Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/2ee02167ec874ad7ee526ee5e8dfea61107ddf21.roa
File:                     2ee02167ec874ad7ee526ee5e8dfea61107ddf21.roa (raw, json)
Hash identifier:          8tNHisCdtDEfyzsNk01nO8fAKCRAGxrUguLSqi5iXas=
Subject key identifier:   4C:15:75:7E:70:63:EC:B1:32:29:E3:70:AF:58:31:32:15:69:29:98
Certificate issuer:       /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Certificate serial:       1EE682
Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/2ee02167ec874ad7ee526ee5e8dfea61107ddf21.roa
Signing time:             Wed 10 Jan 2024 19:59:48 +0000
ROA not before:           Wed 10 Jan 2024 19:59:48 +0000
ROA not after:            Sat 10 Jan 2026 19:59:48 +0000
asID:                     267798
IP address blocks:        2803:3fa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025090 (0x1ee682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
        Validity
            Not Before: Jan 10 19:59:48 2024 GMT
            Not After : Jan 10 19:59:48 2026 GMT
        Subject: CN=2ee02167ec874ad7ee526ee5e8dfea61107ddf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:b0:fd:fc:4c:89:dc:07:8d:ed:1c:87:59:
                    0c:d3:81:4e:ba:b8:f8:77:c3:94:5f:69:b5:5b:b5:
                    7f:be:40:0e:f2:f4:fa:86:15:71:1f:05:f9:61:e1:
                    69:6c:58:bf:86:41:2c:f6:74:58:fd:79:c4:82:45:
                    a9:d2:56:f6:dc:89:88:29:63:d1:a7:4f:b5:23:f7:
                    f7:c0:2b:80:5d:25:ce:e8:25:9e:31:8c:c9:a5:e3:
                    9e:3b:4b:ae:c1:86:be:20:07:57:4e:26:53:28:36:
                    f2:10:d9:c3:38:84:e0:58:05:a0:20:86:9e:8d:cd:
                    b2:c5:50:e7:6d:88:d5:aa:90:62:8a:22:7b:9c:9f:
                    ad:e5:33:0e:62:aa:e0:5c:f9:4c:3a:7a:63:ea:f0:
                    e2:7a:36:6c:cc:43:5e:ea:e5:10:a7:92:ab:82:f7:
                    14:03:16:ca:0e:f7:a8:ad:94:52:91:eb:d6:81:b0:
                    52:f9:78:8e:42:95:29:85:00:52:f5:8e:2b:5e:ce:
                    8f:51:4e:3b:76:fb:ba:95:bf:5b:da:0a:c2:44:b1:
                    a7:4b:ff:7b:ac:ef:83:8c:46:f1:9c:fc:39:e1:3d:
                    80:7a:aa:53:2c:1e:1f:a2:5d:1a:5f:85:6a:e2:61:
                    d5:2b:f1:34:ad:5b:0f:90:4a:2d:d7:dd:c3:2c:d0:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:75:7E:70:63:EC:B1:32:29:E3:70:AF:58:31:32:15:69:29:98
            X509v3 Authority Key Identifier:
                keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/2ee02167ec874ad7ee526ee5e8dfea61107ddf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:b6:b3:17:f1:06:69:75:3f:fa:66:ad:8b:88:13:8b:72:
         bb:66:f2:b2:4c:85:60:70:79:54:c6:b7:d5:07:78:f8:f7:3e:
         9d:57:44:63:e6:f2:89:c9:ad:3f:be:f8:9f:c6:73:fa:36:9f:
         93:40:49:96:e7:85:5e:20:ff:7c:ea:30:09:37:b5:70:1f:b0:
         78:18:42:c1:a9:a4:5b:78:78:3a:22:35:4b:8c:4d:fe:f3:c5:
         0a:7c:d0:ce:eb:b5:fa:3c:9e:eb:5a:2c:26:df:da:17:89:af:
         49:8c:97:53:a6:aa:c4:a4:2f:87:7d:63:e3:4b:2c:5b:98:2b:
         06:07:cf:d6:b0:1f:82:f1:0c:99:eb:a4:44:29:ec:d7:9d:d3:
         36:82:e4:36:a3:3d:7a:a1:25:ad:60:7d:b1:4d:0f:b9:0a:39:
         f0:97:e9:8a:d6:a3:c1:c0:a8:ee:c0:73:f2:e4:07:f7:bf:32:
         ae:36:8f:51:12:a8:e9:c0:b3:b7:d6:2e:79:1a:b0:f9:8a:f0:
         cf:b4:f7:b7:3d:fa:6a:25:b8:f8:50:ca:71:91:16:77:40:bf:
         dd:2e:22:3a:63:e2:8b:59:ae:8c:54:30:10:18:32:d7:d5:cb:
         56:2d:20:89:b9:5b:3e:71:73:0d:b0:96:01:f2:24:18:54:3a:
         50:0e:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----