Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/06310b0cf3e84847d826143d6c0ded5838ae1a6b.roa
File:                     06310b0cf3e84847d826143d6c0ded5838ae1a6b.roa (raw, json)
Hash identifier:          OQAx1vy8zaLiCPVc6E8A9F82jqM8uWVTq9lE0VYAJek=
Subject key identifier:   01:8C:C0:90:03:CE:92:F7:1D:12:66:5E:BF:15:20:25:E8:D1:80:59
Certificate issuer:       /CN=b9d806633e0f009f79ba1dffc9b54ab06ab0eb17
Certificate serial:       4458
Authority key identifier: 3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/06310b0cf3e84847d826143d6c0ded5838ae1a6b.roa
Signing time:             Fri 18 Aug 2023 22:49:53 +0000
ROA not before:           Thu 17 Aug 2023 22:49:53 +0000
ROA not after:            Mon 18 Aug 2025 22:49:53 +0000
asID:                     273049
IP address blocks:        2803:3b90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17496 (0x4458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9d806633e0f009f79ba1dffc9b54ab06ab0eb17
        Validity
            Not Before: Aug 17 22:49:53 2023 GMT
            Not After : Aug 18 22:49:53 2025 GMT
        Subject: CN=06310b0cf3e84847d826143d6c0ded5838ae1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:ec:d7:ea:6c:fb:46:b9:46:00:03:bb:b1:
                    b1:1a:15:fe:0a:dd:66:bd:e0:ce:22:ea:24:f0:6e:
                    cb:9c:27:27:f4:77:b0:b1:a0:28:4b:c7:fd:c0:82:
                    59:a2:79:56:f6:6d:d1:73:96:44:f8:a8:25:5f:53:
                    bc:b8:c6:23:51:d1:28:53:43:f2:4c:2b:26:88:da:
                    c8:cd:a6:24:a2:5a:77:20:94:10:c4:84:15:87:c3:
                    49:a4:50:4f:9b:a4:f3:2b:5a:34:04:72:e0:52:a6:
                    0e:0a:ce:eb:98:17:a6:52:8b:ef:ec:5f:65:63:e4:
                    d3:74:44:b2:bf:7a:2c:f4:dc:55:c3:4e:c0:72:cd:
                    e8:75:4a:7c:a7:33:96:78:d5:3f:d1:6c:3c:57:e0:
                    ea:70:95:44:af:bf:3a:0f:d1:f0:ed:09:0e:9a:43:
                    63:7d:dc:14:79:88:ee:8c:0a:7b:5f:b2:1b:88:3e:
                    90:ee:88:6f:08:8e:50:37:62:f0:5a:dd:e4:e9:85:
                    cd:f6:8a:0d:6e:46:f9:cf:f8:03:cf:27:a8:68:f3:
                    c9:e0:6c:9a:d3:b7:2c:7f:b2:76:e1:89:7a:2e:60:
                    cb:6c:30:fa:67:81:78:26:8f:c1:b4:d9:71:e3:dc:
                    4b:50:19:40:56:c7:da:13:99:be:ba:d0:b0:c9:cb:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8C:C0:90:03:CE:92:F7:1D:12:66:5E:BF:15:20:25:E8:D1:80:59
            X509v3 Authority Key Identifier:
                keyid:3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/06310b0cf3e84847d826143d6c0ded5838ae1a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:bb:bf:7e:17:45:7f:75:ea:f0:dc:89:e3:b7:8f:ac:38:c2:
         78:0c:41:da:bf:41:6f:46:4c:df:57:02:dc:0b:4a:2d:82:af:
         7c:3a:ff:94:a3:cd:68:f3:1c:e6:15:10:c1:82:13:ad:70:76:
         d6:ab:da:bc:78:cd:30:a3:c1:00:e7:98:cf:d5:c2:1f:92:10:
         99:fb:5f:62:09:15:5e:c0:27:4e:73:6f:35:24:56:78:34:3a:
         16:cf:1a:ee:95:53:6a:9d:c7:dc:9a:1e:12:99:8a:ed:ae:ec:
         ea:09:fd:56:59:0e:fa:31:37:5c:b7:ea:25:9a:5c:29:67:d1:
         f8:b9:90:b6:b3:81:ee:8e:5e:96:5f:5e:95:e6:14:23:1f:80:
         05:3b:e3:ba:2e:45:21:46:38:82:3e:2c:cd:de:38:3f:05:d9:
         3c:66:5a:63:71:6d:e2:f2:b2:89:58:d5:2e:84:e4:08:ae:7a:
         bb:16:ae:ed:bf:41:c0:a6:f1:cf:93:bb:75:d6:56:1e:35:a7:
         48:6c:07:4c:33:f9:62:c1:8f:fa:ae:57:da:45:87:7d:eb:dd:
         d1:d7:ca:eb:b3:03:a7:c9:66:fd:8c:fe:8b:84:a3:1f:8a:e4:
         cb:79:4a:40:af:1a:ef:05:3b:1d:1d:1e:e0:fa:7b:4c:8a:c4:
         d1:f7:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----