Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/8cdc58882b34cc67959f9828844768458e5d3af3.roa
File:                     8cdc58882b34cc67959f9828844768458e5d3af3.roa (raw, json)
Hash identifier:          hSQNNRtZmzIxUfIXc5T3auZ/5Q9TDq87wG4ISYH1qss=
Subject key identifier:   DA:04:64:92:76:3D:6C:0F:F5:D4:A5:37:23:37:9D:D0:B1:4B:32:EB
Certificate issuer:       /CN=0c52d96df726ea79c974679f2004b57e6211c902
Certificate serial:       01A522
Authority key identifier: B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c52d96df726ea79c974679f2004b57e6211c902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/8cdc58882b34cc67959f9828844768458e5d3af3.roa
Signing time:             Tue 20 Feb 2024 16:09:20 +0000
ROA not before:           Tue 20 Feb 2024 16:09:19 +0000
ROA not after:            Fri 20 Feb 2026 16:09:19 +0000
asID:                     273142
IP address blocks:        2803:2c50::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107810 (0x1a522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52d96df726ea79c974679f2004b57e6211c902
        Validity
            Not Before: Feb 20 16:09:19 2024 GMT
            Not After : Feb 20 16:09:19 2026 GMT
        Subject: CN=8cdc58882b34cc67959f9828844768458e5d3af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:b8:b8:04:ce:62:4c:ff:e1:bc:af:a3:e2:
                    c9:38:b1:25:9d:3c:fc:a3:a5:70:e3:e2:74:18:dd:
                    19:4b:ba:9a:87:dd:ba:87:00:52:83:c9:c2:22:65:
                    cf:a7:82:0b:62:da:58:a5:05:58:7c:5d:8f:cd:6b:
                    dd:c4:6b:17:98:b9:fc:04:c4:87:d5:0b:c5:d2:02:
                    a4:d8:84:fc:1e:a1:26:66:37:c7:cc:d4:fd:6f:0c:
                    f7:2d:e5:31:b7:f4:92:5c:bb:08:bb:46:02:7a:22:
                    33:32:2d:70:b2:03:75:27:f9:41:34:16:26:55:df:
                    1f:7a:a7:86:e5:21:a6:45:a3:33:03:44:ad:5c:e0:
                    79:80:67:0a:1f:54:59:64:90:ed:a9:eb:b8:96:13:
                    7b:86:8a:14:ac:12:19:36:e3:ab:1c:81:e8:18:50:
                    9b:c7:0b:b9:4e:04:f4:6c:ba:60:f9:da:17:8a:f4:
                    6c:4c:78:66:f1:62:e4:ee:a5:17:b9:29:1c:67:e2:
                    e5:3f:b3:ec:a5:20:fb:6c:02:37:35:c7:1e:13:a8:
                    df:e5:4a:43:9e:76:27:41:08:a3:78:6e:a5:9f:ff:
                    78:6f:95:df:8f:0a:73:b7:36:b6:23:19:8f:ef:62:
                    b0:b0:b8:01:48:fc:62:6b:e4:06:4a:e3:30:a6:44:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:04:64:92:76:3D:6C:0F:F5:D4:A5:37:23:37:9D:D0:B1:4B:32:EB
            X509v3 Authority Key Identifier:
                keyid:B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c52d96df726ea79c974679f2004b57e6211c902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/8cdc58882b34cc67959f9828844768458e5d3af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/0c52d96df726ea79c974679f2004b57e6211c902.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:36:3e:2d:57:ac:00:7c:ba:c9:93:50:cf:16:a0:68:b3:
         2d:01:2b:3f:33:02:7a:7e:98:ac:a1:69:ca:48:12:7d:77:19:
         99:3a:33:5b:b1:30:da:3b:46:f6:f9:8e:21:7a:77:ea:fd:17:
         2a:a0:60:28:66:83:21:ac:46:14:ac:57:e0:eb:a1:35:7b:bb:
         3b:4d:ff:9c:49:9d:16:77:e9:52:fc:da:15:58:e5:df:7b:d7:
         ca:cf:15:13:be:f9:93:c7:9f:5f:c2:53:4e:50:85:d3:33:12:
         ee:e1:98:ce:45:b4:6c:40:23:48:f7:87:d7:8e:b9:ea:d0:1f:
         bd:bc:48:48:a2:68:22:43:1c:ad:49:4c:9f:82:0b:f0:8f:1a:
         39:25:f6:8f:45:b0:4e:1b:02:41:6a:ea:02:af:73:6c:dd:eb:
         9e:1e:cd:13:97:28:a5:ce:64:e3:ca:a8:1e:49:41:c1:d2:02:
         0c:b3:81:15:94:7c:df:4e:cb:34:b4:06:7f:a3:00:53:a7:04:
         e7:8e:fb:59:37:05:9f:51:bc:f2:ea:8f:12:f3:b6:06:e5:af:
         95:fa:15:4f:61:1c:43:ec:05:07:c5:3e:bf:47:0e:df:c0:ab:
         fd:a9:4e:4e:c1:a4:3e:ed:e8:57:80:4e:04:14:7b:4c:89:38:
         16:3a:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----