Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/939f204dbb9f2c827934d813fbe861daae681e1a.roa
File:                     939f204dbb9f2c827934d813fbe861daae681e1a.roa (raw, json)
Hash identifier:          bmc8d/qASEF1HJt0pjum3Xj7zV3vlZ6SRq9YYwti8Xk=
Subject key identifier:   4F:F1:0A:85:D5:90:33:9A:B9:D7:15:20:C6:51:1C:CC:42:C2:38:C1
Certificate issuer:       /CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
Certificate serial:       06A967
Authority key identifier: F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/939f204dbb9f2c827934d813fbe861daae681e1a.roa
Signing time:             Sun 04 Feb 2024 14:41:11 +0000
ROA not before:           Sun 04 Feb 2024 14:41:11 +0000
ROA not after:            Wed 04 Feb 2026 14:41:11 +0000
asID:                     272998
IP address blocks:        2803:1d90:a::/48 maxlen: 48
                          2803:1d90:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436583 (0x6a967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f4d78b3e2049b218740c81570dc59bdc92d3a1
        Validity
            Not Before: Feb  4 14:41:11 2024 GMT
            Not After : Feb  4 14:41:11 2026 GMT
        Subject: CN=939f204dbb9f2c827934d813fbe861daae681e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:da:2f:41:f8:69:e6:96:b3:af:08:fe:28:
                    10:ff:aa:97:7f:be:22:73:f3:dc:2d:c1:da:43:2d:
                    df:74:a6:c5:a1:65:38:ad:95:b6:95:ce:57:a9:b9:
                    cc:27:53:97:e2:47:d6:e3:28:19:de:02:f7:30:e3:
                    c6:74:13:27:d9:43:02:93:83:18:52:f0:21:2b:cc:
                    70:c1:1d:a9:7d:b7:c8:5b:f6:b4:69:d1:a0:4a:05:
                    c1:f6:2b:51:e2:e5:80:9c:19:bd:33:d4:87:9c:f6:
                    0b:e0:00:46:c5:9e:67:71:98:c8:ec:cf:83:bb:98:
                    9d:74:e4:e7:5c:6d:27:e4:f6:91:9d:46:d0:58:e4:
                    3a:7d:71:4d:b1:5d:e3:c0:a7:b5:09:d1:5a:c3:a0:
                    9c:8b:4f:a4:33:27:7e:35:b5:00:2e:ae:68:00:52:
                    ed:c4:42:69:42:a5:06:20:ea:7f:3f:46:7c:1c:5b:
                    81:6e:f7:f5:70:dd:53:38:bf:a2:2e:53:f0:d3:48:
                    9a:33:70:81:4d:8f:4c:c8:0f:77:fc:cd:bb:3a:e8:
                    17:8a:e6:95:a2:43:8b:c3:93:f2:26:8f:2e:8f:85:
                    c5:d6:fd:f9:23:32:f7:67:80:d9:ed:4f:3e:84:1f:
                    bc:b2:66:fb:24:e4:41:89:5e:73:7d:bc:50:cf:b1:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:0A:85:D5:90:33:9A:B9:D7:15:20:C6:51:1C:CC:42:C2:38:C1
            X509v3 Authority Key Identifier:
                keyid:F3:59:CF:27:CB:D6:98:D9:9E:A2:F1:2C:A7:95:27:E1:80:09:0E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/939f204dbb9f2c827934d813fbe861daae681e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a08390f-c775-46fc-82f7-8c4a6f855c16/f4f4d78b3e2049b218740c81570dc59bdc92d3a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90:a::/47

    Signature Algorithm: sha256WithRSAEncryption
         b7:38:31:c0:df:c7:0b:b5:67:51:8b:f8:9e:85:1d:37:f7:28:
         38:17:57:23:23:5a:37:81:ca:18:e8:9f:ae:1f:68:c4:eb:c0:
         77:38:dd:b8:9d:6d:f5:e0:2c:cd:e0:0b:20:e9:b4:ba:da:60:
         e9:e4:2c:9f:62:e6:25:cd:81:1d:7d:6d:8b:9f:68:2a:84:b7:
         e4:67:05:1e:85:b3:f0:c1:bb:1a:78:60:a8:50:07:b9:38:10:
         b9:07:dc:18:18:3d:90:87:b3:6d:aa:e8:86:ea:e9:96:49:91:
         fb:bf:90:be:c4:a2:4d:41:e0:47:d7:b9:69:09:ac:65:d6:96:
         b2:e7:d8:56:51:c5:0d:5d:aa:2b:e6:59:36:38:71:87:b6:2d:
         95:f0:95:d8:1d:22:66:a8:f9:a6:1b:e6:28:28:18:d7:ad:bb:
         6d:94:a3:38:2f:3f:7c:ed:a9:53:29:22:3d:01:2f:3f:3b:b2:
         79:a8:a0:c5:4f:3d:7e:73:01:38:a8:59:9b:82:eb:cf:8d:14:
         a4:98:c2:34:7e:6b:36:f9:16:ad:45:d6:9d:9c:95:52:dc:a0:
         5a:b2:60:24:29:15:9f:53:de:8c:fb:2c:4b:6f:bf:88:9e:cb:
         47:01:f3:4b:cf:33:e4:c0:b8:4c:5b:30:02:28:58:cf:77:4b:
         48:9e:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----