Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1c017e9d7347f4c022e2dd00b5c5827daec051fb.roa
File:                     1c017e9d7347f4c022e2dd00b5c5827daec051fb.roa (raw, json)
Hash identifier:          fHJ1XJBMWc+bI1dcBKxz8B+oa44wYTYRRAFFhxt5FoE=
Subject key identifier:   67:FE:39:F1:54:C1:C2:88:6C:74:9C:DF:3C:AD:E9:DD:DE:B9:1F:07
Certificate issuer:       /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial:       216A05
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1c017e9d7347f4c022e2dd00b5c5827daec051fb.roa
Signing time:             Wed 05 Jul 2023 02:04:43 +0000
ROA not before:           Tue 04 Jul 2023 02:04:43 +0000
ROA not after:            Sat 05 Jul 2025 02:04:43 +0000
asID:                     52468
IP address blocks:        2803:ec20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189829 (0x216a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
        Validity
            Not Before: Jul  4 02:04:43 2023 GMT
            Not After : Jul  5 02:04:43 2025 GMT
        Subject: CN=1c017e9d7347f4c022e2dd00b5c5827daec051fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:3a:be:67:1a:d0:f3:7b:e9:17:6f:ff:c0:
                    23:09:9d:b8:b0:70:f6:f5:ca:82:87:10:af:a3:3a:
                    b0:ab:09:3c:d3:41:16:35:53:ee:46:f7:93:9e:9c:
                    e0:0c:19:0c:9e:54:4d:c2:cf:f1:80:9f:96:df:74:
                    2d:d9:7e:30:22:13:84:f9:b0:80:07:1c:6e:b0:1f:
                    7c:7a:3d:9f:50:ef:0c:ef:15:dc:00:29:b9:1e:44:
                    24:bd:5b:64:ff:c1:96:55:37:89:90:d6:41:ae:a2:
                    61:94:92:53:30:b3:e7:19:c9:30:53:e2:c1:5f:3d:
                    33:24:74:a0:73:82:42:72:87:66:ec:0c:a8:b8:7d:
                    01:69:73:a5:8e:d1:40:d6:ef:27:07:d1:98:db:5e:
                    9a:a2:5e:6e:37:eb:42:eb:23:1b:e7:03:d8:e3:87:
                    8d:f7:76:a1:2a:48:6c:be:56:f5:36:2e:b3:41:6a:
                    97:5e:71:52:b6:70:9e:0e:ee:61:6d:83:d3:fc:cf:
                    eb:44:c7:50:d7:de:a4:26:59:c2:23:e7:f7:99:3a:
                    a2:1d:15:64:65:8c:c9:96:bb:a8:3b:46:ce:b3:b4:
                    e3:46:e9:34:fa:ba:da:a2:41:e1:f9:ae:3a:2b:0a:
                    bb:9f:1e:ab:0f:68:c3:13:d5:4f:01:00:c3:01:9d:
                    77:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:39:F1:54:C1:C2:88:6C:74:9C:DF:3C:AD:E9:DD:DE:B9:1F:07
            X509v3 Authority Key Identifier:
                keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1c017e9d7347f4c022e2dd00b5c5827daec051fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:4a:d7:f0:35:60:53:86:21:f9:3d:d7:07:b1:69:55:4a:
         da:3a:54:09:96:2b:b2:cb:bd:57:7a:ab:55:c4:a1:09:58:af:
         2f:16:e9:b0:3c:0a:a2:18:0f:4d:fa:d4:21:17:44:f7:eb:eb:
         13:a9:24:1c:6d:6a:fc:b6:a4:15:c4:21:61:3d:ac:49:56:8a:
         83:c3:46:7f:91:bd:6a:87:f4:d6:92:df:96:2e:c3:c4:17:4e:
         35:da:50:9b:89:bd:59:64:e7:0b:b3:65:ba:c2:f0:1f:2a:7e:
         ae:85:60:6e:6f:c2:76:6c:a3:c0:ab:c3:f4:3d:b4:e2:00:f6:
         e4:7b:0e:57:71:56:91:67:74:38:eb:f5:06:26:db:1a:d6:63:
         92:eb:68:24:ef:f8:29:08:38:9c:5b:d3:aa:8b:56:29:fc:90:
         90:a8:7d:d6:fb:84:48:e2:a8:e2:8e:d6:a0:df:5a:c1:6a:fb:
         96:2d:6a:e0:a7:02:2f:58:86:74:2f:dc:4a:32:00:a2:e4:d9:
         d2:8d:09:f1:06:a0:38:82:74:ae:bd:89:1f:a7:c0:fd:c1:c6:
         27:09:28:69:1b:d2:fe:83:8a:3d:a9:60:77:23:c8:e7:17:16:
         48:97:1c:9f:03:ef:5d:bb:ab:89:67:48:bf:7f:89:92:5b:fe:
         39:95:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----