Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/612610c029ccb7a6a281b90acad6930ed130bcda.roa
File:                     612610c029ccb7a6a281b90acad6930ed130bcda.roa (raw, json)
Hash identifier:          FUkWmMtVb/kOJwo0rDE9QVej8KDO8LI2vyhPhWzSmLw=
Subject key identifier:   AC:F7:60:85:F9:AD:08:12:00:58:5D:48:75:68:2D:30:2D:B2:AB:6D
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       284B54
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/612610c029ccb7a6a281b90acad6930ed130bcda.roa
Signing time:             Tue 09 Apr 2024 04:35:58 +0000
ROA not before:           Tue 09 Apr 2024 04:35:58 +0000
ROA not after:            Thu 09 Apr 2026 04:35:58 +0000
asID:                     262210
IP address blocks:        2803:f080:2600::/39 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640724 (0x284b54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  9 04:35:58 2024 GMT
            Not After : Apr  9 04:35:58 2026 GMT
        Subject: CN=612610c029ccb7a6a281b90acad6930ed130bcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:7c:8a:2b:d7:83:cc:5c:af:6e:9f:d4:f4:
                    79:4f:06:ef:23:f4:d3:01:86:7c:78:11:61:17:f2:
                    0d:e8:f6:6c:3c:ac:97:39:58:f7:bd:47:21:65:c6:
                    db:74:ec:43:2b:0e:2f:84:2f:3b:51:8c:11:b4:4a:
                    0e:45:1b:08:62:9a:97:39:e4:61:d5:c0:ab:45:62:
                    7f:d4:09:d3:d0:2f:42:bc:e6:df:39:ee:70:bb:a1:
                    04:f4:cb:b8:0f:c7:a5:9b:4e:3a:5b:ff:b3:13:9c:
                    a7:88:b6:66:5f:a8:2d:ae:53:08:2d:37:2d:10:bc:
                    4f:69:36:f7:71:85:32:a5:c8:da:b7:6c:fd:13:e6:
                    b9:ed:49:13:c6:d3:33:ae:6f:c1:29:0e:ad:3a:64:
                    ad:b8:6b:e9:d0:0c:7e:79:b1:fb:81:3f:7b:ff:ca:
                    c5:42:cd:02:1e:63:05:a1:2b:fb:e4:d8:c2:76:41:
                    b1:e5:0a:33:96:ff:46:21:67:e1:58:73:f1:5d:77:
                    00:29:f8:04:0a:36:2e:f3:9f:f6:fc:32:80:a8:f7:
                    d3:cf:d3:62:e1:39:3f:57:7c:fb:78:f2:80:96:4c:
                    4b:33:07:88:a9:f8:ec:37:c1:79:1e:15:43:c2:5a:
                    69:27:65:f2:ad:46:42:e6:ab:72:e1:d0:fe:99:7b:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:60:85:F9:AD:08:12:00:58:5D:48:75:68:2D:30:2D:B2:AB:6D
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/612610c029ccb7a6a281b90acad6930ed130bcda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2600::/39

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:e6:78:99:17:ee:57:ae:a2:c0:df:ed:26:96:51:0a:37:
         e1:9c:c3:e3:1f:cd:47:f9:26:82:ef:f5:9e:20:ec:3c:6c:22:
         da:ec:50:64:94:21:36:16:09:7b:13:e1:3d:d3:8f:43:37:6e:
         fb:49:a3:cc:f7:25:bc:6a:a8:53:3a:a8:79:54:49:f0:ef:56:
         69:aa:f9:95:b8:7a:0a:e5:57:f3:93:a3:b7:79:e4:45:a0:c3:
         7e:a1:74:0c:ea:0b:2c:46:57:89:3b:6b:32:97:1d:54:66:26:
         09:c7:69:d2:68:0f:28:f7:82:bc:b6:b6:40:27:0b:fe:c6:03:
         5c:a2:10:e8:d1:ca:8e:cf:03:b2:89:ba:0c:7a:8c:9b:8d:45:
         e2:24:ff:5a:f2:5a:86:6b:4a:05:99:0c:f4:21:37:ef:50:97:
         7e:c4:ef:51:0c:30:87:15:4f:b2:0a:dc:04:9a:0f:eb:6c:54:
         78:98:a4:17:db:00:56:5a:5a:68:c2:22:dc:24:a7:2e:17:fc:
         4d:e3:a7:07:7d:fc:77:2b:f7:13:a2:67:3c:de:3a:ac:41:58:
         02:e4:28:e6:24:20:b3:64:5a:91:55:aa:66:58:4d:31:c7:b7:
         d3:83:6a:11:47:db:24:2d:77:2b:4b:03:c6:8b:a1:e2:32:ed:
         ed:36:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----