Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/ae8946bb4682c0281eeca24b4bdfc105d20b3945.roa
File:                     ae8946bb4682c0281eeca24b4bdfc105d20b3945.roa (raw, json)
Hash identifier:          n0FEUlPzgHNIiVy8qDR4zELV5A6I+1R1SXYuIhPl1qg=
Subject key identifier:   3E:CB:A3:23:D8:64:2E:1E:21:E5:6D:D9:57:DE:C6:80:94:91:6A:34
Certificate issuer:       /CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
Certificate serial:       12D148
Authority key identifier: 9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/ae8946bb4682c0281eeca24b4bdfc105d20b3945.roa
Signing time:             Sat 29 Jul 2023 08:30:03 +0000
ROA not before:           Fri 28 Jul 2023 08:30:03 +0000
ROA not after:            Sun 27 Jul 2025 08:30:03 +0000
asID:                     271926
IP address blocks:        2803:aa10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233224 (0x12d148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
        Validity
            Not Before: Jul 28 08:30:03 2023 GMT
            Not After : Jul 27 08:30:03 2025 GMT
        Subject: CN=ae8946bb4682c0281eeca24b4bdfc105d20b3945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:53:89:b8:41:61:10:e8:a3:00:28:9d:0a:59:
                    f4:64:d0:f0:47:ff:d3:3c:0a:0e:2c:b0:eb:7d:83:
                    a4:08:30:43:d3:37:3d:d5:88:a8:08:b6:53:52:04:
                    b4:5c:3e:2b:6a:a2:69:aa:82:82:78:65:1d:98:d9:
                    c8:53:e1:8c:a3:6f:e7:0a:13:ef:23:70:05:54:03:
                    5d:05:23:2c:96:c9:ef:33:ae:cf:9e:bd:80:5f:d7:
                    19:40:e2:86:bd:a1:08:2d:78:ef:64:15:5f:5d:31:
                    76:c6:d4:6d:04:5d:d2:c2:dc:42:69:c5:11:4f:ac:
                    9c:93:85:3b:fd:ca:30:76:b2:1f:54:62:c2:06:26:
                    28:89:6b:17:3d:04:05:51:78:a7:9b:b1:5e:26:2b:
                    76:92:e4:7d:83:a5:a2:4c:27:7b:30:c6:6c:a6:bd:
                    a6:7b:43:5a:05:65:a2:29:d8:ab:76:44:11:f7:ed:
                    cd:05:b9:39:a8:62:3d:9d:a5:2d:40:f9:15:cc:52:
                    e9:21:1a:e0:e8:30:d0:b9:3f:f6:3e:46:e1:c2:db:
                    b7:80:32:9c:5a:7d:af:f6:7d:c7:43:26:35:bb:3e:
                    21:ac:30:3c:c7:ae:e0:ab:5e:a1:38:ad:63:06:0f:
                    d9:c8:f7:76:8d:cb:b1:99:12:6e:6f:aa:4e:f7:5b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:A3:23:D8:64:2E:1E:21:E5:6D:D9:57:DE:C6:80:94:91:6A:34
            X509v3 Authority Key Identifier:
                keyid:9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/ae8946bb4682c0281eeca24b4bdfc105d20b3945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:3a:db:2e:22:4f:dc:dc:e4:a1:99:78:87:1d:55:82:fd:e9:
         a9:eb:6f:0f:30:42:f7:a6:23:7e:1b:f5:dd:11:7f:f8:70:64:
         6e:bd:60:49:5f:24:37:99:66:f0:ea:0e:10:8e:30:6e:67:e1:
         a8:dc:5b:7d:cd:77:6a:b9:6c:85:5e:69:d6:1d:6c:87:fa:17:
         67:dc:3c:3a:49:52:3f:96:95:83:40:c4:d5:1a:30:f1:04:d5:
         d2:5b:a8:09:5b:aa:b2:79:8a:68:0e:38:75:34:0c:33:79:7d:
         ca:b7:6e:bc:e9:36:95:60:99:2a:cc:2a:05:82:57:d1:6b:e8:
         aa:0f:26:50:3a:a5:b5:99:f5:be:5f:8b:e8:52:c9:8f:5a:c2:
         63:b8:a6:1f:c3:00:90:6e:e6:0b:1a:a5:99:27:f7:22:e5:52:
         16:dd:65:7b:13:39:7b:96:45:dc:96:4a:00:ac:f9:04:a2:d0:
         71:f5:65:88:f9:0b:bb:71:9e:70:2e:fe:44:3d:bb:72:71:d3:
         b2:d1:cf:5f:8d:fa:aa:78:33:03:cb:b5:ca:7f:c4:a4:62:b6:
         17:94:60:35:9e:dd:7c:f9:7a:a9:c7:eb:aa:4e:cd:9f:9b:eb:
         ea:20:e6:60:27:9e:f2:5a:3a:16:7d:96:0f:f0:02:2e:b8:2b:
         08:7d:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----