Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9416ea43-44c2-4dc8-a759-de03322d4404/46411399d993519b06f96cbdba2a3e902b71af74.roa
File:                     46411399d993519b06f96cbdba2a3e902b71af74.roa (raw, json)
Hash identifier:          fqdQMnQ6uOZc/9gAhOdbLRNxobZxClod3wf7Ex5d6h8=
Subject key identifier:   A6:A8:74:C2:BC:C5:90:C1:17:89:5D:93:7E:FC:F4:04:9E:59:01:02
Certificate issuer:       /CN=5bfb04bae4fe2ed2bb5cb85331a0ce8850ca06ed
Certificate serial:       0108E0
Authority key identifier: 78:22:CD:A0:97:88:0B:36:05:1F:28:E7:0A:82:8F:77:20:19:C7:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bfb04bae4fe2ed2bb5cb85331a0ce8850ca06ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9416ea43-44c2-4dc8-a759-de03322d4404/46411399d993519b06f96cbdba2a3e902b71af74.roa
Signing time:             Sun 14 May 2023 17:50:18 +0000
ROA not before:           Sat 13 May 2023 17:50:18 +0000
ROA not after:            Wed 14 May 2025 17:50:18 +0000
asID:                     271988
IP address blocks:        2803:a110::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67808 (0x108e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bfb04bae4fe2ed2bb5cb85331a0ce8850ca06ed
        Validity
            Not Before: May 13 17:50:18 2023 GMT
            Not After : May 14 17:50:18 2025 GMT
        Subject: CN=46411399d993519b06f96cbdba2a3e902b71af74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:7a:fe:94:1f:a0:7e:b9:12:4f:0b:cb:56:
                    35:cd:75:34:ae:7b:ca:5e:d7:25:eb:cd:6f:e7:61:
                    98:2f:76:a3:26:ed:8a:37:c4:1f:b5:48:a8:a2:62:
                    33:a0:be:7a:e9:73:fe:30:61:9c:97:06:4c:4e:e9:
                    eb:22:82:bb:e8:cc:d3:ab:39:5d:93:10:fe:66:86:
                    10:79:b6:78:43:e9:2b:7a:90:86:40:6e:79:d3:38:
                    73:9e:c1:d2:d4:ff:db:0c:d1:b1:0c:a5:f8:98:4c:
                    66:e8:37:fb:0c:0a:74:1d:86:4c:84:88:84:dc:86:
                    81:2a:26:b4:66:1f:77:49:a9:54:29:60:a2:b6:68:
                    54:63:02:b2:69:35:e5:62:ec:cc:d6:a7:5b:2b:52:
                    1f:40:9e:7c:59:a4:1e:07:4a:2b:92:ba:c9:cf:61:
                    3c:c0:a6:66:3a:cb:1f:d2:88:12:6a:0c:28:bb:be:
                    84:24:71:3b:a3:a7:5e:ab:52:6c:38:1e:95:15:4e:
                    2e:25:ee:6e:7f:b8:e6:8a:c3:9d:cd:a4:d8:a4:a0:
                    05:6a:a4:08:17:08:8b:38:60:d3:ab:eb:10:86:6d:
                    d0:7f:6f:83:b5:33:a0:4d:8a:f2:90:0f:c8:69:0b:
                    19:40:fb:2b:93:f6:25:24:f6:46:b0:6d:97:e5:6a:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:74:C2:BC:C5:90:C1:17:89:5D:93:7E:FC:F4:04:9E:59:01:02
            X509v3 Authority Key Identifier:
                keyid:78:22:CD:A0:97:88:0B:36:05:1F:28:E7:0A:82:8F:77:20:19:C7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bfb04bae4fe2ed2bb5cb85331a0ce8850ca06ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9416ea43-44c2-4dc8-a759-de03322d4404/46411399d993519b06f96cbdba2a3e902b71af74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9416ea43-44c2-4dc8-a759-de03322d4404/5bfb04bae4fe2ed2bb5cb85331a0ce8850ca06ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a110::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:9d:31:b7:ce:6d:7e:a9:23:37:60:ad:d0:05:08:b1:af:
         91:cc:51:f5:76:11:18:c5:eb:07:f0:23:45:e0:58:28:9f:80:
         bc:22:17:0c:f2:ec:db:0b:cb:0c:f4:03:a1:91:0c:02:2d:b3:
         5b:8a:0a:02:7a:fe:d6:e2:da:9f:c1:26:73:b5:ee:22:57:32:
         ba:c4:7c:fa:97:44:f2:ef:a4:1c:b8:ca:f0:72:1c:25:a2:2f:
         85:61:28:a2:d3:06:f6:a7:99:60:1c:95:be:50:eb:e6:7a:e1:
         9c:65:a5:ca:44:d8:c9:67:a3:7d:4d:0d:f0:ba:68:18:32:d6:
         56:bd:8a:fa:c9:7d:67:c1:ad:49:57:e4:36:ed:af:97:ec:d5:
         a8:5d:26:91:72:67:c0:e2:04:93:da:0c:bc:44:f5:0d:2f:a1:
         ec:c1:e5:d6:6a:5f:e9:10:1a:03:69:f1:87:c5:fd:d2:5a:70:
         4e:66:82:48:5c:c3:6e:96:57:ab:ec:7e:ad:cf:e1:d1:98:68:
         a1:e7:6b:c6:88:39:83:68:7c:23:c6:3d:34:83:91:20:0e:65:
         79:63:75:5e:64:d2:19:5c:c9:13:c1:4f:3e:a5:3b:70:b5:2d:
         74:68:6d:df:d3:98:e7:00:03:ce:e0:ff:4c:5f:10:fa:1e:a3:
         98:86:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----