Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e32eceaa0931eba6ce3bf1221b9c8c75e8e2cf97.roa
File:                     e32eceaa0931eba6ce3bf1221b9c8c75e8e2cf97.roa (raw, json)
Hash identifier:          A93Ci6kQuVl+l0l7AXU7Grpi5Rz89xJ5aR/YnGrhM+0=
Subject key identifier:   B8:69:74:C3:13:0D:54:70:4B:87:15:77:42:5A:89:20:33:75:55:28
Certificate issuer:       /CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
Certificate serial:       1FA493
Authority key identifier: 55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e32eceaa0931eba6ce3bf1221b9c8c75e8e2cf97.roa
Signing time:             Sun 14 May 2023 00:33:50 +0000
ROA not before:           Sat 13 May 2023 00:33:50 +0000
ROA not after:            Wed 14 May 2025 00:33:50 +0000
asID:                     267881
IP address blocks:        2803:2a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073747 (0x1fa493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Validity
            Not Before: May 13 00:33:50 2023 GMT
            Not After : May 14 00:33:50 2025 GMT
        Subject: CN=e32eceaa0931eba6ce3bf1221b9c8c75e8e2cf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:42:70:3d:14:c0:38:4b:fc:fd:49:ff:d3:
                    d2:2f:5e:8f:29:33:4d:2d:d7:99:62:99:e5:09:42:
                    44:8e:aa:2b:d8:ee:a2:d8:6f:ca:22:08:ab:45:6c:
                    4e:e3:af:08:3d:a8:50:64:ce:46:83:47:a2:65:56:
                    52:95:76:38:86:bf:70:74:0f:5d:54:33:a6:32:15:
                    25:0a:93:3f:aa:f1:98:f2:4e:58:52:3f:69:9a:91:
                    21:8b:13:0b:14:62:ea:ee:ec:a4:61:56:b8:8e:d5:
                    e2:3d:be:dc:18:06:67:84:48:b5:23:4e:45:96:b5:
                    c0:5a:f1:63:6f:d3:84:7e:d6:db:d5:8c:3a:f3:af:
                    06:d3:a8:b0:be:b6:91:3a:dd:fc:ca:e5:63:98:63:
                    d8:d5:25:0e:c7:f0:aa:ff:8f:de:40:34:89:64:2b:
                    f2:1c:f2:12:31:41:76:b9:a5:05:89:3f:5f:d2:ee:
                    28:05:9b:23:99:c7:aa:90:11:73:f8:fd:c9:b7:e2:
                    83:5c:87:85:a1:56:ff:fb:a2:d1:36:d6:a3:72:34:
                    08:25:81:19:19:10:a6:58:52:36:08:fb:96:86:2a:
                    e7:25:95:15:b6:fe:d5:52:3c:58:71:46:5f:6e:b3:
                    26:d5:88:d1:70:67:63:48:a2:df:f6:28:7e:b2:b6:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:69:74:C3:13:0D:54:70:4B:87:15:77:42:5A:89:20:33:75:55:28
            X509v3 Authority Key Identifier:
                keyid:55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e32eceaa0931eba6ce3bf1221b9c8c75e8e2cf97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:4b:2e:e0:d5:f7:0e:6b:80:18:42:3c:1d:ec:d0:8a:07:
         cb:bf:2a:3d:20:d1:ee:cf:41:92:b7:bd:6d:62:82:ec:6d:5d:
         77:78:bf:90:47:28:b2:a0:59:27:80:3f:4f:d0:83:df:d7:59:
         6a:6d:52:54:ba:ad:cc:6b:20:2f:2c:52:0c:cc:de:24:a3:27:
         97:01:de:13:7f:37:54:4d:78:01:f0:55:2e:8d:5b:c9:5f:8b:
         92:66:09:a4:14:2c:3f:0d:3d:a7:c2:13:3d:7d:35:f3:d9:82:
         cd:d9:b6:d9:8c:fb:0e:5a:46:b4:31:d7:cc:ab:11:a8:cb:91:
         40:d5:86:2d:ef:65:5c:a5:6d:d0:4d:d6:d3:7c:2d:98:9e:15:
         f3:60:03:55:73:34:58:c6:06:d5:35:e6:a6:c7:76:1e:b8:e5:
         2c:26:b6:f7:a4:8c:10:ce:fc:b3:16:a0:64:6b:ca:be:ac:05:
         14:d2:b5:ed:8b:ed:ee:25:ce:7d:a3:88:f5:0a:26:89:42:14:
         56:92:93:9a:9a:12:2d:9c:28:0f:6b:7b:0c:33:38:6a:6b:13:
         ad:2a:75:34:ee:eb:06:44:48:02:02:63:2d:0d:fd:0c:c1:db:
         4f:36:d1:4a:61:41:07:5b:74:5c:5f:b1:0a:4c:49:a3:01:2f:
         ba:26:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----