Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/deb52d0a3f439146de22b8ce7329d4c9dc1b6750.roa
File:                     deb52d0a3f439146de22b8ce7329d4c9dc1b6750.roa (raw, json)
Hash identifier:          yULjN+0FhQb+B4djzjQivp7PKFDmCYF7MJsxwrVviLk=
Subject key identifier:   C5:29:93:86:EB:69:83:46:D4:B4:D1:5D:B3:32:C1:D4:FA:BE:C7:B0
Certificate issuer:       /CN=f49a28afd9e7d55240140db2ac13bc606d7fbac5
Certificate serial:       24D22F
Authority key identifier: 72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/deb52d0a3f439146de22b8ce7329d4c9dc1b6750.roa
Signing time:             Mon 02 Oct 2023 15:18:33 +0000
ROA not before:           Sun 01 Oct 2023 15:18:32 +0000
ROA not after:            Thu 02 Oct 2025 16:18:32 +0000
asID:                     27997
IP address blocks:        2803:f820::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413103 (0x24d22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49a28afd9e7d55240140db2ac13bc606d7fbac5
        Validity
            Not Before: Oct  1 15:18:32 2023 GMT
            Not After : Oct  2 16:18:32 2025 GMT
        Subject: CN=deb52d0a3f439146de22b8ce7329d4c9dc1b6750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:89:ca:5c:af:63:27:c4:c4:df:17:a3:41:
                    cb:95:3a:9b:33:bf:48:0d:c1:f0:52:b7:ff:72:3d:
                    85:c2:23:f8:cf:fb:00:2c:b0:73:1b:ff:3e:02:aa:
                    04:60:69:6a:ea:a2:5d:5c:e6:ec:e1:e8:7b:b1:ee:
                    06:ce:8a:a6:a2:22:7f:91:65:67:6e:2f:74:8b:d0:
                    bc:d9:08:f3:7e:dd:49:12:8c:f2:b2:b5:cf:79:8b:
                    af:0d:b9:14:a4:dd:8c:17:ee:76:6f:ec:c7:a8:15:
                    1c:9c:2d:dd:4f:d6:ea:a0:26:2b:0b:ed:50:32:e8:
                    36:af:f1:c0:cd:80:f7:02:c8:2f:8f:3d:5c:e3:32:
                    bb:a5:f6:7c:f1:53:59:25:c7:df:79:3c:a8:1c:f6:
                    96:9e:de:a8:42:0b:91:d7:b1:8f:98:1f:99:46:42:
                    98:66:9b:51:57:3d:27:1a:84:27:7f:39:ea:a3:e0:
                    47:a4:91:fd:f7:7e:41:f3:d4:4c:69:79:d0:26:67:
                    ba:4e:fc:19:85:22:6f:15:eb:45:b0:64:e0:63:93:
                    94:ce:ae:8f:8c:d9:16:99:97:ef:d7:c2:1b:1e:ee:
                    32:57:22:1f:14:d0:c0:27:14:80:da:bf:9a:b1:8f:
                    d8:60:45:7c:34:06:2d:a8:c2:c1:a1:31:e2:3a:c0:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:93:86:EB:69:83:46:D4:B4:D1:5D:B3:32:C1:D4:FA:BE:C7:B0
            X509v3 Authority Key Identifier:
                keyid:72:2B:23:1D:D6:88:5D:32:49:A5:BE:74:94:A1:62:4A:A2:52:AF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f49a28afd9e7d55240140db2ac13bc606d7fbac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/deb52d0a3f439146de22b8ce7329d4c9dc1b6750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8263b2d9-3ee5-4317-9cdf-08e90e77efbc/f49a28afd9e7d55240140db2ac13bc606d7fbac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f820::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:34:cf:30:a4:63:7e:06:98:c6:f5:7a:dd:0f:a6:e2:a8:fa:
         0a:e7:4e:4e:1a:15:61:cb:95:46:06:e3:97:7e:3d:9d:a5:d4:
         d0:fd:83:c8:3e:a6:2a:4c:3c:c0:92:de:04:e5:29:8c:d1:03:
         08:68:e7:3c:94:60:ec:7a:c0:f0:1b:20:dc:43:b1:64:00:b0:
         65:20:92:28:24:fa:60:23:f7:55:60:21:88:4b:52:31:f3:c7:
         c0:a0:89:0f:98:7a:4b:60:2d:07:ff:19:1a:79:ab:5d:08:07:
         93:18:42:a4:4e:3a:b1:3d:99:e8:5d:65:4e:18:52:02:5b:66:
         5c:f3:eb:76:81:40:24:3d:c7:a1:bb:4c:d9:37:80:2f:0a:01:
         21:5f:68:e9:dc:8b:c7:1d:0c:12:e5:c2:ff:1f:bd:e5:22:5f:
         b8:4d:0e:5c:31:fa:f1:c5:b9:e5:6f:dc:ac:58:29:11:ae:ff:
         06:2a:d3:b2:8d:56:45:d1:38:23:65:ba:ab:fd:cf:8b:01:b1:
         4c:21:f7:eb:77:28:d6:7e:6b:4e:fd:c0:da:6a:e3:40:57:27:
         0d:8d:19:89:ca:e9:1a:21:a3:ad:41:16:64:43:9b:8f:f2:80:
         a4:22:fa:1d:1d:23:06:4d:33:91:52:54:eb:82:21:76:eb:cc:
         7f:49:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----