Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/bdebe5288d868730d98a8473187933b61239dc18.roa
File:                     bdebe5288d868730d98a8473187933b61239dc18.roa (raw, json)
Hash identifier:          Y1NrN5VSK78H4rhDhAl0pG8HuNk5YaQ9+xa00E95Xn4=
Subject key identifier:   06:E0:3E:F2:17:68:0C:C4:72:0C:D6:D9:56:E1:AE:EA:14:66:F5:28
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       127CCF
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/bdebe5288d868730d98a8473187933b61239dc18.roa
Signing time:             Sat 27 Jan 2024 07:30:00 +0000
ROA not before:           Sat 27 Jan 2024 07:30:00 +0000
ROA not after:            Mon 26 Jan 2026 07:30:00 +0000
asID:                     10753
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211599 (0x127ccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Jan 27 07:30:00 2024 GMT
            Not After : Jan 26 07:30:00 2026 GMT
        Subject: CN=bdebe5288d868730d98a8473187933b61239dc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:6b:7d:61:13:aa:59:95:81:49:52:85:9f:
                    1c:d2:80:24:a5:6c:6a:c1:52:1c:d4:9d:e1:71:5f:
                    7a:fe:de:fe:39:e1:23:66:ab:a0:9a:31:0f:52:4b:
                    89:79:49:b5:bf:25:4b:ee:6e:f4:ef:3d:2c:4c:5f:
                    2b:61:4e:ab:2a:8e:7a:c9:2d:eb:03:91:f0:e7:16:
                    41:d0:21:3b:1d:7f:7c:07:7f:bb:2a:27:eb:01:46:
                    69:c4:56:17:57:29:1d:08:0f:dc:e3:33:f7:3a:84:
                    a2:0f:42:5d:e8:ff:19:ce:b0:3a:fc:63:d5:22:c8:
                    fe:6a:60:a0:ee:6d:54:e2:fe:3c:3e:d0:14:7a:a8:
                    82:84:88:1f:66:cc:1c:2f:bd:07:78:e4:95:0e:a9:
                    70:9a:62:0d:80:02:cb:db:2b:66:aa:c7:96:23:5f:
                    9c:8b:3e:6a:0f:3f:13:e1:94:84:76:8d:2f:71:e3:
                    70:bb:ce:78:d4:7a:5b:8e:07:c8:86:bf:58:87:84:
                    51:d4:d1:98:14:c5:a5:9a:3c:45:bb:f3:27:80:fc:
                    ea:42:80:57:ec:42:2c:be:5d:be:08:26:83:c1:09:
                    ec:d4:61:f0:72:86:ff:55:fd:98:05:2b:10:c6:54:
                    ca:23:ef:0f:56:1b:a1:29:3d:24:0a:39:b3:85:42:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:3E:F2:17:68:0C:C4:72:0C:D6:D9:56:E1:AE:EA:14:66:F5:28
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/bdebe5288d868730d98a8473187933b61239dc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:ba:2d:b7:5b:eb:cb:8d:cf:65:c0:ae:84:95:5a:1d:6a:18:
         de:24:f7:63:af:86:bc:38:d4:ca:6f:b5:02:91:57:3f:9a:06:
         ee:be:a5:0f:38:28:65:53:9a:15:1a:0d:b4:74:ad:d9:c5:42:
         aa:da:25:57:4f:19:64:bd:05:db:d6:6e:3f:53:33:2c:50:a8:
         37:cb:75:0b:9b:02:77:53:d9:f4:81:9b:cc:af:9a:06:58:1e:
         c3:31:0e:04:66:6c:16:2b:08:a7:ab:75:98:85:5e:45:f5:31:
         38:17:31:63:30:28:96:22:87:fd:c8:3a:70:de:9b:3b:fc:5d:
         94:7c:ff:04:4c:b8:55:85:cc:80:2b:db:f7:21:b4:c9:d4:72:
         81:76:47:27:ac:97:c5:3e:ae:51:d5:76:53:be:91:18:6d:36:
         6f:fa:e6:0c:94:42:a0:95:13:41:e9:92:17:11:9d:d3:6f:3a:
         92:c2:89:c0:29:f9:a7:a8:e2:e1:56:e7:5e:df:ae:11:79:3d:
         6a:94:59:ce:07:7f:d2:4c:c8:bb:a9:85:a8:cf:1b:0a:b1:33:
         06:11:07:0a:88:df:03:97:c6:3e:16:6a:ff:04:b4:51:4f:83:
         a3:6c:38:ae:a4:78:cb:57:17:1c:e3:a0:d5:ef:67:e8:29:11:
         27:3d:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----