Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3308257b04a844887379946f6dcb836322efa27f.roa
File:                     3308257b04a844887379946f6dcb836322efa27f.roa (raw, json)
Hash identifier:          rbd8Tlpq/zK7BMDUMSiGd7DzWw4dLMP7TstnXkHcA68=
Subject key identifier:   20:30:08:A3:BF:F5:0D:2F:02:61:85:5E:42:F4:E8:1B:94:26:52:94
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       26A7BD
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3308257b04a844887379946f6dcb836322efa27f.roa
Signing time:             Sat 24 Feb 2024 22:18:44 +0000
ROA not before:           Sat 24 Feb 2024 22:18:43 +0000
ROA not after:            Tue 24 Feb 2026 22:18:43 +0000
asID:                     272848
IP address blocks:        2803:5200:6413::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533309 (0x26a7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Feb 24 22:18:43 2024 GMT
            Not After : Feb 24 22:18:43 2026 GMT
        Subject: CN=3308257b04a844887379946f6dcb836322efa27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:62:d9:d8:26:e3:b6:77:f3:96:ae:a4:bb:
                    fc:aa:ee:5c:7f:c0:84:a9:5a:25:ea:4c:c4:b7:6c:
                    af:2f:7f:d1:b5:02:3c:03:29:56:02:9e:03:86:e1:
                    9a:0d:6f:78:8e:9b:64:22:92:0c:1f:b8:16:76:cb:
                    f6:51:fa:ed:4b:6e:ae:d3:6e:67:75:68:e1:c5:67:
                    61:85:87:29:97:c2:92:fe:30:88:f6:30:a6:39:c0:
                    a0:ab:36:a2:b7:10:27:55:2e:e0:d2:8e:9f:eb:a2:
                    6a:90:e9:a6:60:d4:27:1d:f7:90:ae:da:04:72:ea:
                    e6:4b:22:1a:53:0e:af:51:4a:a1:c6:c9:23:a6:d0:
                    e5:93:dc:f1:5d:35:57:8e:7e:33:3f:ea:26:99:ab:
                    8a:de:9d:c2:d7:65:0f:20:c4:76:13:e8:e1:d7:db:
                    4c:13:8c:a0:b9:db:82:3c:15:7a:11:ee:e4:15:10:
                    b6:de:4a:9b:a3:5c:4d:f3:a5:1c:a0:5a:d6:a4:53:
                    26:58:33:cb:bf:bb:76:5d:64:c7:ca:d0:11:34:5f:
                    ec:a7:66:c0:99:d8:c1:37:87:f3:7b:64:73:64:0c:
                    69:5c:a7:99:c3:09:6b:d9:f8:70:de:5d:16:4c:d4:
                    24:70:48:a1:c2:f4:79:c4:8e:64:b8:30:a6:3f:6a:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:30:08:A3:BF:F5:0D:2F:02:61:85:5E:42:F4:E8:1B:94:26:52:94
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/3308257b04a844887379946f6dcb836322efa27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6413::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:f6:95:7d:a7:8a:d1:f5:49:38:f7:32:8f:dd:a4:b7:e4:ab:
         e9:57:a2:d5:80:87:3d:4f:fa:56:5b:c5:b2:75:20:1c:27:65:
         00:83:6b:17:1a:a2:57:a5:08:fd:1a:1f:bf:3b:f0:b3:27:92:
         3b:04:6a:d5:cb:39:47:da:8b:03:da:51:19:28:8a:5a:ff:1e:
         5b:d5:17:8a:fb:78:e7:ce:94:70:0a:e0:5c:13:fd:13:eb:71:
         07:e2:7a:87:0e:5d:32:e4:23:43:29:b4:23:40:18:8c:d0:04:
         24:6f:ee:fc:2e:1d:f0:53:38:0d:b1:61:4c:7f:c2:b4:b7:0b:
         d2:5b:3d:31:71:e6:6b:df:af:9a:df:9a:89:82:11:3a:04:aa:
         17:63:54:76:af:34:1d:6f:f0:41:4e:b0:df:0b:3d:74:27:3e:
         c6:e2:bc:48:6e:1e:6d:c4:f7:77:c5:b2:06:e9:94:5b:44:53:
         44:da:79:3a:d9:60:d2:62:c8:6f:68:46:1b:78:21:c1:26:dc:
         5a:81:80:4b:fc:b2:16:fa:cf:f7:69:5e:44:49:e6:08:66:c3:
         c6:b7:5d:d6:43:ba:a0:c7:bc:00:ac:e6:6e:04:08:bf:82:e8:
         52:59:7f:0f:19:88:a2:24:22:d0:14:f8:55:cd:9b:14:46:0e:
         41:e1:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----