Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/0628182940727f9dd5757d94d43effc8442afeba.roa
File:                     0628182940727f9dd5757d94d43effc8442afeba.roa (raw, json)
Hash identifier:          S2uFKS52cT0I+pVU57E3mLW1k+Vs6zwAyfPWMnarr0Y=
Subject key identifier:   C8:78:0E:3E:6E:87:85:EB:B6:8C:C2:9E:C1:20:ED:09:3F:3D:5A:A1
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       22DDC2
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/0628182940727f9dd5757d94d43effc8442afeba.roa
Signing time:             Tue 20 Jun 2023 15:45:22 +0000
ROA not before:           Mon 19 Jun 2023 15:45:21 +0000
ROA not after:            Fri 20 Jun 2025 15:45:21 +0000
asID:                     269844
IP address blocks:        2800:68:33::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284994 (0x22ddc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jun 19 15:45:21 2023 GMT
            Not After : Jun 20 15:45:21 2025 GMT
        Subject: CN=0628182940727f9dd5757d94d43effc8442afeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:b9:c1:e9:5c:be:77:48:ff:75:a8:c0:70:
                    b7:1a:35:b9:17:ca:fb:39:bc:a8:c2:2d:43:cf:30:
                    1e:f5:4f:e6:93:a3:7e:03:1a:0f:e5:b8:15:fb:fa:
                    cd:22:64:56:2e:fb:29:66:22:4e:23:20:36:14:ac:
                    b1:9d:5b:93:e2:90:1d:70:ee:d6:78:88:81:5e:74:
                    f8:3d:f2:6d:fa:10:d7:34:18:1c:a1:59:00:27:33:
                    af:38:50:a7:c4:d7:d2:e2:08:5c:77:fb:f1:7f:fe:
                    bd:c4:7c:c7:3e:e1:46:96:42:42:e0:82:b8:62:4c:
                    24:7b:af:f7:f7:bd:a6:1d:b2:f7:b4:ec:1c:b5:d7:
                    08:7f:55:cb:fd:7e:f9:49:37:04:ef:74:e1:39:64:
                    ee:d1:2c:43:3f:d4:51:5a:08:33:42:83:e3:6a:6a:
                    27:6f:77:e7:3f:45:2a:50:b5:85:78:6b:11:46:fc:
                    02:8b:26:f6:37:5e:3c:dd:95:56:29:e4:b4:f2:85:
                    16:fa:0f:17:4b:4b:84:97:a1:6f:49:cd:3a:70:55:
                    6e:d2:81:b4:d2:b9:b7:be:01:02:5d:f5:00:d7:04:
                    05:45:c0:67:a8:aa:2e:d6:af:e4:e2:d0:0d:5c:da:
                    6f:e3:b5:60:5c:33:f8:46:a9:82:2a:60:4e:97:8d:
                    2d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:78:0E:3E:6E:87:85:EB:B6:8C:C2:9E:C1:20:ED:09:3F:3D:5A:A1
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/0628182940727f9dd5757d94d43effc8442afeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:91:cf:b8:c1:fe:83:ee:a7:43:23:6f:7b:cb:f4:92:b7:93:
         fa:19:2a:aa:9b:86:a5:60:a7:f7:f9:76:ee:cb:54:83:ac:92:
         03:8c:07:6e:db:cc:02:34:97:3f:7a:9e:58:be:19:f2:4e:05:
         af:00:b7:60:fa:9c:60:dc:92:76:2b:47:ea:58:4b:f5:c0:ad:
         15:7b:ce:b7:ff:0f:55:50:70:f6:27:af:b5:1e:08:cf:54:18:
         1a:52:e1:d6:6c:53:65:90:e1:5b:ca:5c:b2:d9:57:11:f5:36:
         ba:55:4c:83:4e:00:33:bb:d8:97:8d:b2:71:bf:c2:3f:cf:cd:
         6d:05:39:e2:86:46:f8:23:dc:b8:d6:d7:5e:ff:f4:ef:0e:6e:
         ca:8f:29:7d:1a:c3:6d:c1:7a:68:cd:57:8f:08:b6:31:d9:bc:
         05:e8:be:79:26:9b:d1:be:31:0a:dc:d9:ff:3c:38:a7:3b:54:
         78:da:2e:b8:14:85:cd:59:91:43:82:e7:60:81:14:52:b9:ca:
         1c:3c:fc:59:66:70:a2:4a:99:f8:02:cc:e6:c2:cb:df:b5:f3:
         d6:ba:79:6f:0e:2e:ad:0f:ae:b3:c2:c7:29:a1:ac:d6:77:86:
         0d:ab:b4:1f:16:59:b9:45:9c:a0:3e:95:0a:90:e2:99:f7:55:
         58:c3:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----