Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/8e5a2101426841f22d48ecb7123e67551cbe8603.roa
File:                     8e5a2101426841f22d48ecb7123e67551cbe8603.roa (raw, json)
Hash identifier:          agwkFHPeoTy2I/c4eG3TlvkCW+3xy442OX7/lI/esW0=
Subject key identifier:   09:7C:CA:5E:36:0D:CF:31:7E:C9:77:72:9B:74:A8:2F:99:45:66:D1
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       107397
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/8e5a2101426841f22d48ecb7123e67551cbe8603.roa
Signing time:             Fri 04 Aug 2023 00:41:17 +0000
ROA not before:           Thu 03 Aug 2023 00:41:17 +0000
ROA not after:            Mon 04 Aug 2025 00:41:17 +0000
asID:                     271889
IP address blocks:        2803:210::/32 maxlen: 64
                          2803:210::/46 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078167 (0x107397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Aug  3 00:41:17 2023 GMT
            Not After : Aug  4 00:41:17 2025 GMT
        Subject: CN=8e5a2101426841f22d48ecb7123e67551cbe8603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:3c:d2:45:de:3f:c4:85:30:eb:e6:4c:6a:
                    a7:8d:03:13:5e:51:c2:02:6c:5b:e0:fb:a6:1f:75:
                    5f:f1:61:40:94:5f:9e:c2:c3:82:ef:83:aa:c6:2d:
                    38:81:c6:60:7d:3b:8f:e6:c0:f0:d1:dd:bb:fe:ec:
                    da:3b:26:15:e3:a8:6d:a2:d4:ee:d6:0b:27:31:46:
                    e6:10:91:09:2a:0f:2a:23:52:73:d7:53:9a:b9:a5:
                    aa:a1:38:50:3a:4c:aa:86:a8:e8:3d:38:4e:7d:af:
                    64:c5:3d:16:3d:8f:bd:5e:b1:ed:23:7c:c7:84:82:
                    e7:9b:01:f3:34:8e:6c:d7:8a:68:4c:76:57:bf:5a:
                    75:75:1e:c4:df:6f:74:9e:e1:8d:d4:90:21:36:83:
                    46:e6:50:44:c3:cc:87:45:51:b6:ea:12:2e:82:c9:
                    64:f0:55:79:d8:88:98:59:e3:73:46:08:0b:ba:fa:
                    f8:1c:06:e9:2f:88:c0:dd:1e:1b:7c:cc:87:f5:fc:
                    e0:78:32:fc:45:9e:7d:5b:c5:93:5e:1b:71:ac:34:
                    d1:a3:87:93:fe:62:7d:fe:14:52:c8:f5:a5:44:d2:
                    f6:a7:57:be:cd:58:a5:eb:9f:62:25:45:8d:92:e8:
                    3d:03:f6:b9:ef:5c:4d:de:77:83:c4:93:ed:be:d7:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7C:CA:5E:36:0D:CF:31:7E:C9:77:72:9B:74:A8:2F:99:45:66:D1
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/8e5a2101426841f22d48ecb7123e67551cbe8603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:89:5a:4b:1d:9d:00:4f:6b:c0:b5:81:77:be:3a:f0:93:37:
         8a:38:89:85:0d:e5:4b:a2:fd:c7:35:e9:1b:63:7a:3b:64:9b:
         bf:2a:a5:73:34:e7:0d:af:85:cb:b7:e3:8e:7b:88:3b:a9:c0:
         59:0d:31:b3:ec:f2:e8:8a:5b:c8:78:07:18:8e:1a:92:78:80:
         40:b4:01:77:78:b5:62:26:e9:08:1d:7d:bd:ad:ee:38:cb:7d:
         2f:22:57:9b:ae:75:81:47:22:65:59:ed:ad:2c:b9:72:c5:0e:
         f9:2a:cb:f8:a4:27:c5:10:96:1c:bd:d9:b2:40:46:1d:93:8c:
         3f:b1:fc:6f:01:0a:7f:d5:fb:43:53:48:6a:22:0f:a2:d0:7c:
         ba:ba:8d:63:5c:e6:46:87:fb:4e:e4:d1:01:86:07:61:70:00:
         55:9e:ef:ca:65:da:58:94:87:38:e5:c3:da:ca:92:b5:bf:97:
         3d:12:f1:06:01:32:a3:7e:8b:6e:48:ed:e8:cc:6e:c8:39:c8:
         ce:41:96:c5:3d:bb:9b:fa:7c:f1:b5:64:79:ec:55:5d:09:d2:
         97:b9:ba:8e:de:a9:9c:26:15:fc:e0:c3:d9:a6:5c:1b:3d:ba:
         02:8d:96:76:19:f9:c9:ac:f1:f2:09:8c:cb:e9:10:a4:c5:0b:
         6e:9c:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----