Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/d5ef2395b9431e12a7917d11b6100f8a60a5de13.roa
File:                     d5ef2395b9431e12a7917d11b6100f8a60a5de13.roa (raw, json)
Hash identifier:          4kRWKLMyfFZMQCYfjbby29y2CSCkQBZQdhJKIzBh3oA=
Subject key identifier:   E7:FE:04:83:49:22:C1:89:C8:35:28:2F:1C:56:9F:A1:C1:59:05:E6
Certificate issuer:       /CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
Certificate serial:       2247B1
Authority key identifier: 8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/d5ef2395b9431e12a7917d11b6100f8a60a5de13.roa
Signing time:             Wed 05 Jul 2023 02:05:22 +0000
ROA not before:           Tue 04 Jul 2023 02:05:22 +0000
ROA not after:            Sat 05 Jul 2025 02:05:22 +0000
asID:                     52468
IP address blocks:        2803:6ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246577 (0x2247b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
        Validity
            Not Before: Jul  4 02:05:22 2023 GMT
            Not After : Jul  5 02:05:22 2025 GMT
        Subject: CN=d5ef2395b9431e12a7917d11b6100f8a60a5de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:62:b5:53:e9:4c:a1:63:6a:8c:fb:96:c1:
                    28:8b:76:e6:85:b1:ee:68:8c:12:99:57:ad:1d:34:
                    67:58:3b:a2:f7:3c:9f:6a:12:1a:cf:64:2e:c0:ce:
                    b5:dc:08:50:dd:8d:85:14:90:a5:fd:41:1a:c7:a5:
                    3d:88:a3:ca:7d:ed:b0:a8:88:1d:0f:57:e7:90:a8:
                    91:a3:7b:b9:06:ca:78:38:b1:ce:ba:fe:45:8e:30:
                    e3:10:c3:bd:3a:62:62:a7:80:d2:a6:92:93:98:38:
                    b1:a6:7a:da:35:eb:7c:88:d0:d2:76:f6:18:97:41:
                    b5:e4:24:8d:fe:36:ae:36:cc:81:e7:4a:06:0e:f3:
                    3b:4e:2f:ef:68:0f:03:2b:c3:b9:be:f8:71:0f:c0:
                    b9:64:5e:92:fd:96:7f:5a:e9:ec:a0:06:de:1d:44:
                    df:92:38:53:0d:4f:34:32:4a:b0:b7:f7:20:91:8d:
                    d4:71:55:20:45:15:2f:dd:e6:ca:b3:e1:2c:29:9e:
                    b3:aa:75:98:65:cb:21:16:c8:e8:af:79:4f:c9:54:
                    49:e9:8e:9e:c7:60:8f:ab:6d:0b:d2:58:8d:90:17:
                    44:4e:a9:e5:b5:82:f2:76:2c:e6:81:84:99:65:51:
                    0b:05:0a:73:ff:87:f7:03:45:e3:ab:fc:e0:f6:f2:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:04:83:49:22:C1:89:C8:35:28:2F:1C:56:9F:A1:C1:59:05:E6
            X509v3 Authority Key Identifier:
                keyid:8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/d5ef2395b9431e12a7917d11b6100f8a60a5de13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:7f:5e:a6:af:9e:26:48:73:5a:81:dd:7f:8c:6d:e1:f0:
         b7:d7:1b:51:b1:c6:94:5e:f7:bc:3d:22:4b:dd:85:b1:a6:89:
         97:6f:3a:eb:7c:98:92:c1:3b:ef:99:0d:e7:cf:18:ed:fa:ca:
         2c:2e:b3:9a:ec:f8:dd:12:df:f6:19:3f:8e:bd:c6:8a:85:e7:
         05:4b:3a:88:5f:46:70:8c:d7:b1:2d:ea:82:f6:d7:24:5c:e1:
         2f:ce:33:0c:2f:a1:5f:53:0b:6e:ad:7f:81:b8:d1:a5:fd:8c:
         88:f6:c0:ae:9f:d3:77:66:b5:90:fc:b8:33:85:77:03:1e:a0:
         0d:4d:44:92:39:1c:37:7f:97:96:a0:87:f5:94:97:81:09:56:
         a7:2e:9b:34:a1:be:d5:13:33:ff:bb:10:c3:a5:cd:e7:98:c2:
         2a:11:c9:13:ef:31:67:3e:46:df:db:f5:58:fd:6b:c7:ae:d0:
         aa:fc:62:3c:2e:d2:ad:4b:fc:70:e7:de:f1:26:89:bf:4b:1c:
         59:d7:de:f2:f6:39:59:d7:45:eb:14:f0:28:b1:b7:b0:92:49:
         08:90:e8:e3:cc:59:c6:ea:f0:48:ff:27:a7:45:dc:c8:4e:d3:
         26:4f:f8:8e:c5:a4:dc:a8:21:1a:bc:02:12:e5:5d:42:80:b6:
         19:1d:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----