Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/932d9544ac35151f28f5d7cf1a980dbf3cb3bd1a.roa
File:                     932d9544ac35151f28f5d7cf1a980dbf3cb3bd1a.roa (raw, json)
Hash identifier:          IxJcQOpMxYs7lNCeSNF1xtxGmFCs8pVkVppfh1FM1gY=
Subject key identifier:   99:C8:E9:CC:E8:A2:36:49:1C:C2:5E:BE:35:C2:12:C5:17:6A:DB:59
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       2831A6
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/932d9544ac35151f28f5d7cf1a980dbf3cb3bd1a.roa
Signing time:             Tue 09 Apr 2024 04:27:28 +0000
ROA not before:           Tue 09 Apr 2024 04:27:28 +0000
ROA not after:            Thu 09 Apr 2026 04:27:28 +0000
asID:                     22411
IP address blocks:        2803:f080:2800::/39 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634150 (0x2831a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  9 04:27:28 2024 GMT
            Not After : Apr  9 04:27:28 2026 GMT
        Subject: CN=932d9544ac35151f28f5d7cf1a980dbf3cb3bd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:1c:47:00:9a:8d:3b:10:7d:12:fc:80:60:
                    33:73:fb:1d:08:75:fa:b6:8e:35:b9:ed:a3:c1:7c:
                    73:fd:3b:eb:28:4b:18:2b:b2:3a:1c:0d:59:e0:a2:
                    65:9d:46:81:90:82:2e:21:3e:1a:66:de:42:a6:52:
                    a4:18:f2:0f:ca:37:44:c9:b2:bf:38:e3:d4:9f:40:
                    f5:c7:74:48:30:7d:74:12:20:56:f0:93:cb:41:b0:
                    c1:dc:ac:b7:12:86:f1:2b:a2:80:69:5c:91:5a:1f:
                    b4:69:84:79:12:39:c7:de:d1:ee:37:cc:61:f5:56:
                    de:de:3d:c9:32:a0:1d:30:92:56:74:bd:aa:b9:4f:
                    49:10:c5:64:cd:17:2a:01:37:94:72:97:90:4c:ad:
                    ca:2a:82:94:b7:02:ff:12:ff:9a:3a:b3:83:50:a0:
                    a1:5b:b3:02:7b:3c:52:24:1f:06:5f:0c:23:18:47:
                    a2:1c:39:d1:8c:c3:6d:4b:45:38:95:ff:32:b1:c1:
                    0a:aa:fd:46:fa:89:fe:3f:24:95:f2:a7:ce:51:ce:
                    1e:49:0e:1a:06:50:7c:64:49:01:e4:ca:a7:8c:c5:
                    1f:d8:c8:3b:3e:f2:d3:4f:f9:fe:23:a3:16:b6:55:
                    c6:f0:a7:cf:d6:7d:15:e5:78:41:23:05:6c:3b:51:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C8:E9:CC:E8:A2:36:49:1C:C2:5E:BE:35:C2:12:C5:17:6A:DB:59
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/932d9544ac35151f28f5d7cf1a980dbf3cb3bd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2800::/39

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:cb:16:9e:80:b7:18:8d:bf:29:6e:04:ab:b1:ab:3d:e8:
         98:2a:c2:25:22:f7:20:b8:c3:9d:74:2b:f9:66:bc:91:75:20:
         08:66:23:51:4d:44:7e:38:bd:f2:b6:56:7f:16:cb:79:48:cb:
         1e:b5:f2:67:e5:ae:35:7f:e7:54:cf:b3:56:24:06:04:f1:11:
         00:5c:c3:11:04:ce:72:cb:f2:3b:b8:58:1b:3e:59:34:31:cb:
         e9:24:84:af:ba:d5:e2:f1:26:0c:b3:7a:c3:97:65:d9:be:8a:
         43:4b:66:08:f1:08:b6:d9:c6:16:ea:f0:40:b6:3b:ad:90:43:
         78:a1:ca:92:e1:c3:b6:74:94:20:de:ce:a0:93:7b:ea:b5:f7:
         fb:85:9e:36:e5:13:cb:b1:0e:c7:14:22:42:e8:a6:b7:b5:d2:
         bd:32:bd:ba:60:2a:f2:da:77:61:a0:90:d4:a1:36:06:0b:70:
         86:27:27:7f:df:c8:bb:fd:2f:35:fd:23:35:dc:51:a8:61:87:
         af:5c:b7:c5:1a:27:af:3e:98:1f:1b:f7:e2:5e:2e:35:c5:37:
         aa:c0:d3:46:ef:93:db:cf:ad:6d:c1:aa:ce:e1:86:7d:d7:21:
         2b:91:27:d8:ca:f9:18:f4:c7:a7:c2:05:1b:6f:86:79:b9:be:
         62:84:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----