Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/0a1989c76b6e49b57d6bdb4b8feba9583788a8b0.roa
File:                     0a1989c76b6e49b57d6bdb4b8feba9583788a8b0.roa (raw, json)
Hash identifier:          OyIbNPXcxInh9XttNrSLL55CGZwWteZbihfpm7MxvoY=
Subject key identifier:   99:87:E8:54:7B:35:79:0B:CD:AF:E2:65:AC:EA:AB:C9:71:74:6C:25
Certificate issuer:       /CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
Certificate serial:       06A44F
Authority key identifier: F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/0a1989c76b6e49b57d6bdb4b8feba9583788a8b0.roa
Signing time:             Sun 04 Feb 2024 14:18:51 +0000
ROA not before:           Sun 04 Feb 2024 14:18:51 +0000
ROA not after:            Wed 04 Feb 2026 14:18:51 +0000
asID:                     272998
IP address blocks:        2803:1d90:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435279 (0x6a44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
        Validity
            Not Before: Feb  4 14:18:51 2024 GMT
            Not After : Feb  4 14:18:51 2026 GMT
        Subject: CN=0a1989c76b6e49b57d6bdb4b8feba9583788a8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:83:fc:a1:4e:ca:bd:6f:8d:24:d5:df:d4:
                    60:c6:0c:9d:74:00:ab:0c:70:ea:e1:cc:d9:24:a1:
                    ae:98:d5:2c:34:d1:f8:a6:72:58:b9:f7:2a:c2:88:
                    2f:42:08:19:34:85:4c:c5:cc:3d:84:ab:ba:93:63:
                    ce:e9:d0:51:14:27:fc:61:2d:c7:e2:8c:ec:0c:c0:
                    49:07:e0:c6:c5:25:34:e2:aa:e6:96:18:f5:99:32:
                    ea:09:b9:1e:c4:08:09:1c:7a:a8:1e:60:8b:a9:5f:
                    2a:64:e2:60:78:e8:1b:20:12:83:f4:ba:b7:a7:e4:
                    27:02:35:a6:eb:6a:06:2a:75:2c:41:1c:e5:74:1f:
                    53:71:35:7e:33:7d:5e:d1:74:14:12:d2:11:29:d7:
                    77:24:47:b6:96:d4:c0:05:ee:03:f1:92:d9:ac:07:
                    be:f9:a0:04:11:97:85:04:db:55:00:dd:cc:23:70:
                    87:72:16:cb:3b:c5:3a:53:2a:85:62:9a:e8:49:b6:
                    28:d1:ef:b9:4d:72:ef:4d:15:e6:d2:f8:fe:4c:7d:
                    36:bf:34:ad:d4:00:fe:29:f2:31:b9:ed:74:e4:09:
                    81:75:cc:f9:41:87:88:4a:5f:a2:bb:e2:68:87:a6:
                    b9:4b:98:c2:15:72:67:ee:27:51:15:06:68:b2:fb:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:87:E8:54:7B:35:79:0B:CD:AF:E2:65:AC:EA:AB:C9:71:74:6C:25
            X509v3 Authority Key Identifier:
                keyid:F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/0a1989c76b6e49b57d6bdb4b8feba9583788a8b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:2f:95:92:75:95:d9:b9:a5:e5:06:cb:e9:44:35:a7:d5:
         35:d9:1e:ea:f9:36:e7:17:73:9c:47:98:f7:7b:3b:45:07:e1:
         39:e0:76:c5:57:49:74:11:e8:9f:2c:19:47:8d:8b:02:30:57:
         c3:c8:f3:f9:7b:d8:a1:b7:e6:44:bd:ee:93:16:01:05:d3:58:
         bc:bd:f7:82:2f:09:84:0f:53:3c:cd:86:d5:36:9c:e4:51:79:
         5d:d9:57:a6:1c:0a:bb:2c:d8:f6:37:62:c7:c3:73:cf:54:38:
         b9:87:4c:c3:13:de:60:93:5a:35:a6:1b:0d:91:a9:38:eb:ad:
         ea:08:94:32:b7:51:b5:7b:bf:83:98:ff:99:14:56:48:85:4c:
         4e:16:28:8e:a6:7c:e2:52:9c:88:57:fc:6b:69:75:cb:6f:19:
         bb:ff:d2:d7:bb:84:d1:8f:1e:bc:f6:24:1d:49:bd:0e:c9:f1:
         54:86:2a:79:1d:b2:59:96:2e:40:18:36:61:58:c7:ff:ac:24:
         4b:0a:81:d8:2a:46:59:6b:58:1a:d1:e5:5e:e3:fc:4d:b2:cc:
         de:12:4c:9b:a4:bb:56:71:62:db:fb:de:c3:79:4f:d6:6a:0f:
         22:fb:9e:19:67:a2:a0:07:70:8f:46:f7:c5:51:3d:c1:b3:bb:
         bb:cf:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----