Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/c1e235d4f1c4408eec9770fda37114f498d71486.roa
File:                     c1e235d4f1c4408eec9770fda37114f498d71486.roa (raw, json)
Hash identifier:          z/wCiGCsKiGEwB2uOZSFbgBN2i07M0q2CGpBo0LmuuM=
Subject key identifier:   E7:70:88:A9:78:FF:2B:43:49:2D:0C:99:64:49:73:BF:A7:99:F2:CF
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       285690
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/c1e235d4f1c4408eec9770fda37114f498d71486.roa
Signing time:             Tue 09 Apr 2024 04:37:44 +0000
ROA not before:           Tue 09 Apr 2024 04:37:43 +0000
ROA not after:            Thu 09 Apr 2026 04:37:43 +0000
asID:                     64120
IP address blocks:        2803:f080:4000::/35 maxlen: 43
                          2803:f080:6000::/35 maxlen: 43
                          2803:f080:a000::/35 maxlen: 43
                          2803:f080:e000::/35 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643600 (0x285690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  9 04:37:43 2024 GMT
            Not After : Apr  9 04:37:43 2026 GMT
        Subject: CN=c1e235d4f1c4408eec9770fda37114f498d71486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:35:99:2d:80:c0:2b:36:e5:25:38:8c:6a:
                    74:14:85:dc:31:47:61:21:11:2a:e9:fe:4e:7e:5a:
                    fb:44:75:6e:18:02:df:3e:9b:31:17:1a:b7:f6:d7:
                    19:40:34:ed:6f:4e:0d:79:4e:21:dc:cc:f0:0e:51:
                    7d:78:dc:d5:be:32:7e:dd:9a:1f:b7:ac:19:76:91:
                    ad:14:5f:46:05:61:83:b7:82:26:80:08:86:af:0d:
                    e2:61:09:7a:8d:17:df:f1:52:57:bf:25:2c:15:81:
                    b0:31:b6:56:0b:0c:db:b6:ea:09:18:26:0c:b2:c4:
                    bd:6f:c9:d0:24:4c:21:f1:d1:43:1d:4f:8c:82:af:
                    af:53:ab:7b:e7:cb:d3:ef:f1:8c:c6:b5:88:86:ac:
                    57:9f:a5:7b:b6:33:45:bb:5d:31:b4:22:ca:5e:48:
                    22:94:63:bb:cb:41:d4:f5:c9:e0:fd:0a:e1:47:38:
                    82:9e:86:1f:49:da:d7:1f:2d:78:18:86:b4:2f:c2:
                    71:62:a6:95:f0:9a:fe:7d:2e:c9:89:91:02:18:5e:
                    5e:61:ff:30:a5:be:d2:00:ef:6c:d0:e9:e9:e8:d1:
                    9f:9a:81:64:07:b1:27:b0:8f:d8:1e:55:a5:2d:3f:
                    2d:74:4d:c8:83:a3:29:32:7c:dd:09:51:e1:d3:83:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:70:88:A9:78:FF:2B:43:49:2D:0C:99:64:49:73:BF:A7:99:F2:CF
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/c1e235d4f1c4408eec9770fda37114f498d71486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:4000::/34
                  2803:f080:a000::/35
                  2803:f080:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:07:20:73:40:d2:bf:c8:3a:94:38:ba:3b:f9:9c:a6:fa:
         e5:ad:ee:54:22:68:4f:89:8a:6b:65:05:95:0c:b3:fb:42:de:
         b9:b5:b9:fc:38:1b:bd:dc:7a:c8:a5:19:8d:7e:4b:9e:df:f8:
         52:6d:b1:24:01:71:6a:23:50:7b:83:0e:1c:db:02:40:25:da:
         3d:1c:34:7e:a4:6b:98:93:fb:61:db:eb:7d:37:44:98:d5:71:
         82:9f:fc:ef:ba:62:bf:f2:81:88:68:26:b2:64:be:26:43:21:
         9b:44:f4:3a:81:42:3a:ce:ec:46:2e:ac:82:57:6f:fb:ec:8e:
         8d:40:08:15:ce:dd:e4:ea:61:4f:98:0e:bf:6c:1d:fc:e3:fb:
         56:0f:47:bb:d3:86:9d:92:bf:09:3d:00:4c:3b:cb:64:75:5a:
         54:4c:34:c2:0e:90:35:e4:9e:80:a7:a8:c5:d2:7e:78:37:f0:
         38:47:88:4c:28:92:2f:c5:a7:f2:fc:8b:a3:7a:1f:33:71:29:
         78:ad:b8:23:7f:e3:df:a9:45:83:32:8c:21:63:4e:2d:6c:f2:
         ed:c5:15:3b:46:62:83:89:13:49:ca:e4:78:b8:5d:cd:f4:18:
         10:ab:2e:07:b0:cb:40:9a:7f:c3:b3:e0:e5:39:c8:49:47:ca:
         ce:e6:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----