Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/3b6eee392c495367df0858e52e981d065e968b10.roa
File:                     3b6eee392c495367df0858e52e981d065e968b10.roa (raw, json)
Hash identifier:          +Hqq/7XmuuEHbV/sAbfJ8Ch9kV8r5WOCaTZhJxlyptw=
Subject key identifier:   01:3E:63:A6:71:34:C7:72:E0:9D:A5:F4:8E:8B:23:BB:01:6F:0A:90
Certificate issuer:       /CN=cb8c7847a29802abe39fa572e7b5b375574964f8
Certificate serial:       012A4D
Authority key identifier: BA:F3:0F:5B:A4:1F:23:58:4F:95:31:76:48:EE:A7:30:CB:20:0A:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb8c7847a29802abe39fa572e7b5b375574964f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/3b6eee392c495367df0858e52e981d065e968b10.roa
Signing time:             Wed 27 Sep 2023 02:07:59 +0000
ROA not before:           Tue 26 Sep 2023 02:07:59 +0000
ROA not after:            Sat 27 Sep 2025 02:07:59 +0000
asID:                     269832
IP address blocks:        2803:c790::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76365 (0x12a4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb8c7847a29802abe39fa572e7b5b375574964f8
        Validity
            Not Before: Sep 26 02:07:59 2023 GMT
            Not After : Sep 27 02:07:59 2025 GMT
        Subject: CN=3b6eee392c495367df0858e52e981d065e968b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:ca:8d:db:e3:b2:4e:76:bb:7b:51:15:d9:
                    c5:e4:80:2b:b7:50:52:2d:fd:59:82:eb:86:2e:8e:
                    2b:a2:05:6b:44:70:36:c7:a7:b0:39:37:e2:31:5d:
                    ab:2d:a0:9f:88:04:81:68:09:5e:ad:e1:17:88:9e:
                    5a:a2:4b:81:a0:37:40:1e:72:c5:84:ec:52:2d:00:
                    d8:4e:03:0e:4d:6b:25:0f:78:16:4e:eb:b0:4d:21:
                    f8:8a:d7:42:8d:ed:a7:a8:64:50:7f:dd:b9:40:e3:
                    f2:a7:98:95:e7:34:77:22:49:94:54:a4:1a:a8:da:
                    59:11:ca:5d:85:2a:b2:d3:42:3c:bd:ca:70:e4:23:
                    f4:c8:ab:6c:81:95:d3:35:fc:c7:8d:1c:db:e3:43:
                    85:8d:2b:f5:05:42:da:d1:d4:52:42:aa:ac:b6:93:
                    e0:8d:4c:3d:c1:7b:f8:d3:50:5b:da:e8:ba:62:33:
                    af:3b:d3:bd:4f:0f:d4:00:fd:9e:53:60:94:99:37:
                    ba:95:bf:10:22:ed:7f:a9:d2:e9:58:5e:41:d1:59:
                    fa:55:e2:e8:ed:3f:95:85:04:ad:2e:78:25:78:c9:
                    26:78:99:d6:b8:21:14:b2:1d:8a:a3:fc:ce:12:20:
                    7b:c2:1c:94:a8:74:ae:e5:a7:75:8b:e8:e7:5d:71:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3E:63:A6:71:34:C7:72:E0:9D:A5:F4:8E:8B:23:BB:01:6F:0A:90
            X509v3 Authority Key Identifier:
                keyid:BA:F3:0F:5B:A4:1F:23:58:4F:95:31:76:48:EE:A7:30:CB:20:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb8c7847a29802abe39fa572e7b5b375574964f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/3b6eee392c495367df0858e52e981d065e968b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9754762d-266f-4435-ad11-96034c90eeac/cb8c7847a29802abe39fa572e7b5b375574964f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c790::/42

    Signature Algorithm: sha256WithRSAEncryption
         79:04:56:c1:12:87:b7:c8:51:cd:11:26:10:b9:d8:b8:d5:28:
         20:66:34:52:7d:b9:5b:64:af:82:c5:4d:b6:94:30:da:09:e8:
         40:92:7f:e8:d9:53:d5:0e:1f:7f:a4:ac:d4:16:a4:a5:86:1c:
         7d:ed:90:c1:78:55:fd:06:be:12:f9:f9:db:97:00:f0:7b:c4:
         88:53:63:34:7f:48:3a:ed:81:c6:cf:40:6e:42:e9:59:ce:91:
         76:b0:20:db:d5:bc:90:be:78:fe:75:60:2a:d1:6a:a6:ad:77:
         2c:60:2a:88:2c:cc:3d:9c:da:b1:5a:21:5d:25:92:dc:0c:5d:
         fc:80:9e:c5:b0:0a:52:f4:bd:9c:45:80:7b:60:9a:be:35:6e:
         d7:c5:2e:2d:23:2e:3a:24:56:01:3f:9b:ce:1b:d8:30:b9:30:
         b1:73:ad:03:fa:12:df:00:4a:ba:52:10:63:36:60:68:ff:7f:
         4f:81:3c:d3:36:3b:97:81:bf:7d:dc:e2:00:56:06:68:11:d4:
         c4:2b:cd:48:0e:8c:d4:b5:10:99:c7:10:2c:07:e1:f5:d9:55:
         33:fc:9b:6e:33:bd:44:0d:e9:b8:49:27:87:57:9f:05:e0:3c:
         f1:57:6d:a1:4f:91:d9:35:68:33:ee:eb:e9:77:ab:db:4d:79:
         55:ca:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----