Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/1cf60b3f6d9880257d16edeba328e24a333373e7.roa
File:                     1cf60b3f6d9880257d16edeba328e24a333373e7.roa (raw, json)
Hash identifier:          xhbJzA+Iix02K47otaSOBj1xEC8sKDf5q7a2b8Xxc3Q=
Subject key identifier:   A1:CA:6D:F6:2D:19:0D:2B:CD:59:67:F6:4B:9F:2D:6C:65:58:38:12
Certificate issuer:       /CN=7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4
Certificate serial:       D2EE
Authority key identifier: BF:CD:6D:19:40:1F:D1:D9:B8:E9:C7:45:A0:CD:D9:F2:8C:68:43:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/1cf60b3f6d9880257d16edeba328e24a333373e7.roa
Signing time:             Fri 03 Nov 2023 23:54:24 +0000
ROA not before:           Fri 03 Nov 2023 23:54:24 +0000
ROA not after:            Mon 03 Nov 2025 23:54:24 +0000
asID:                     273093
IP address blocks:        2803:2050::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53998 (0xd2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4
        Validity
            Not Before: Nov  3 23:54:24 2023 GMT
            Not After : Nov  3 23:54:24 2025 GMT
        Subject: CN=1cf60b3f6d9880257d16edeba328e24a333373e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:f1:cd:77:ba:c1:9c:60:56:b7:f9:84:f0:
                    47:e8:d7:8f:83:10:5b:6b:c4:ce:06:0b:ec:14:fe:
                    e9:df:3f:fc:40:93:e3:f2:a8:23:a6:e2:e2:08:91:
                    15:7b:04:e2:28:0c:d0:4c:01:4d:00:a6:79:41:af:
                    2c:ce:8c:30:b2:aa:e4:da:71:af:c1:46:15:ac:c1:
                    bb:ef:98:e7:71:c3:c3:1c:f5:4e:9b:b5:4a:ce:15:
                    5c:f0:8d:9d:01:89:cd:fe:4f:e5:7e:59:8c:1b:21:
                    b5:0a:22:75:72:7c:af:74:57:5b:b3:83:31:c6:f3:
                    72:ab:53:b9:7a:a7:c4:29:a6:d5:28:8d:de:d9:6e:
                    3b:fb:b6:a9:aa:be:71:9a:d5:ba:4b:45:a1:5b:43:
                    80:7c:e1:f7:9d:76:58:d8:f9:58:c3:a3:7d:fb:29:
                    cf:df:b6:fb:87:a8:f4:b1:56:13:e9:1f:c2:51:86:
                    8b:d2:13:da:5d:97:80:70:ee:4e:63:19:4e:e2:75:
                    28:6a:e8:12:0a:c9:39:d1:bc:2d:a0:45:19:6e:dd:
                    ab:23:02:57:8f:6e:d4:1a:fb:02:cd:12:36:16:70:
                    ae:37:10:14:72:e7:78:e5:36:bb:fb:f1:78:22:c8:
                    be:30:12:71:97:85:5e:02:35:eb:78:a5:e8:d5:75:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:6D:F6:2D:19:0D:2B:CD:59:67:F6:4B:9F:2D:6C:65:58:38:12
            X509v3 Authority Key Identifier:
                keyid:BF:CD:6D:19:40:1F:D1:D9:B8:E9:C7:45:A0:CD:D9:F2:8C:68:43:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/1cf60b3f6d9880257d16edeba328e24a333373e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2050::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:dd:71:a4:71:1a:ab:a3:63:7a:c5:aa:54:fa:a8:9b:20:
         49:43:c2:57:fb:f1:3e:fd:60:e3:ae:00:b3:69:50:a0:05:7e:
         9a:25:79:87:3d:b4:ac:77:65:bd:f2:3a:63:da:9b:4c:08:83:
         9b:b9:1b:ad:12:2a:51:2c:9c:17:1b:e2:88:23:52:1a:18:27:
         8e:6a:94:f7:55:f5:30:c6:40:70:f3:b6:e8:42:9b:4c:39:2a:
         40:5e:08:58:a6:e8:45:51:a3:cc:ba:65:7e:c4:f6:d9:72:45:
         e7:c6:8c:35:39:bc:63:8d:6d:ca:9b:34:ad:08:1a:f4:57:36:
         9b:97:78:24:50:ed:69:c0:6f:8a:08:86:f2:c7:16:a2:9f:c1:
         77:dd:1d:2a:0c:15:5e:19:16:a4:ff:ab:c9:ab:42:19:a2:0e:
         a0:8f:d2:85:ee:34:74:41:3e:3d:34:fb:99:de:62:c7:13:e9:
         06:cf:d7:5b:b3:8c:31:96:90:81:64:d9:d5:3e:9e:70:03:e9:
         39:ac:39:57:c5:2a:72:04:5b:78:1e:db:f9:65:cf:ff:c8:7d:
         9e:a3:44:a4:ba:5b:50:dc:cd:33:f0:bf:4b:31:3b:6d:15:73:
         9e:89:8a:b7:c2:c1:3f:a0:43:ce:53:4e:e5:02:97:28:08:b4:
         2d:0d:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----