Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/7a6aca73b581eab0a0eb940be413f031aa0cb63e.roa
File:                     7a6aca73b581eab0a0eb940be413f031aa0cb63e.roa (raw, json)
Hash identifier:          4dXFKEwLV6YrT/2oV8XTVcu/d8EDWvWc6VNNFfz0NjA=
Subject key identifier:   E2:0D:6B:4D:B7:DF:1E:93:D1:F0:95:C1:D9:BE:6A:59:71:7B:69:A2
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       28C093
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/7a6aca73b581eab0a0eb940be413f031aa0cb63e.roa
Signing time:             Sun 07 Apr 2024 02:11:24 +0000
ROA not before:           Sun 07 Apr 2024 02:11:24 +0000
ROA not after:            Tue 07 Apr 2026 02:11:24 +0000
asID:                     52423
IP address blocks:        2803:6900:582::/48 maxlen: 48
                          2803:6900:627::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2670739 (0x28c093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Apr  7 02:11:24 2024 GMT
            Not After : Apr  7 02:11:24 2026 GMT
        Subject: CN=7a6aca73b581eab0a0eb940be413f031aa0cb63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:85:12:a8:4e:d7:a0:54:c4:7f:3f:2f:02:
                    17:c1:78:72:a1:50:e6:d2:f2:13:7a:a8:06:5a:21:
                    65:08:7f:c6:01:7a:80:a9:70:f6:0e:8c:4c:a9:83:
                    d7:ab:bb:07:40:f6:79:c7:4b:ad:b1:5e:ab:29:50:
                    dd:62:fc:d6:77:1a:4e:78:d5:5c:f5:87:f1:04:81:
                    3a:fc:a0:03:4f:f4:b3:93:99:56:c6:ca:b8:96:35:
                    18:27:71:cd:cc:0e:6d:cb:dd:30:33:b8:1d:46:4c:
                    20:c9:8c:e6:be:d4:bd:64:05:b2:80:ee:59:e4:d5:
                    4c:17:18:06:82:af:39:00:f2:08:a8:51:1c:52:f3:
                    e2:19:3d:d4:f1:12:d1:e2:94:b5:b2:52:ba:91:a0:
                    f6:ab:57:86:46:2c:85:36:9a:8e:cf:52:14:f0:70:
                    a8:39:db:bc:55:a2:aa:1a:57:98:3c:f2:bc:c4:29:
                    78:08:db:0d:e6:f4:f0:fc:d0:d3:6b:a8:6f:86:5e:
                    af:e3:36:19:cd:47:cc:c2:f7:67:bc:da:7f:45:8e:
                    c0:a5:c4:7d:f0:17:e9:d9:f2:43:4e:4b:2e:dd:44:
                    ca:01:6b:b8:df:f6:20:02:c7:d3:42:ce:a7:5d:33:
                    6b:1a:d8:c3:da:65:a6:d9:c4:14:8a:ec:1b:44:50:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:6B:4D:B7:DF:1E:93:D1:F0:95:C1:D9:BE:6A:59:71:7B:69:A2
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/7a6aca73b581eab0a0eb940be413f031aa0cb63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:582::/48
                  2803:6900:627::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:42:31:56:b9:72:dd:d9:f0:3e:b0:63:7b:dd:ab:1e:c3:2d:
         28:5c:79:59:6a:46:91:f5:ee:cb:7d:e0:ed:10:f5:4b:ce:69:
         1c:80:15:7c:a0:97:a1:d3:fd:6b:12:cc:6e:e8:4c:f6:34:52:
         28:cc:15:1e:d0:5a:c9:3d:fa:82:44:70:e4:c5:20:20:f2:eb:
         41:f9:41:5e:16:35:95:e6:9f:73:85:a9:c6:95:ae:30:90:74:
         d7:f7:0c:e0:8c:6a:ce:dd:a4:8e:a9:b5:9b:a8:5f:54:f2:f2:
         3c:46:e2:31:cd:4a:d4:57:fe:ae:cc:27:2e:1d:fb:ed:ad:fa:
         d7:e1:57:1f:d1:74:c1:42:30:d2:ed:00:70:52:75:2b:c6:0a:
         e6:69:22:9d:da:cc:5c:04:c1:05:e8:8f:67:24:84:70:51:aa:
         82:52:f0:5c:29:97:65:a6:ce:91:5b:fa:44:d0:a3:77:e3:3c:
         f9:bb:cc:e6:27:1b:fc:3b:38:7e:86:1c:99:4b:7e:14:b6:b4:
         6c:94:44:d4:49:a5:99:00:1f:cf:e7:a3:b8:1a:87:0e:15:51:
         e1:df:73:61:aa:ca:be:69:5a:dc:1d:dd:46:02:4b:df:b1:50:
         72:a4:13:df:7b:07:fb:e8:9f:03:b4:dc:57:e6:73:ba:24:09:
         5a:c4:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----