c0:8f:5d:a8:97:06:c3:bd:ff:e7:2c:f7:
         f7:8f:f3:77:16:d2:94:a3:08:4c:90:c4:13:da:89:86:ab:6a:
         a4:a5:10:11:93:ff:84:2c:6b:11:76:f1:81:da:0a:f0:89:ad:
         c2:1f:8c:62:64:00:64:c7:6a:04:30:d4:1b:f9:25:fb:0b:37:
         ed:b9:ed:13:20:77:ae:3d:27:34:1b:20:3a:b1:5c:e6:a2:4f:
         ec:dc:1d:45:f2:51:86:a5:71:30:62:e7:f2:5f:b7:10:e0:0f:
         df:5e:4c:4a:99:1d:9c:07:a4:46:7d:14:60:81:3f:60:67:fb:
         28:e5:e2:0c:0d:33:a6:0c:04:82:e5:93:fd:06:67:00:3b:f2:
         5e:12:24:22:3d:d2:50:00:5e:cb:d2:56:83:11:dd:ec:88:d1:
         2b:3d:4e:c2:b5:1d:9e:bc:be:6b:4d:4a:29:6d:20:c3:91:50:
         93:9d:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----