Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/7e8b3e26cd29db57845f2be334e94a05fee68b9e.roa
File:                     7e8b3e26cd29db57845f2be334e94a05fee68b9e.roa (raw, json)
Hash identifier:          4+7GIHNTP2ySWJ/ZnqbyQIeM0ZuLElzenxBqOTk7fQI=
Subject key identifier:   64:9E:27:6C:63:F5:DA:84:8A:CF:29:D0:FC:22:69:37:B3:01:57:3F
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       1712A3
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/7e8b3e26cd29db57845f2be334e94a05fee68b9e.roa
Signing time:             Fri 08 Mar 2024 18:54:36 +0000
ROA not before:           Fri 08 Mar 2024 18:54:36 +0000
ROA not after:            Sun 08 Mar 2026 19:54:36 +0000
asID:                     49581
IP address blocks:        2803:7610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512099 (0x1712a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Mar  8 18:54:36 2024 GMT
            Not After : Mar  8 19:54:36 2026 GMT
        Subject: CN=7e8b3e26cd29db57845f2be334e94a05fee68b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:7e:d8:a6:fe:30:8b:27:05:f7:9e:1c:4c:
                    f4:f4:b1:88:94:dc:c1:be:7c:3b:eb:c2:b2:24:b3:
                    34:75:64:4b:11:41:a7:fc:fa:0b:ff:1b:6e:1b:29:
                    0b:ea:52:87:74:f0:21:e5:85:3e:ca:62:19:ef:06:
                    41:6b:76:43:ca:cc:49:4a:86:10:e8:8e:21:fb:7e:
                    ab:26:dc:00:66:91:d5:fc:a1:78:4e:24:26:d8:14:
                    bd:7c:f3:42:e0:71:67:e5:25:05:76:14:af:7e:85:
                    9e:7a:15:26:41:f3:07:ca:57:8d:a8:af:59:94:40:
                    0f:d5:0c:86:d7:d8:f6:ad:e7:89:7b:7b:b5:70:91:
                    e8:ca:07:df:14:52:10:e6:67:0f:8b:e4:c6:d1:dd:
                    45:17:c1:d4:6e:1c:5b:76:75:98:da:33:9b:c7:ec:
                    d8:21:cf:21:ea:f8:cf:cb:e6:f4:cb:8c:77:94:96:
                    0c:a3:11:df:c2:32:3c:17:c9:dc:a1:07:d1:44:5a:
                    72:10:34:bb:22:9f:da:81:9d:35:b8:36:b1:b6:1d:
                    ca:38:7b:08:76:82:95:47:41:08:be:8d:06:ee:78:
                    9e:3d:ec:7b:f2:3d:f2:64:19:f8:e3:7a:4d:a9:52:
                    6a:e6:1a:80:4f:7a:d3:8a:73:b3:8c:80:34:8f:d4:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:27:6C:63:F5:DA:84:8A:CF:29:D0:FC:22:69:37:B3:01:57:3F
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/7e8b3e26cd29db57845f2be334e94a05fee68b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:54:21:47:3b:be:50:98:1e:b6:e1:b2:be:77:26:24:30:
         7a:57:e7:e7:9f:55:e2:d9:3d:9d:bf:91:05:a1:7d:9e:b7:ce:
         f5:8e:8f:08:c9:22:f1:fd:ae:5c:94:71:0f:ca:10:2a:12:ca:
         0e:a1:dc:0b:e9:ff:fc:2c:0b:89:86:cc:0f:3b:93:3b:92:c0:
         be:47:23:4b:16:56:44:46:cd:02:b4:fe:ad:78:13:b3:45:fe:
         c2:a1:51:c4:92:3c:c9:4b:76:28:4d:be:aa:56:4d:b7:1d:a5:
         ac:76:53:f5:ad:9e:79:f0:a1:ca:10:89:0e:47:77:63:04:3a:
         de:46:57:1c:80:12:cb:c1:24:08:91:72:10:dc:44:03:4d:55:
         a8:72:90:e4:1d:d8:a2:47:fa:47:69:e2:9b:68:32:b8:fe:e9:
         d7:84:9c:3e:be:04:4c:73:4e:84:36:26:cb:19:19:0f:2b:1c:
         88:38:cb:62:12:c2:94:6c:a6:c4:22:8f:17:1b:ec:79:93:10:
         cd:52:88:3e:c8:ef:b0:8e:79:6e:f1:5d:64:7e:0f:de:f1:4e:
         cb:3c:d7:75:1a:d9:2f:06:b0:c3:91:6c:ff:d8:7a:87:c0:8d:
         80:69:96:3d:cb:1e:82:b4:6c:29:5a:42:c0:b0:a8:f3:c5:1e:
         24:8a:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----