Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/0c4ce2b00e701081cdb1ea48682fe6a913be73b0.roa
File:                     0c4ce2b00e701081cdb1ea48682fe6a913be73b0.roa (raw, json)
Hash identifier:          7BYuxdE9kaP6vDi2ZC2YTiorZeY/Yn4t0qEc8CBEpBk=
Subject key identifier:   A4:33:B0:21:7B:4D:E0:5F:DC:DD:45:67:39:8C:E1:43:19:A5:3E:73
Certificate issuer:       /CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
Certificate serial:       13A761
Authority key identifier: A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/0c4ce2b00e701081cdb1ea48682fe6a913be73b0.roa
Signing time:             Sun 24 Dec 2023 17:53:59 +0000
ROA not before:           Sun 24 Dec 2023 17:53:59 +0000
ROA not after:            Wed 24 Dec 2025 17:53:59 +0000
asID:                     14080
IP address blocks:        2801:11:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288033 (0x13a761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
        Validity
            Not Before: Dec 24 17:53:59 2023 GMT
            Not After : Dec 24 17:53:59 2025 GMT
        Subject: CN=0c4ce2b00e701081cdb1ea48682fe6a913be73b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:07:dc:0e:5b:3c:18:49:46:66:d8:31:b3:
                    85:16:c5:e1:bd:92:fe:62:60:32:2a:63:c3:03:14:
                    e1:cf:72:40:08:fe:5e:8d:d6:41:26:05:4b:3f:94:
                    b2:f1:ba:d5:e6:87:c3:8b:8d:f9:9f:e9:aa:0a:ce:
                    ef:5c:bb:68:51:3c:b6:50:11:53:36:ec:0e:60:e2:
                    29:07:77:8d:8f:93:21:0d:48:1d:5e:39:5e:5e:76:
                    8f:2d:ba:4f:2f:75:11:46:8a:21:3d:af:b8:43:ee:
                    cd:f7:39:ed:fd:19:2b:98:69:80:51:de:93:08:b2:
                    22:cf:f0:f9:d4:21:2d:1e:a6:7d:27:55:08:df:af:
                    32:34:cd:d4:4d:7d:92:59:65:ae:dc:2e:3c:48:62:
                    fe:59:60:5e:17:72:b2:22:5a:2d:c4:ef:7d:b1:24:
                    c8:d5:62:ad:6a:58:3a:dc:b6:37:51:24:08:e0:32:
                    44:58:d3:aa:cb:51:24:f9:b9:2a:9a:48:c1:1f:e1:
                    8a:d3:f2:ea:a4:96:79:b1:b4:84:8d:76:53:b2:17:
                    e8:3d:54:51:33:d8:30:76:56:d2:4e:d1:49:f2:d2:
                    8f:e8:ff:47:06:56:a3:fc:78:de:30:36:01:78:ac:
                    a4:ac:ef:96:8d:eb:42:94:dd:aa:2e:66:03:95:1f:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:B0:21:7B:4D:E0:5F:DC:DD:45:67:39:8C:E1:43:19:A5:3E:73
            X509v3 Authority Key Identifier:
                keyid:A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/0c4ce2b00e701081cdb1ea48682fe6a913be73b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/2841b92f480790c95087b23abaa6ab50dfc95e5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:82:e8:89:bc:24:62:91:9e:df:2c:4d:d7:b7:b1:0e:a5:a8:
         b7:f7:d0:91:2b:e3:c7:7b:a6:3a:1f:1b:77:b6:96:6d:f8:1e:
         20:54:b7:5f:76:3c:d4:f5:d8:7d:42:dc:ea:62:7a:11:7c:61:
         4b:90:39:dd:41:52:a9:4a:05:cf:a6:4f:9b:77:3d:b8:7a:e7:
         cc:2c:b4:d8:d1:66:23:15:4a:f5:43:df:5c:51:3c:a9:21:d6:
         0c:c8:41:43:e7:2e:06:96:5d:f1:81:cd:44:41:cd:1b:51:dd:
         3e:58:2e:8d:c6:fc:6a:36:44:4d:8e:38:91:be:28:db:3a:5c:
         84:3b:c2:fa:95:16:d5:45:bb:ed:b5:0a:26:f7:51:8a:4c:b2:
         ec:d3:df:59:2a:72:68:fe:99:e3:b9:6a:b9:01:eb:98:2c:47:
         23:cc:e8:8f:c6:0d:a5:ec:ab:26:93:19:9f:a2:3b:5b:95:38:
         57:ee:45:f3:3c:8d:43:51:d1:e3:27:d0:ed:0a:91:80:fe:81:
         f0:ef:63:16:73:f6:42:74:c4:92:ee:b3:82:74:eb:9d:7f:12:
         ac:60:12:88:bf:e3:9d:48:91:0f:bf:73:77:c6:d5:30:c5:cd:
         cb:01:4e:b9:0c:ad:8e:4b:d6:3f:27:a1:41:6a:a6:59:ef:44:
         82:18:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----