Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/a0391fdceb367089c0c241f27c6530f10abdbac1.roa
File:                     a0391fdceb367089c0c241f27c6530f10abdbac1.roa (raw, json)
Hash identifier:          TEsiz+2oeC6FJjZj6Ki6dwi6HeQ0krFYyu/WDRLGGdw=
Subject key identifier:   6D:69:A8:79:FB:9C:65:65:9A:C8:91:58:9E:C8:87:2A:41:7F:D8:7F
Certificate issuer:       /CN=eda3c77c2f96f7747e73bce49dce5db05857390e
Certificate serial:       1AF412
Authority key identifier: 22:16:C8:A3:53:A3:CE:66:E3:A1:27:34:2D:9F:0D:BC:40:2B:9E:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eda3c77c2f96f7747e73bce49dce5db05857390e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/a0391fdceb367089c0c241f27c6530f10abdbac1.roa
Signing time:             Wed 11 Oct 2023 14:35:14 +0000
ROA not before:           Tue 10 Oct 2023 14:35:14 +0000
ROA not after:            Sat 11 Oct 2025 14:35:14 +0000
asID:                     19429
IP address blocks:        2801:1c:a800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766418 (0x1af412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda3c77c2f96f7747e73bce49dce5db05857390e
        Validity
            Not Before: Oct 10 14:35:14 2023 GMT
            Not After : Oct 11 14:35:14 2025 GMT
        Subject: CN=a0391fdceb367089c0c241f27c6530f10abdbac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:e4:4b:f5:63:26:7b:72:58:8d:14:e4:9e:
                    59:3b:f5:f7:08:37:7c:35:4b:71:37:bd:62:51:bc:
                    f7:f2:c9:d9:fe:af:f3:92:98:34:cd:4a:76:87:01:
                    aa:3f:c6:7e:a2:1d:fd:c1:bc:a0:a4:ea:57:f0:3d:
                    20:cc:bf:86:83:e8:16:da:11:4b:00:a7:ef:51:10:
                    b6:47:68:80:e2:23:33:11:72:a5:c4:fa:46:ee:9b:
                    a3:37:7f:cf:09:2e:0f:6a:ef:dc:e1:bc:62:33:b6:
                    7e:57:76:ff:4f:28:a4:85:ad:80:70:a1:8f:90:e5:
                    53:f3:54:bc:5c:d5:c4:1d:75:38:8f:88:93:1b:8a:
                    50:b6:de:b7:cc:73:72:64:ab:f8:b0:fc:bc:ef:8c:
                    c1:9c:d9:fc:8a:75:2d:71:63:92:fa:d5:47:74:59:
                    1a:b4:68:6a:6f:bd:33:ab:63:ee:d8:07:77:be:f0:
                    af:81:ea:2e:c7:c8:b2:52:ce:55:03:bc:ee:3f:39:
                    3d:f3:5d:8a:74:95:f4:1a:b1:fb:0f:15:c9:00:11:
                    20:b7:18:47:75:35:d0:e9:c6:5d:a6:24:94:eb:87:
                    82:e6:24:b8:06:cc:71:ae:6e:b7:ff:90:a1:a3:33:
                    70:eb:3d:74:1d:96:38:57:aa:0f:d9:d7:40:cd:b1:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:A8:79:FB:9C:65:65:9A:C8:91:58:9E:C8:87:2A:41:7F:D8:7F
            X509v3 Authority Key Identifier:
                keyid:22:16:C8:A3:53:A3:CE:66:E3:A1:27:34:2D:9F:0D:BC:40:2B:9E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eda3c77c2f96f7747e73bce49dce5db05857390e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/a0391fdceb367089c0c241f27c6530f10abdbac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90ddf0c0-e586-47ab-9705-47d93c6138f3/eda3c77c2f96f7747e73bce49dce5db05857390e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:dc:92:1e:41:3c:81:3f:ab:b9:2d:77:70:8a:22:20:0d:
         57:b9:3e:35:8d:04:99:1e:7b:2e:b9:cd:07:36:23:05:77:e6:
         e9:1d:ab:16:ae:aa:4e:b2:ab:95:23:79:cd:1e:c8:10:2c:8f:
         51:eb:aa:1f:d0:37:88:86:39:19:b1:96:ea:e5:b5:b0:34:c1:
         fa:32:97:fc:91:f6:21:a4:8a:85:10:ae:5e:48:d3:f3:b6:7a:
         04:71:fa:ae:e7:40:8b:73:fa:2a:d7:4d:22:8a:07:98:5a:d7:
         99:34:45:f5:6d:ab:21:68:e1:d0:e8:87:cd:55:e5:91:12:81:
         0b:4c:b5:29:bd:e9:9d:5f:57:30:8f:cb:ea:86:64:89:9e:f8:
         be:e0:0d:48:af:19:f8:9a:18:61:a3:1b:27:aa:43:60:95:40:
         8f:00:52:8f:81:ef:23:0f:0e:9d:26:3a:09:97:ac:dc:01:a4:
         f8:af:31:31:f8:7b:e3:6c:a9:51:f0:c9:c4:a5:aa:ae:da:1c:
         60:63:f2:c6:fa:10:77:df:97:d2:d2:96:1e:7e:79:cb:4c:1d:
         4d:84:09:2a:67:08:6b:fb:e3:02:46:25:63:13:8a:c6:9f:1f:
         35:97:5d:e9:41:48:9c:47:a3:95:d3:e9:8a:36:1a:57:c5:3b:
         63:a2:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----