Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/b3baddfcbdc89419b94c11b37d24b953b143c9b0.roa
File:                     b3baddfcbdc89419b94c11b37d24b953b143c9b0.roa (raw, json)
Hash identifier:          tLvXjrAYNkOlHo01LnBroEbNRp0HevimMWfIErV1yJY=
Subject key identifier:   11:D2:CB:09:7D:75:C6:68:F0:67:49:EB:96:9D:16:BD:7C:41:0F:B8
Certificate issuer:       /CN=0617fe284eadaecc300caf805a55753001bc6052
Certificate serial:       064086
Authority key identifier: 23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/b3baddfcbdc89419b94c11b37d24b953b143c9b0.roa
Signing time:             Tue 04 Jul 2023 01:50:18 +0000
ROA not before:           Mon 03 Jul 2023 01:50:18 +0000
ROA not after:            Fri 04 Jul 2025 01:50:18 +0000
asID:                     270141
IP address blocks:        2806:3dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409734 (0x64086)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0617fe284eadaecc300caf805a55753001bc6052
        Validity
            Not Before: Jul  3 01:50:18 2023 GMT
            Not After : Jul  4 01:50:18 2025 GMT
        Subject: CN=b3baddfcbdc89419b94c11b37d24b953b143c9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:fe:8b:aa:4d:66:0d:c0:a0:eb:d2:2d:a8:
                    a4:b8:37:47:b3:f5:cb:c1:2b:15:99:ed:2d:e9:d1:
                    b8:b7:86:b3:c5:13:b4:8e:88:e0:e3:bf:10:6f:ab:
                    66:90:72:17:0e:f0:e0:68:69:27:97:7c:d3:33:cb:
                    35:a7:d6:e6:17:18:3a:20:12:9d:26:06:91:53:1e:
                    83:92:89:f1:c1:61:33:a8:d9:9b:d7:76:95:5e:8c:
                    6f:68:c6:34:58:c9:6b:1c:2f:d3:ef:9e:a4:61:14:
                    1f:6e:c8:05:5e:5c:c6:24:88:98:ed:23:e9:50:6c:
                    eb:14:4f:c8:a2:db:2d:56:b2:27:10:b9:5d:7e:76:
                    fa:d7:17:5d:90:ab:3e:02:28:4f:90:ef:23:93:72:
                    19:10:11:fe:2e:e2:c5:07:b2:aa:36:5e:fd:b5:20:
                    51:15:bf:53:ae:23:d4:a7:d0:30:b4:fc:e1:0d:68:
                    c5:91:db:33:55:37:02:76:ef:76:94:47:40:ac:f4:
                    e3:26:12:94:18:4e:1d:ac:ae:d0:ff:d0:0c:ae:90:
                    3b:67:2a:1e:c6:c1:06:3a:bd:94:65:64:63:85:8f:
                    b1:60:03:74:c4:bb:25:89:a2:26:24:4e:b9:7c:98:
                    9d:a8:1b:0e:c9:7c:b7:5f:94:d3:6b:14:6e:a5:a0:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:CB:09:7D:75:C6:68:F0:67:49:EB:96:9D:16:BD:7C:41:0F:B8
            X509v3 Authority Key Identifier:
                keyid:23:11:AC:04:68:03:80:BD:6D:72:01:7E:23:B2:26:48:24:56:3C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0617fe284eadaecc300caf805a55753001bc6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/b3baddfcbdc89419b94c11b37d24b953b143c9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685412b9-0a12-4945-99b7-0d78d4061bf3/0617fe284eadaecc300caf805a55753001bc6052.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:91:6c:27:ce:11:31:7b:e3:a4:c2:a8:7d:ed:90:19:80:49:
         1b:da:2b:32:45:ee:05:ab:c7:55:ce:2e:a8:77:0c:2e:e1:ae:
         8f:54:d6:62:ed:26:13:c6:e6:9b:c3:b2:ad:1f:f0:14:5d:6b:
         6b:a9:14:8a:cd:53:9f:42:72:64:76:95:44:dc:9e:b8:88:33:
         f5:6c:eb:11:73:49:b4:e8:b7:d2:85:22:f2:32:a7:b2:ec:1f:
         a2:9d:67:7b:73:49:c1:6f:ef:29:66:f4:92:0e:4b:29:99:3f:
         d3:fd:a8:a4:c6:55:61:ae:b5:7c:0b:db:11:76:dc:92:b2:62:
         c1:3c:dd:9d:3f:ff:00:da:b6:09:b6:40:af:ab:d0:6c:d0:17:
         67:64:95:4a:3c:af:6b:ab:e2:5e:49:33:a8:2c:fc:b8:f4:48:
         4b:46:35:13:30:74:79:65:06:3b:1d:88:9a:46:b7:70:9c:0e:
         bd:f7:55:d0:86:12:fa:42:f4:b0:a0:1b:d8:84:44:7e:78:9a:
         fa:35:fb:7e:c8:06:bc:4e:72:54:1b:cc:86:b2:88:57:aa:65:
         09:09:d7:c2:c8:6a:d8:1f:39:80:57:73:ba:5b:ac:db:0f:e8:
         a6:e7:e8:8d:1a:98:ca:15:4e:83:d0:41:8e:70:ce:c9:15:0a:
         f9:f5:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----