Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/79b65b3697fd497cea6372ced317c6c69dd1a882.roa
File:                     79b65b3697fd497cea6372ced317c6c69dd1a882.roa (raw, json)
Hash identifier:          dIJ/7XhWuofsc3vw3BKswSIxtNW39fyMejotbSugxd4=
Subject key identifier:   E2:DD:9F:5B:2D:01:A9:E9:31:2A:71:3C:43:D9:2F:6E:C9:AF:4A:17
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       11DF17
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/79b65b3697fd497cea6372ced317c6c69dd1a882.roa
Signing time:             Tue 07 Nov 2023 07:30:00 +0000
ROA not before:           Tue 07 Nov 2023 07:30:00 +0000
ROA not after:            Thu 06 Nov 2025 07:30:00 +0000
asID:                     265504
IP address blocks:        2806:21f::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171223 (0x11df17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  7 07:30:00 2023 GMT
            Not After : Nov  6 07:30:00 2025 GMT
        Subject: CN=79b65b3697fd497cea6372ced317c6c69dd1a882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:80:d3:fc:61:7a:8b:43:46:5f:20:23:e3:
                    5c:95:2f:f9:d9:e1:63:60:21:bd:20:86:a5:83:35:
                    b8:8a:24:ed:d2:d9:f6:bb:fa:9f:ae:15:49:a2:3a:
                    43:09:ae:4d:3e:40:34:86:7f:e7:7b:cf:34:2b:c0:
                    59:97:ab:99:41:ef:19:fc:60:24:2e:d7:16:56:6a:
                    03:15:d1:0a:b3:be:fc:e9:9b:c0:81:35:73:3b:7b:
                    9f:31:d3:9c:71:d5:5b:81:ba:71:e4:dc:a3:0a:e2:
                    54:dd:ee:e7:c5:a1:5e:17:b3:e8:21:66:15:3c:54:
                    cb:b0:39:28:00:ac:78:87:a7:91:56:93:5c:7d:09:
                    46:92:40:53:f8:82:c2:60:7b:06:6e:e3:65:2b:02:
                    43:c9:6b:be:76:af:95:9f:1d:ef:c6:c3:1f:c7:7c:
                    d8:30:30:a7:51:eb:a4:16:90:c0:d5:e1:36:0e:6b:
                    b3:19:37:26:bd:a7:63:cc:ac:46:4f:90:10:c5:3c:
                    73:06:5e:1e:9d:84:cb:ed:b5:35:e3:e0:59:15:60:
                    4d:98:c6:df:c5:52:28:15:40:ac:a8:34:60:2e:e7:
                    f9:ba:dd:4c:04:0d:00:60:a9:6a:9e:3f:9f:4b:97:
                    6c:2a:f6:fa:0a:46:af:54:b6:eb:83:09:33:bc:8d:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DD:9F:5B:2D:01:A9:E9:31:2A:71:3C:43:D9:2F:6E:C9:AF:4A:17
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/79b65b3697fd497cea6372ced317c6c69dd1a882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:21f::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:bc:f2:18:59:a6:5b:cc:b7:6c:83:cc:35:fc:3c:ad:e7:
         a9:ee:b2:3e:f7:e0:93:27:27:ba:75:f8:98:bd:e9:be:bb:d4:
         06:58:9b:94:df:78:db:9e:a8:5e:f4:cc:f7:9d:a6:4f:52:2d:
         24:6e:fb:2b:9c:d1:b0:b4:93:85:f5:2f:84:5a:40:a2:33:c5:
         5e:98:73:c2:ba:d2:47:e2:05:b9:61:ac:cf:0a:62:88:48:94:
         25:1e:5f:d9:4f:4f:cc:f4:34:16:d9:2e:c6:20:68:6a:9e:1d:
         41:95:9a:03:93:cd:0d:7c:b1:ae:b1:c9:43:61:dc:2b:26:a8:
         c4:03:31:f9:30:01:09:a0:b3:13:bf:0a:fe:30:e0:e2:0f:81:
         7b:53:e3:8d:4b:79:68:93:13:3b:b2:f6:38:31:e8:77:e4:d5:
         8b:9f:70:9f:2f:ab:83:81:51:5d:88:20:37:aa:3c:b8:7b:b6:
         2a:38:73:70:c9:87:d3:64:53:91:20:92:5d:4f:d2:be:2a:0b:
         f7:0d:5c:d0:09:c1:1d:2b:39:1d:d9:63:65:d8:11:31:a4:b5:
         84:b1:33:da:a7:9a:04:5c:91:3f:d6:12:33:33:5c:4f:5c:11:
         d5:24:a3:6c:04:72:f2:b6:2b:65:dd:1f:39:06:36:47:ea:13:
         44:0e:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----