Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/901a717255e172aa00261f100e3acfb90212ede1.roa
File:                     901a717255e172aa00261f100e3acfb90212ede1.roa (raw, json)
Hash identifier:          gB7WM90auUHgN/zNcgFRrRmWfzLCKhM2XKvaMYA2ewA=
Subject key identifier:   53:BF:8F:BB:32:49:04:E3:69:A3:8E:1F:D4:98:45:EF:6A:B6:0F:50
Certificate issuer:       /CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Certificate serial:       205DF5
Authority key identifier: 83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/901a717255e172aa00261f100e3acfb90212ede1.roa
Signing time:             Wed 10 May 2023 14:38:31 +0000
ROA not before:           Tue 09 May 2023 14:38:31 +0000
ROA not after:            Sat 10 May 2025 14:38:31 +0000
asID:                     27940
IP address blocks:        2803:4b80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121205 (0x205df5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
        Validity
            Not Before: May  9 14:38:31 2023 GMT
            Not After : May 10 14:38:31 2025 GMT
        Subject: CN=901a717255e172aa00261f100e3acfb90212ede1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:31:46:ee:bf:74:e0:59:32:5b:ab:1e:9a:
                    78:84:84:fe:b2:fe:ad:32:7a:41:bd:6a:7f:a8:65:
                    45:87:32:e4:97:c8:07:a9:98:b3:d1:83:e0:cf:5c:
                    fa:54:d6:d7:a5:e0:6c:b6:7d:c0:23:59:bd:2c:b8:
                    5b:ef:b2:1b:b0:8a:21:16:45:fd:8a:a4:cd:83:19:
                    9e:95:7a:33:09:44:78:b2:97:0c:11:c4:bb:01:e9:
                    fb:a1:41:61:da:f2:eb:23:8b:d5:d9:94:0c:f2:3c:
                    21:2c:a3:f7:39:74:0f:b8:0c:b2:e2:d4:ad:f3:38:
                    90:d7:62:02:67:79:64:62:db:9c:c8:80:7a:5d:cf:
                    51:25:d9:cb:f7:21:88:e0:e2:8c:5e:0b:60:53:5c:
                    e0:1f:6f:01:95:b0:9d:e6:1f:5a:f9:34:68:06:a8:
                    f8:af:4b:7f:d3:30:b4:5a:f1:d9:b1:39:e2:8d:78:
                    bc:ff:83:6a:18:ed:54:88:41:b0:8f:f6:43:5c:85:
                    67:f5:7e:bc:b3:53:d1:0f:8c:10:51:81:34:12:94:
                    e8:2a:fb:4f:36:d1:35:d5:54:da:64:f8:8d:8f:b7:
                    24:e6:5a:8d:fd:04:3e:c8:dd:6a:77:65:13:d1:32:
                    47:a9:d5:8d:ee:b4:bb:4a:a8:32:a9:c5:b5:4f:24:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:8F:BB:32:49:04:E3:69:A3:8E:1F:D4:98:45:EF:6A:B6:0F:50
            X509v3 Authority Key Identifier:
                keyid:83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/901a717255e172aa00261f100e3acfb90212ede1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:b5:b2:35:88:e2:7c:9c:65:b3:8a:8d:cd:19:8d:02:18:
         f0:6d:5c:27:6a:2d:62:bd:14:ec:43:de:47:3e:7f:7a:dc:58:
         2e:96:0e:29:02:c9:13:4e:2e:8a:8f:e3:d1:8b:b1:85:40:09:
         ea:7d:c3:96:18:73:d8:35:1a:c0:23:14:ea:8d:9e:47:66:c9:
         a3:0a:83:f9:18:2c:8c:b1:f5:98:ca:ed:5e:04:d5:fc:64:89:
         48:27:45:f9:b0:b0:a6:18:5b:c3:e4:75:32:dc:cc:0c:04:36:
         aa:5f:9b:e0:33:84:e4:b4:22:3d:b9:0f:ed:60:63:45:60:a2:
         03:78:dc:31:2d:16:0c:f6:76:05:64:96:37:77:9c:b3:87:e9:
         d3:db:3c:4d:19:a0:1a:e5:8b:d4:93:e3:61:3c:a8:d0:28:57:
         10:ed:0e:28:4c:38:d5:34:16:09:5d:6b:d0:10:06:aa:f5:09:
         36:ef:f8:f8:91:55:28:9b:24:c5:09:9f:bc:22:4a:bf:16:0d:
         e5:dd:e6:53:93:44:7f:84:44:83:54:56:15:fa:30:37:0d:98:
         01:86:4f:8f:e6:10:fc:30:3d:e8:06:8a:4c:e7:f1:52:3d:a0:
         c6:ff:ee:e0:fc:ca:37:49:10:88:a5:9f:a1:22:c8:4f:75:bd:
         41:b0:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----