Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/97fa16ce52d3449132ccfad0f264d37793d3368a.roa
File:                     97fa16ce52d3449132ccfad0f264d37793d3368a.roa (raw, json)
Hash identifier:          emMgn6SnKMu06cY4Cvg65is7R2LlisHVtnvAbGuwBac=
Subject key identifier:   44:A3:01:24:3D:F4:02:2B:FF:E4:E7:58:A5:20:35:73:71:37:03:35
Certificate issuer:       /CN=ab2a51c2938850e62c00c0d6049ad278740430af
Certificate serial:       050E75
Authority key identifier: 0E:B9:53:F0:AD:16:F7:45:95:EC:ED:4C:F9:B7:B7:3B:D1:D6:4D:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab2a51c2938850e62c00c0d6049ad278740430af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/97fa16ce52d3449132ccfad0f264d37793d3368a.roa
Signing time:             Thu 15 Feb 2024 14:21:41 +0000
ROA not before:           Thu 15 Feb 2024 14:21:41 +0000
ROA not after:            Sun 15 Feb 2026 14:21:41 +0000
asID:                     14080
IP address blocks:        2801:125::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331381 (0x50e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2a51c2938850e62c00c0d6049ad278740430af
        Validity
            Not Before: Feb 15 14:21:41 2024 GMT
            Not After : Feb 15 14:21:41 2026 GMT
        Subject: CN=97fa16ce52d3449132ccfad0f264d37793d3368a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:e5:5f:ad:64:a6:e8:19:78:5c:81:24:df:
                    8e:b7:da:c4:f8:ac:d2:29:79:03:aa:e2:ec:fa:90:
                    fc:72:96:d4:23:7b:59:4a:b4:d0:ee:d6:b4:61:87:
                    a2:16:ce:06:43:7a:f4:62:b1:e5:f0:8d:a6:83:ed:
                    3e:c4:62:9e:6b:ce:00:f3:a4:bd:6f:21:34:0a:e8:
                    a8:b0:72:03:eb:79:d0:72:84:bf:f4:cd:a5:8b:7a:
                    19:c7:b7:b6:95:21:7e:10:b6:9b:7f:46:7e:3a:89:
                    a7:d9:5f:c5:c3:2e:fb:d0:d8:3d:00:1e:c6:1d:1a:
                    8b:4a:dd:dd:c8:b4:ae:e6:57:cb:64:e9:63:c3:4d:
                    d0:21:30:07:dc:cb:b8:20:2e:15:95:fd:be:d0:1e:
                    5b:f3:34:6e:db:c1:7c:00:43:2a:96:1d:cf:63:6f:
                    cb:30:38:5d:d6:4f:3e:6f:25:eb:e9:b7:65:99:ee:
                    1a:7a:d0:32:3f:9d:ac:f3:50:dd:2a:9d:57:d1:c1:
                    69:7b:d5:f9:02:9c:ea:93:14:9d:a3:bb:c2:11:4e:
                    44:2f:f5:65:ef:68:41:89:d7:c5:2b:99:19:0a:ae:
                    07:9d:0c:9c:cc:66:7c:4b:7f:22:5d:b8:a9:2d:de:
                    0b:ba:a9:df:b0:51:8e:a6:84:07:22:b7:3e:14:05:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:01:24:3D:F4:02:2B:FF:E4:E7:58:A5:20:35:73:71:37:03:35
            X509v3 Authority Key Identifier:
                keyid:0E:B9:53:F0:AD:16:F7:45:95:EC:ED:4C:F9:B7:B7:3B:D1:D6:4D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab2a51c2938850e62c00c0d6049ad278740430af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/97fa16ce52d3449132ccfad0f264d37793d3368a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/ab2a51c2938850e62c00c0d6049ad278740430af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:125::/44

    Signature Algorithm: sha256WithRSAEncryption
         66:80:32:e3:51:96:27:3f:34:b4:06:c1:f4:bf:fd:5a:10:fb:
         67:55:d2:23:97:4c:86:40:1f:5b:1f:64:91:06:a4:4e:d2:95:
         7c:ec:07:83:a1:f0:55:af:c6:a9:e5:4e:74:56:cc:fc:02:f8:
         5e:41:2d:d3:80:72:b5:12:06:65:6d:95:bd:40:db:40:6b:e7:
         31:e1:2a:cd:0f:da:41:34:71:e0:83:a0:e0:f4:ac:8d:30:9c:
         e4:c5:77:a5:3a:ac:a2:c3:8f:e3:08:43:aa:10:3f:e8:8a:4b:
         99:d3:c5:0e:d2:9d:d1:c6:37:ec:31:0d:ef:cc:3c:80:3b:0f:
         74:e5:6b:22:5c:20:1d:07:50:93:7e:6e:11:b5:76:c1:bc:fd:
         3e:3c:c3:1a:c8:10:16:ff:7e:ba:26:c5:24:4c:84:7c:8d:5a:
         f3:9b:dd:a9:ca:1c:1c:26:1d:c7:38:7f:9f:1b:d3:d9:71:94:
         28:fd:6d:cb:69:38:e6:96:3f:f8:d9:b1:9d:1e:b1:48:da:e9:
         ab:c1:18:c8:9e:8b:7f:13:2d:7b:bf:d6:98:da:ee:fb:5b:30:
         7e:7a:ba:80:60:81:9e:1b:de:c9:4f:1c:31:0e:8c:2c:7c:80:
         c4:7f:ba:17:ca:6f:94:52:8b:23:9c:67:01:d3:5e:e3:62:75:
         4c:49:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----