Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/9d6847909cb67fc24614ea1a74b9bf1117e41f28.roa
File:                     9d6847909cb67fc24614ea1a74b9bf1117e41f28.roa (raw, json)
Hash identifier:          6YOWhH+CU6QYMsiZu/RBBrBCPbogPfziQPFCIcxp6Ks=
Subject key identifier:   8F:C0:D4:ED:26:18:4F:B8:31:0D:D6:A9:46:33:21:44:12:8E:96:5A
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       2279A0
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/9d6847909cb67fc24614ea1a74b9bf1117e41f28.roa
Signing time:             Fri 11 Aug 2023 03:10:36 +0000
ROA not before:           Thu 10 Aug 2023 03:10:35 +0000
ROA not after:            Mon 11 Aug 2025 03:10:35 +0000
asID:                     64120
IP address blocks:        2803:f080:2000::/35 maxlen: 43
                          2803:f080:4000::/35 maxlen: 43
                          2803:f080:6000::/35 maxlen: 43
                          2803:f080:a000::/35 maxlen: 43
                          2803:f080:e000::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259360 (0x2279a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Aug 10 03:10:35 2023 GMT
            Not After : Aug 11 03:10:35 2025 GMT
        Subject: CN=9d6847909cb67fc24614ea1a74b9bf1117e41f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:5a:04:f3:c4:27:b8:a1:68:76:4d:55:9c:
                    af:1e:42:d4:c3:61:b1:f0:dd:e6:f4:55:46:e3:cc:
                    5d:c1:21:df:07:df:63:b7:54:70:fd:63:1c:66:91:
                    8d:43:f7:4c:1c:ab:c5:2b:b5:30:09:28:e5:f8:a6:
                    54:47:43:8d:a7:b6:74:80:20:da:7a:81:de:75:c6:
                    18:ab:4a:16:af:a6:6c:54:fa:0d:6d:29:6e:32:72:
                    6c:e5:33:7f:78:da:c3:9d:59:96:db:1f:d1:e9:97:
                    85:2e:fb:fb:55:c3:b1:6a:83:2d:23:cf:c4:bb:21:
                    fc:af:55:54:8b:5f:d5:9b:c9:da:22:94:72:4c:f9:
                    21:1b:e1:66:8e:a1:46:cb:e8:c3:f7:f8:86:2f:36:
                    2b:34:75:93:aa:66:2c:3e:c6:3a:ef:4a:1a:38:6e:
                    f2:0d:70:ed:c7:7a:39:f5:de:fc:9c:af:e7:f9:9c:
                    bc:36:6e:ef:28:a3:b1:74:14:07:cf:48:28:9f:42:
                    96:2f:40:6b:a2:83:27:47:0a:39:7d:94:31:ab:12:
                    d6:ba:bb:9b:07:50:71:d0:6b:ae:b6:1b:59:d7:7b:
                    87:d6:81:80:99:65:76:42:52:86:96:18:19:a4:15:
                    de:a0:45:c3:5a:17:9a:f7:b0:97:3a:89:56:52:4d:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:D4:ED:26:18:4F:B8:31:0D:D6:A9:46:33:21:44:12:8E:96:5A
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/9d6847909cb67fc24614ea1a74b9bf1117e41f28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2000::-2803:f080:7fff:ffff:ffff:ffff:ffff:ffff
                  2803:f080:a000::/35
                  2803:f080:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         73:83:e5:b5:bf:40:03:fe:36:03:5d:0b:ae:62:cc:88:9f:7d:
         26:4d:5c:58:9f:5f:7e:9e:b8:64:19:8b:f0:e3:f0:8d:79:7d:
         3e:e6:98:bd:18:50:fb:19:cf:82:94:73:2d:ec:ae:3c:d0:17:
         c4:a5:f9:e9:5b:95:21:ff:03:ea:d7:7d:0c:42:57:83:bd:bf:
         12:1d:59:4a:cf:da:cf:31:fc:03:0b:29:47:7e:3e:54:1c:2d:
         5f:58:d0:e4:96:d6:73:dc:c0:e3:04:6b:7c:c4:8e:9f:ca:25:
         86:d1:27:91:67:68:38:7d:72:e2:3b:4d:08:ff:84:bd:78:8a:
         7a:02:b3:cb:71:3f:4d:6d:5e:ce:e5:48:36:69:58:47:ae:82:
         18:e6:44:70:ae:b4:f9:95:f0:9e:5f:28:ed:06:79:67:33:a0:
         b0:35:50:99:dc:7f:ea:e6:69:a4:d4:91:89:06:fd:5d:93:05:
         c7:75:f7:d5:70:26:bb:36:d7:ef:95:09:3a:46:02:41:51:21:
         cb:06:aa:c6:bd:bd:07:2d:cb:e9:73:36:cd:0c:b5:ee:cc:98:
         f8:b1:c3:93:c2:e2:b5:a5:4a:91:a3:25:58:2e:06:6a:93:4d:
         67:a6:36:2b:b1:5f:2f:24:84:e4:f1:87:0a:ed:f5:1c:81:86:
         e2:56:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----