Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/138ffe7311da635f843077679e4a01d36fa02ee7.roa
File:                     138ffe7311da635f843077679e4a01d36fa02ee7.roa (raw, json)
Hash identifier:          0HT8wDoWJrqGS8HhFggDpatlS4xhhu1DClBsGTnH/8c=
Subject key identifier:   31:5E:9D:DB:3F:26:6B:DC:D1:D9:EB:6A:12:11:78:98:26:55:BA:8A
Certificate issuer:       /CN=21946617726999f473e397ce5a1cff1c13cd4402
Certificate serial:       0B864C
Authority key identifier: FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/138ffe7311da635f843077679e4a01d36fa02ee7.roa
Signing time:             Mon 29 May 2023 17:10:24 +0000
ROA not before:           Sun 28 May 2023 17:10:24 +0000
ROA not after:            Thu 29 May 2025 17:10:24 +0000
asID:                     271929
IP address blocks:        2803:9a10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755276 (0xb864c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21946617726999f473e397ce5a1cff1c13cd4402
        Validity
            Not Before: May 28 17:10:24 2023 GMT
            Not After : May 29 17:10:24 2025 GMT
        Subject: CN=138ffe7311da635f843077679e4a01d36fa02ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:f0:2c:51:e4:6d:ea:89:6a:8a:ac:e0:6a:
                    28:ed:f1:69:72:7a:f7:c0:df:bd:2c:ee:fa:53:31:
                    63:5a:ac:87:ae:91:b7:22:1f:9a:eb:7e:d2:b3:2b:
                    be:cc:f1:f6:41:fe:29:93:2b:0b:e3:a8:2f:f2:c4:
                    e9:0d:40:78:68:86:fa:7e:95:fe:4a:42:87:44:c6:
                    0b:bc:99:fd:0d:5e:5f:db:f9:c9:d4:ad:d3:80:a3:
                    ca:c4:d6:29:e8:6f:52:5b:17:a4:fe:60:97:c8:e4:
                    08:9d:f7:42:d4:cd:9f:bf:29:fe:d1:ed:2a:c4:71:
                    25:b4:2e:f5:7c:08:71:8d:61:b5:a6:16:09:c6:77:
                    b9:1c:e2:0f:d6:94:fe:32:2b:e1:86:bc:14:f8:85:
                    3e:12:1b:b2:62:4e:25:b0:8a:35:c8:00:17:d8:f1:
                    a3:00:95:0e:f3:71:4c:96:ba:bb:32:0b:c0:83:50:
                    ac:59:18:4b:cd:2e:d5:bf:c7:d6:79:5c:af:aa:80:
                    76:12:7f:12:4b:98:49:a2:ef:64:7b:84:2d:09:63:
                    ef:be:33:04:51:53:d8:70:18:1b:c7:b0:0b:57:56:
                    ba:39:88:12:ba:2b:fb:f2:be:ee:f3:76:26:29:b7:
                    08:82:11:8e:a8:fb:50:54:58:94:9d:8e:a7:b4:6d:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5E:9D:DB:3F:26:6B:DC:D1:D9:EB:6A:12:11:78:98:26:55:BA:8A
            X509v3 Authority Key Identifier:
                keyid:FE:70:E5:61:89:29:F5:82:A9:73:EE:E9:55:24:7C:7F:A6:79:37:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21946617726999f473e397ce5a1cff1c13cd4402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/138ffe7311da635f843077679e4a01d36fa02ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c29b944-bd55-4110-af0d-decc461309dd/21946617726999f473e397ce5a1cff1c13cd4402.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:24:2a:89:1c:05:43:f8:45:53:b1:71:97:d2:1b:58:dd:05:
         d1:36:90:6e:a0:d8:c4:44:b2:7b:7a:e0:43:5c:2a:22:87:03:
         1c:a7:fe:90:e9:08:3a:c8:6e:7a:aa:03:bd:6b:e1:64:41:40:
         3c:b1:7c:67:54:49:c9:e8:1c:a3:b9:18:b8:94:40:6f:93:18:
         43:31:31:f8:95:41:71:cc:68:47:75:57:dc:86:83:98:9f:f3:
         4f:d9:08:9c:6e:3a:de:84:52:00:3e:16:4e:73:aa:c1:2f:2b:
         a3:8c:72:31:0c:8e:3c:cc:01:13:9e:84:34:57:bc:32:92:61:
         f0:04:ba:7d:e6:cd:21:b1:5b:41:f7:d3:05:08:7b:a5:cf:56:
         f0:f7:58:e8:32:02:25:b3:8d:4d:46:f3:ee:5f:f8:ec:d2:35:
         66:fa:81:96:81:1c:8a:36:89:dc:e9:c3:27:f1:51:72:62:cd:
         8f:39:07:c7:2a:ba:a7:7a:31:fa:71:ad:af:29:ab:f0:f6:0d:
         c8:6d:cb:73:d8:19:2b:82:37:2f:3e:ac:39:f9:9c:2e:ff:9c:
         30:94:b1:f2:01:9c:7a:e4:3e:76:c6:91:40:12:6a:13:56:5e:
         10:8e:5c:6b:a9:aa:dc:38:41:33:29:74:0c:72:81:72:84:d8:
         f2:79:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----