Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/230624880749f579bf6096fb1adb70ad7a64ca86.roa
File:                     230624880749f579bf6096fb1adb70ad7a64ca86.roa (raw, json)
Hash identifier:          kAtenSzFP9OnEAf7I35EBxp3+UGMcBJdMHaV1MnLqjc=
Subject key identifier:   16:CC:36:04:8A:44:87:49:86:F0:A4:B5:FF:AF:A2:2A:75:8C:60:2A
Certificate issuer:       /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial:       07C1F0
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/230624880749f579bf6096fb1adb70ad7a64ca86.roa
Signing time:             Fri 01 Mar 2024 13:54:58 +0000
ROA not before:           Fri 01 Mar 2024 13:54:57 +0000
ROA not after:            Sun 01 Mar 2026 13:54:57 +0000
asID:                     269836
IP address blocks:        2803:7c60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508400 (0x7c1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
        Validity
            Not Before: Mar  1 13:54:57 2024 GMT
            Not After : Mar  1 13:54:57 2026 GMT
        Subject: CN=230624880749f579bf6096fb1adb70ad7a64ca86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:3c:77:29:3e:b0:93:fb:d2:87:a5:65:c1:
                    60:38:9f:e8:86:b0:b9:3e:a2:d6:d0:94:63:38:27:
                    1b:ea:30:95:67:40:b0:2e:d1:80:c0:8e:28:f6:7b:
                    31:c0:8a:a6:d4:19:a8:29:64:eb:cd:08:cb:5c:96:
                    cd:71:de:64:7f:8e:f3:a9:c0:2e:52:15:4d:28:c7:
                    a3:26:59:93:19:e9:db:7c:74:5c:85:48:9c:3b:3f:
                    70:a6:d9:f6:04:a4:a1:31:58:d0:5f:f6:f8:90:a5:
                    25:fa:ef:e9:f3:a1:cb:ef:eb:60:e7:f1:44:ae:92:
                    a1:bf:a5:3b:59:50:1d:30:ba:6c:a7:0e:42:25:46:
                    2e:7a:31:fc:95:bd:10:77:38:af:c6:c1:fe:99:bc:
                    c3:1c:0e:4c:d4:db:bb:61:13:fe:a5:c8:65:42:9f:
                    9a:1f:b5:07:66:6c:a5:6e:d9:ff:5c:c8:db:c1:73:
                    07:56:ab:b7:b1:fe:34:ae:42:17:4a:15:a6:ab:7b:
                    de:12:9b:33:9e:cb:86:da:85:22:96:33:3c:23:cb:
                    7e:c7:ea:64:a0:b7:21:bf:60:83:71:ec:30:cd:ca:
                    db:92:ed:c8:0f:2a:a5:86:97:4a:99:61:6a:0e:a4:
                    18:67:81:0a:8c:8c:04:df:c9:51:a4:08:64:a1:07:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:36:04:8A:44:87:49:86:F0:A4:B5:FF:AF:A2:2A:75:8C:60:2A
            X509v3 Authority Key Identifier:
                keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/230624880749f579bf6096fb1adb70ad7a64ca86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:ae:55:e4:44:c0:55:c7:23:a0:a6:a3:fe:f1:af:4c:0b:
         3d:8f:7a:8f:ec:28:15:dd:0d:af:47:fc:11:80:49:26:c8:a6:
         b5:5f:85:2e:66:13:f2:85:56:80:66:5d:df:10:b3:4a:6f:10:
         14:f2:1b:90:1c:7d:46:01:38:13:cf:e4:a2:e5:05:6e:e6:87:
         d6:f6:c2:24:ca:cc:46:dd:71:5f:fc:97:6d:aa:bf:b4:a7:4f:
         8a:57:9a:75:54:4b:45:d9:9c:2f:f9:dc:49:fa:eb:91:e2:0a:
         fd:82:2d:b5:66:97:0c:39:3d:f7:45:fa:98:24:14:04:c5:f5:
         f0:ff:90:85:35:60:f2:00:68:79:12:b0:d5:04:bc:2b:4b:7d:
         b9:b0:2c:b8:aa:c6:44:1a:b7:31:2c:26:3f:5d:5b:cc:53:11:
         b7:9e:88:23:b2:14:bd:7a:21:6a:2a:95:ba:c8:7f:d6:fd:01:
         ad:96:12:67:62:59:f9:b8:1d:90:9c:31:1b:6b:b5:f5:ed:cf:
         d0:ea:b4:9a:69:52:e5:18:94:f9:37:72:70:ee:78:72:c4:ca:
         88:80:70:dc:0c:45:dc:dd:c5:92:8e:1c:8c:21:cc:2d:85:4a:
         f4:ce:e0:67:8e:2e:f8:07:45:90:ad:ab:63:ba:43:7a:73:b7:
         95:0e:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----