Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/d1bc1fd6100e16b00de392dfb5bafb082cbf9ca6.roa
File:                     d1bc1fd6100e16b00de392dfb5bafb082cbf9ca6.roa (raw, json)
Hash identifier:          GOThQAbjTyMOrFukZGs7troaHadM/XoYa0Vyfwumv+s=
Subject key identifier:   3A:F6:25:27:DA:13:A5:F0:1A:CC:E2:2E:BC:AD:DF:92:7D:5B:A1:5B
Certificate issuer:       /CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
Certificate serial:       0E3642
Authority key identifier: 47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/d1bc1fd6100e16b00de392dfb5bafb082cbf9ca6.roa
Signing time:             Sat 06 Apr 2024 14:45:59 +0000
ROA not before:           Sat 06 Apr 2024 14:45:59 +0000
ROA not after:            Mon 06 Apr 2026 14:45:59 +0000
asID:                     16509
IP address blocks:        2803:8290:fffa::/48 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931394 (0xe3642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a62334472d90f8f616e01c4fe6b92ab5a455575
        Validity
            Not Before: Apr  6 14:45:59 2024 GMT
            Not After : Apr  6 14:45:59 2026 GMT
        Subject: CN=d1bc1fd6100e16b00de392dfb5bafb082cbf9ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:e5:fa:f4:c7:09:30:06:6e:0e:ab:11:1b:
                    a5:95:4a:b0:c6:59:5f:ab:6c:51:bf:e3:7c:47:a1:
                    de:0c:0e:a4:b6:4a:cf:db:ab:8a:02:0a:69:b8:53:
                    8e:0d:17:2f:b2:f6:c7:55:17:aa:c3:fd:09:dc:d1:
                    dc:de:d0:fb:5f:7b:38:bc:c4:28:16:f7:ef:8f:91:
                    e8:14:09:74:a4:2b:ee:66:48:87:f0:e8:5c:32:fe:
                    43:29:b3:d3:a0:8f:2d:50:e2:3a:0e:9f:6d:90:3a:
                    b3:ec:03:5a:18:65:93:55:dc:c8:10:82:14:41:24:
                    dc:21:a4:4a:55:f5:2c:28:1a:e5:63:5b:63:f9:82:
                    30:f8:cd:b1:19:97:13:b2:89:45:75:8a:a3:1a:5c:
                    11:43:a4:83:bb:bd:b9:0e:a6:60:0c:bb:b3:db:4d:
                    17:ed:71:3e:19:e4:6b:cd:92:a5:0c:3d:9e:79:43:
                    fe:01:e7:a5:85:1a:18:59:fc:31:8e:1f:c6:12:33:
                    0b:1b:95:b0:cb:f5:cd:13:8f:d3:37:4d:d7:84:11:
                    ad:ec:a5:ab:80:b9:e6:43:48:1b:d8:45:80:00:fc:
                    a3:91:3c:ba:50:e4:07:f1:33:da:71:e2:83:df:5b:
                    67:59:50:33:be:0c:57:0b:c9:20:c3:e3:86:e2:f8:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:25:27:DA:13:A5:F0:1A:CC:E2:2E:BC:AD:DF:92:7D:5B:A1:5B
            X509v3 Authority Key Identifier:
                keyid:47:AD:52:32:F0:0E:F2:23:56:BE:67:65:E5:58:13:86:84:E4:F5:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a62334472d90f8f616e01c4fe6b92ab5a455575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/d1bc1fd6100e16b00de392dfb5bafb082cbf9ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76a5b994-83f7-451e-a79d-be17942e228d/0a62334472d90f8f616e01c4fe6b92ab5a455575.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290:fffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:a0:c5:05:0e:f2:cc:bb:13:9f:fd:4d:c8:d9:84:7e:8e:
         f7:61:98:8c:f8:9d:aa:ae:d3:fd:fe:f4:fd:f2:96:2c:d5:27:
         27:cf:28:1a:94:f5:a3:02:7f:25:a4:25:04:d2:00:55:52:5b:
         c8:1b:3d:02:2d:ff:87:4e:84:1c:ce:91:1b:ac:07:29:61:a5:
         ab:eb:bd:c9:27:30:84:5d:32:f4:5d:aa:ad:5d:79:bb:13:49:
         15:1d:1b:ba:65:f3:48:48:d2:6b:b4:34:d6:79:8b:09:2d:8d:
         1d:0a:7a:f3:c2:97:34:05:cf:79:8c:15:2d:f9:68:6c:8b:c4:
         38:e3:6a:01:a6:9b:9a:bd:c3:31:29:57:dc:ea:66:9b:52:94:
         a0:82:6a:16:60:46:26:4b:03:4e:df:a2:51:7c:e2:53:8a:48:
         15:ea:5d:07:cc:a4:e9:fd:83:3e:ea:d1:be:b6:20:8c:da:14:
         f9:c2:1b:77:fc:14:4d:4b:2a:53:8d:22:7c:6d:b2:90:e4:00:
         57:73:75:31:af:a8:c0:6e:30:0f:e3:d1:52:71:ed:04:c5:8f:
         6c:b0:62:e0:11:7c:bd:ba:8a:66:df:b1:3c:9f:67:db:36:ca:
         3d:f3:c2:bf:13:3a:e0:ba:61:26:c1:80:42:19:f4:a8:52:66:
         21:f8:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----