Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/417d3984cdc57ef21f7a4c8c3088562ee137a997.roa
File:                     417d3984cdc57ef21f7a4c8c3088562ee137a997.roa (raw, json)
Hash identifier:          Q5hARgdUsn/Ec+h4laV03cXe0WnZ1taHuxJzqT6XE5c=
Subject key identifier:   C5:0B:07:14:9E:CA:EB:13:F7:13:30:CA:D2:EE:82:FE:EF:92:ED:40
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       1D774D
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/417d3984cdc57ef21f7a4c8c3088562ee137a997.roa
Signing time:             Tue 10 Jan 2023 20:30:57 +0000
ROA not before:           Tue 23 Mar 2021 14:42:24 +0000
ROA not after:            Tue 24 Mar 2026 14:42:24 +0000
asID:                     264773
IP address blocks:        2803:f0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931085 (0x1d774d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Mar 23 14:42:24 2021 GMT
            Not After : Mar 24 14:42:24 2026 GMT
        Subject: CN=417d3984cdc57ef21f7a4c8c3088562ee137a997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:5f:46:ae:4f:13:15:f8:91:64:4c:5c:b0:
                    bb:0a:d7:b5:43:0c:9c:71:c4:4c:3b:b5:0e:6b:4c:
                    65:dc:b6:ec:e0:90:d7:8d:6d:dd:23:f0:30:6e:42:
                    b0:5c:0f:07:83:41:ce:2c:e3:ff:27:c9:15:4c:f0:
                    07:a2:c4:f0:27:e1:1d:fe:56:34:22:9b:9d:f0:88:
                    26:5b:6c:f2:ac:fb:b9:e1:2f:f0:3c:03:c6:86:eb:
                    c6:73:90:ed:50:63:5d:32:9c:f6:7e:40:a2:08:04:
                    98:96:78:d0:67:d1:90:c9:33:8e:2b:7e:89:9d:8d:
                    66:f3:d4:bd:87:62:79:cf:18:61:bf:ec:b4:92:54:
                    93:1b:61:d9:8f:60:2e:66:f4:69:c2:89:bc:38:c0:
                    9e:cd:75:87:8e:32:26:2d:6e:b5:31:03:a2:6a:75:
                    35:28:07:7c:1c:47:77:b9:7e:6d:08:4c:bc:67:22:
                    59:ee:09:aa:0d:33:11:26:49:9c:20:3a:e5:69:8e:
                    12:3e:1d:c7:4f:f0:fb:1d:d0:4b:38:98:04:a6:f6:
                    9e:fd:a6:47:c4:ec:d1:26:80:38:ae:2a:14:78:66:
                    f6:07:6f:46:b2:2c:8f:4f:14:12:c4:10:f3:1b:73:
                    7e:56:4f:3f:a8:69:7d:e8:74:a1:61:7a:7d:26:e5:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0B:07:14:9E:CA:EB:13:F7:13:30:CA:D2:EE:82:FE:EF:92:ED:40
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/417d3984cdc57ef21f7a4c8c3088562ee137a997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:39:03:79:d9:77:df:64:15:90:14:c5:cd:b8:1e:d9:c0:86:
         18:9d:ce:8b:d8:40:27:b7:a1:22:05:0a:64:da:bb:a9:be:e4:
         3b:7d:8c:88:49:c6:f3:b6:de:f7:d7:4b:54:79:d5:4a:7c:91:
         8a:98:b7:93:3f:53:96:40:c9:27:4a:ef:47:59:a5:e7:ae:80:
         fe:66:1c:37:84:ee:02:7d:9d:12:6f:f8:9c:66:7f:d6:c7:a1:
         14:5f:ef:f8:2f:07:3e:c5:79:4e:af:bd:c6:a2:4d:40:73:b5:
         dd:68:cd:72:75:7d:5b:26:74:6a:88:12:69:d1:a3:10:5d:db:
         a3:76:e0:e3:03:0a:c5:aa:4e:61:05:d9:c0:92:af:80:8b:ae:
         26:97:8f:95:15:be:d3:a4:ab:da:68:56:db:b0:9b:a1:eb:f0:
         1e:4d:92:a2:87:8f:5c:53:f4:ff:2f:59:91:7f:95:1b:6b:ae:
         7b:d6:46:29:a1:e7:49:81:c9:55:c7:3b:42:da:21:c3:40:32:
         a0:cb:e9:db:34:5c:60:b7:7c:20:44:3f:5e:71:60:a2:b5:8c:
         0e:81:cd:fd:cc:21:dd:e9:2b:2b:6b:57:e3:ef:57:e3:19:39:
         1e:3b:68:f9:37:b6:c9:d7:0b:7a:85:f0:44:a7:91:74:6b:e5:
         56:80:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----