Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2725fe61463dd8b8e537b828fc941201f2086ce4.roa
File:                     2725fe61463dd8b8e537b828fc941201f2086ce4.roa (raw, json)
Hash identifier:          UI4WmmQHT70xMnE4d3b6xfGMscTigUMANVEdNyqOUbc=
Subject key identifier:   6E:59:35:51:A0:A8:F3:E4:AF:ED:30:70:B8:1C:F8:98:72:57:B2:0D
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       199700
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2725fe61463dd8b8e537b828fc941201f2086ce4.roa
Signing time:             Mon 12 Jun 2023 08:42:27 +0000
ROA not before:           Sun 11 Jun 2023 08:42:21 +0000
ROA not after:            Thu 12 Jun 2025 08:42:21 +0000
asID:                     27887
IP address blocks:        2803:5ce0:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677056 (0x199700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jun 11 08:42:21 2023 GMT
            Not After : Jun 12 08:42:21 2025 GMT
        Subject: CN=2725fe61463dd8b8e537b828fc941201f2086ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:10:19:88:37:dd:3a:2d:2d:fa:48:62:2b:
                    96:03:33:87:78:7d:c2:f6:fc:c7:df:9e:65:ec:36:
                    dc:37:3c:8b:3b:17:bf:8e:39:c1:f7:78:5d:0b:31:
                    16:b4:b8:e7:f3:85:0c:78:4a:3f:99:84:20:e0:1d:
                    9c:bd:0a:1b:1f:b5:ac:5a:7e:ae:10:f7:7e:c1:57:
                    f4:a9:25:8c:18:9f:0a:1c:a5:2c:97:71:05:90:26:
                    29:45:e3:da:10:d3:cb:da:43:6b:ff:0d:61:e4:cd:
                    0d:1d:f4:d2:a6:12:93:3b:5b:15:82:61:a5:27:75:
                    ae:32:08:31:aa:c1:b7:8f:81:b5:af:0b:25:fa:61:
                    4a:4c:12:c0:ac:c0:ae:9b:94:3d:5a:a8:1c:26:66:
                    b0:1e:c3:48:fa:cd:e8:55:7e:16:5a:09:18:5b:54:
                    44:0b:f6:3f:af:5c:cc:9a:f0:41:be:90:6b:4e:3b:
                    68:1a:be:a1:7d:11:46:63:66:7a:7c:72:03:32:4f:
                    9c:d7:f0:f9:86:3e:99:26:d3:0a:38:9b:c3:53:8c:
                    23:b2:99:8f:a8:bd:b5:72:5b:47:ba:80:d8:df:ec:
                    e2:1a:b3:37:5a:39:c7:bf:a2:23:c7:3f:70:bb:40:
                    14:0f:78:f2:3d:4c:64:7b:e4:43:30:bd:c6:eb:18:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:59:35:51:A0:A8:F3:E4:AF:ED:30:70:B8:1C:F8:98:72:57:B2:0D
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2725fe61463dd8b8e537b828fc941201f2086ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:2e:5c:a0:95:c8:ab:38:f9:f7:bc:f8:46:49:18:95:c6:6a:
         73:da:d7:87:23:38:28:8e:21:cd:43:66:02:f8:2d:a8:f2:a6:
         e2:0c:5b:f4:1d:4c:9e:e2:5a:8a:67:c1:ea:59:f4:4c:17:2d:
         6c:18:5a:04:09:28:40:29:d9:f1:28:88:58:2d:aa:65:b4:1d:
         25:27:60:77:94:3a:75:86:7b:72:72:db:21:bb:f2:ec:4d:b7:
         6a:f4:cd:08:6f:cd:dd:d0:6c:59:59:f3:c0:83:23:66:a5:f1:
         11:4c:d2:1c:cd:e9:ea:8d:48:73:39:35:c9:48:37:a5:db:d8:
         11:f0:dc:c2:c4:93:16:ca:a4:bb:f4:41:1e:95:b1:f6:5f:c1:
         f3:bf:41:3b:2f:89:ea:25:11:84:d3:fd:3b:46:7a:ec:32:8f:
         ea:62:7d:51:31:2c:06:a3:e7:be:c9:56:64:34:61:1c:b5:0c:
         18:22:73:b0:19:74:4d:cc:7a:6c:ec:13:42:e0:3d:a5:f7:3a:
         ac:ee:ba:14:73:72:47:39:0b:45:0c:7e:57:74:fc:04:e4:17:
         fb:6c:d8:d4:1b:5c:2d:aa:48:6c:88:3c:36:3d:6f:be:2f:46:
         87:3d:e8:7a:d3:fb:05:7b:de:d4:0c:4a:db:69:e6:66:29:04:
         12:bd:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----