Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa
File:                     d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa (raw, json)
Hash identifier:          pa06+USpCEg+p0w5McwJ5kforuBDhZCSbvbMkiE9syg=
Subject key identifier:   77:17:21:FE:B9:F9:C5:48:72:9E:F7:9D:E5:6E:72:07:EF:9F:05:E1
Certificate issuer:       /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial:       04FE7C
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa
Signing time:             Fri 04 Aug 2023 16:02:41 +0000
ROA not before:           Thu 03 Aug 2023 16:02:40 +0000
ROA not after:            Mon 04 Aug 2025 16:02:40 +0000
asID:                     272854
IP address blocks:        2803:c290:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327292 (0x4fe7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Validity
            Not Before: Aug  3 16:02:40 2023 GMT
            Not After : Aug  4 16:02:40 2025 GMT
        Subject: CN=d52bbc67cea597140a12fbf7812f6dd8f8968ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:3e:5d:fe:39:1f:76:e2:29:9f:09:c1:ef:
                    1e:1e:27:57:77:0e:66:e0:c0:73:a4:de:10:54:84:
                    fc:25:62:ce:a4:99:c2:36:f5:c6:8c:2b:b5:fd:a2:
                    41:f7:6e:96:7e:13:2a:2f:3f:8b:66:67:2e:f2:b4:
                    e5:bb:cd:87:52:a8:9d:c8:a8:36:60:87:de:21:43:
                    75:13:ec:8d:d7:81:8e:95:48:70:01:d7:f3:a5:96:
                    d5:de:be:ed:93:60:fd:a0:eb:33:8f:8d:18:76:04:
                    c4:60:c1:d3:4e:7c:fa:c6:e0:4c:21:44:49:d4:49:
                    42:71:3b:a9:46:11:6a:f3:6d:64:cb:a9:b6:d6:48:
                    14:67:f7:bf:20:f4:1e:c3:f0:5a:c7:69:53:5e:74:
                    8a:56:57:63:12:c1:fd:65:1a:d5:3e:75:f5:60:d6:
                    40:b3:01:90:c6:98:11:b6:cd:1a:79:5f:e0:ef:68:
                    a7:2c:31:e9:f2:04:40:dc:71:ad:26:8d:3c:d8:c0:
                    e4:5a:52:19:d6:a3:70:b9:53:58:f3:6c:22:08:77:
                    65:63:7a:24:19:05:b4:2f:75:73:34:7d:8d:d5:37:
                    5b:91:6c:b6:22:12:31:c7:5c:36:12:f1:c1:3b:21:
                    47:0b:1f:f6:38:c0:e6:65:59:61:b2:48:39:af:fd:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:17:21:FE:B9:F9:C5:48:72:9E:F7:9D:E5:6E:72:07:EF:9F:05:E1
            X509v3 Authority Key Identifier:
                keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:ce:5e:7b:f4:45:9d:74:fe:f6:93:fe:94:39:cd:4e:47:
         16:06:46:81:f6:6a:80:bf:26:a9:d5:97:e1:f6:f2:23:8f:21:
         9f:a7:38:b8:f4:13:f7:d7:fc:cf:d2:a2:7b:fd:42:18:87:99:
         41:2a:62:86:1e:c6:b6:09:9e:7c:e9:ea:54:a1:4d:9b:4e:d3:
         3e:fd:b8:57:12:45:34:43:53:b0:24:e2:da:ea:39:2b:80:99:
         11:d8:1a:dc:40:25:27:47:43:6a:f4:9a:28:ed:c8:5a:4a:6b:
         c6:60:da:2c:74:38:c3:35:25:62:69:98:17:df:93:dd:fa:f2:
         95:41:ff:fe:1a:23:d1:1e:e3:24:8b:e9:8b:af:65:f4:2c:5f:
         23:b1:61:27:3d:10:1c:28:c2:37:32:b1:05:a1:f1:9a:fe:23:
         1f:17:45:f3:0f:aa:af:e7:e7:16:16:79:c4:eb:81:60:28:80:
         e6:8c:e7:bd:48:c5:ed:92:fb:0b:da:26:dd:b2:09:4c:3f:2d:
         71:f2:9d:8a:5b:d4:2f:46:07:9d:70:77:58:86:04:f1:82:a6:
         da:3a:33:34:dd:e2:0d:6b:4a:c4:52:11:2d:4b:d9:ec:5a:ff:
         69:e8:88:40:43:24:d6:15:3b:1d:3c:d8:ee:a6:cf:08:02:e4:
         2e:6e:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----