Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/941cc7b7cd376cb4281b6c465456875012c0a16c.roa
File:                     941cc7b7cd376cb4281b6c465456875012c0a16c.roa (raw, json)
Hash identifier:          bfmW06TSBmrg1xRTSscirsQXhTT7AdVJn1gt1aT2VPA=
Subject key identifier:   A2:47:EB:EC:CD:C7:1F:FE:7C:1F:50:B5:ED:9B:30:FB:A9:20:5F:28
Certificate issuer:       /CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
Certificate serial:       23597E
Authority key identifier: 27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/941cc7b7cd376cb4281b6c465456875012c0a16c.roa
Signing time:             Thu 12 Oct 2023 18:09:10 +0000
ROA not before:           Wed 11 Oct 2023 18:09:10 +0000
ROA not after:            Sun 12 Oct 2025 18:09:10 +0000
asID:                     264825
IP address blocks:        2803:dda0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316670 (0x23597e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8
        Validity
            Not Before: Oct 11 18:09:10 2023 GMT
            Not After : Oct 12 18:09:10 2025 GMT
        Subject: CN=941cc7b7cd376cb4281b6c465456875012c0a16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:eb:db:93:9f:a1:b4:c6:8b:9a:04:0d:ef:
                    32:98:d0:8a:b4:8f:fd:4d:47:4a:54:b5:be:96:2f:
                    0a:8d:d3:53:5e:84:b2:a4:d7:b6:df:1d:2e:68:a4:
                    b6:85:91:e5:b7:c3:d9:ea:25:83:c8:ff:b1:7a:50:
                    ea:c4:65:5e:25:f2:60:b5:ef:ed:82:c3:88:e0:03:
                    0c:34:74:64:b9:2c:fd:a9:bb:04:ff:89:64:04:e6:
                    ec:a3:a5:ec:80:7b:a6:0c:eb:65:b3:41:79:cc:99:
                    a4:32:12:bf:51:03:20:a7:9e:46:2e:16:0f:57:6d:
                    44:6a:f3:06:8e:27:3e:95:86:27:58:75:87:ec:89:
                    e9:fa:b9:a2:e9:35:95:24:b9:73:10:b2:14:f3:2b:
                    38:80:b1:94:e3:71:12:e6:fc:cc:54:24:13:ae:89:
                    cc:bb:11:31:53:c6:c9:2a:ae:d4:08:67:cd:6f:40:
                    b3:79:d2:85:8e:25:ae:62:e2:d8:38:74:93:55:14:
                    1a:36:15:43:07:97:3a:e6:d9:cf:99:54:5a:09:17:
                    d1:fa:f3:3f:a5:81:e0:bb:2d:b6:00:60:e2:e3:36:
                    99:0e:63:06:20:16:d0:01:7f:25:bc:55:3d:36:9e:
                    b2:1b:a3:4a:f7:30:85:83:44:27:06:2e:12:41:d6:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:EB:EC:CD:C7:1F:FE:7C:1F:50:B5:ED:9B:30:FB:A9:20:5F:28
            X509v3 Authority Key Identifier:
                keyid:27:30:5C:FD:AC:91:C7:E5:F4:45:EC:BC:15:6B:7D:1A:97:E6:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/941cc7b7cd376cb4281b6c465456875012c0a16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85465a00-5312-479b-b0bc-50a855713057/598aa2c9c73a82e14dd9e582bacf5cf0d1f1e6a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dda0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:af:36:58:47:ea:07:03:13:8f:0e:18:62:8b:aa:ca:19:
         c7:b0:ab:42:7d:49:90:0a:65:41:e3:f4:13:e2:1c:04:7d:47:
         d3:4b:a1:f4:52:57:a5:18:81:3f:8e:f9:1a:99:8b:9f:52:6f:
         fd:1f:65:97:c5:b3:16:c9:f6:95:82:7e:db:5a:a9:1d:65:43:
         9a:a5:c5:b6:f3:19:1e:80:2c:4c:0e:db:02:37:2f:da:d1:42:
         d4:69:ff:b4:e0:a3:85:ee:b4:52:1e:16:c4:03:e0:34:93:1e:
         d8:6a:de:91:98:ac:19:fc:b3:62:a2:16:56:0c:08:43:1e:96:
         da:42:94:af:2e:00:fc:ac:a6:f9:b9:3c:0a:58:8a:d9:e8:81:
         c3:f4:68:b0:2a:a8:96:e8:df:b3:8e:c5:53:9e:bf:c5:da:fd:
         f3:3a:26:52:b2:89:0e:48:1c:32:96:e0:ad:f2:07:18:f8:91:
         53:0f:8e:ec:26:a2:14:09:c7:79:51:e7:b4:6f:f7:72:d6:0b:
         37:17:5e:2c:41:3e:9f:1e:5b:c1:55:d5:48:92:7e:e9:a1:31:
         8d:f1:fb:29:3b:33:e9:7c:f1:9d:fa:b6:a2:59:db:c0:bc:35:
         35:b8:32:33:71:60:7a:9d:bd:2b:6d:f7:7c:b5:08:fc:04:41:
         b8:4e:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----