Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/63aaad455ab617a7b8de091413dda7783793dc7e.roa
File:                     63aaad455ab617a7b8de091413dda7783793dc7e.roa (raw, json)
Hash identifier:          5F22/A3kyXbCZfgsll9AJmIh3FDJ2LhSOvP06cwIIno=
Subject key identifier:   2C:73:37:F7:0E:51:D7:B9:BE:A7:9B:36:A8:4B:7C:73:5E:E8:27:9C
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B1CAF
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/63aaad455ab617a7b8de091413dda7783793dc7e.roa
Signing time:             Thu 25 Jan 2024 23:56:05 +0000
ROA not before:           Thu 25 Jan 2024 23:56:05 +0000
ROA not after:            Sun 25 Jan 2026 23:56:05 +0000
asID:                     61461
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728239 (0xb1caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 25 23:56:05 2024 GMT
            Not After : Jan 25 23:56:05 2026 GMT
        Subject: CN=63aaad455ab617a7b8de091413dda7783793dc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:70:3c:49:db:85:d0:5d:b5:9f:0d:56:b5:
                    55:1b:01:06:98:89:5a:c1:31:d8:ce:61:b4:cb:c1:
                    3d:f0:68:7c:2c:51:44:21:47:b8:0b:a5:77:3c:f4:
                    86:8d:11:61:d1:45:be:6c:76:40:e1:fc:66:1a:a4:
                    2a:8b:aa:ff:b6:f3:41:e4:61:a8:a9:f6:a6:ee:b8:
                    10:97:9d:1f:6b:b0:7a:23:89:c7:a9:f3:86:08:e4:
                    20:a1:39:32:a1:37:fd:62:ec:49:7c:98:9d:5d:2c:
                    af:99:ce:39:b7:7d:09:ee:a4:87:c0:87:67:e4:8e:
                    96:9c:cd:ab:7a:e2:b0:c8:e0:22:53:97:13:f2:56:
                    da:fd:94:b3:c7:96:0b:24:4b:5a:c5:30:4d:48:3f:
                    31:6f:e5:2e:0a:71:fa:66:7e:a9:98:41:12:ff:04:
                    d2:87:85:9e:0f:b5:27:18:e3:f6:11:f6:26:47:56:
                    29:f9:09:49:63:85:26:73:70:4f:90:f0:2f:be:a9:
                    82:5e:0f:74:22:b0:9d:3c:1c:c1:70:f1:03:d1:db:
                    ad:1c:d1:8c:92:b0:34:f3:39:02:e7:94:09:8f:17:
                    42:75:99:89:4a:f5:29:c0:0a:d7:b0:ea:e8:7e:ad:
                    d1:54:c5:da:ab:29:cd:8b:43:fb:85:bf:b2:83:4c:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:73:37:F7:0E:51:D7:B9:BE:A7:9B:36:A8:4B:7C:73:5E:E8:27:9C
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/63aaad455ab617a7b8de091413dda7783793dc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:81:54:08:a2:47:16:c1:b8:c4:b0:8b:24:7f:af:05:a0:76:
         f3:3b:ce:0a:6e:56:92:6b:21:f6:98:91:eb:2f:07:77:25:bc:
         c4:eb:e6:3f:7f:95:7b:d4:d4:cd:a6:05:ae:44:8e:3c:6a:f9:
         96:d7:a1:c5:d4:ee:f4:83:cd:69:97:a7:a1:a9:ae:a7:f8:b8:
         45:2f:eb:1d:d1:d1:e3:0d:0b:27:d8:ca:5b:10:ef:e2:c8:da:
         fe:be:6a:52:0c:54:68:a5:0e:ce:4e:ad:19:53:ec:e1:0a:c0:
         1b:88:de:5f:e4:b7:67:a5:72:61:38:08:5d:a5:99:fb:c6:03:
         33:75:16:ec:31:84:d3:6c:8f:a0:81:c9:75:03:df:9e:0e:af:
         6a:98:4f:05:32:42:a7:19:2b:f6:51:66:a7:af:c1:25:21:0a:
         e8:cc:48:56:20:9a:73:06:66:d1:67:21:ee:55:59:dc:90:51:
         a5:95:75:0e:03:1b:bf:df:90:9a:a6:c2:bf:88:cb:50:88:30:
         4d:97:67:08:06:b1:ab:a5:04:64:0e:de:db:8c:e5:42:47:7e:
         68:2c:ea:20:19:a4:57:89:0b:53:47:1e:5c:d9:d2:97:12:c3:
         df:a9:7e:a3:fa:8b:94:ce:11:98:44:8d:e2:ef:cb:15:ad:c6:
         7e:b9:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----