Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/6f3670f1c1b789f2b09511d9fcbadcd9ef82fd4d.roa
File:                     6f3670f1c1b789f2b09511d9fcbadcd9ef82fd4d.roa (raw, json)
Hash identifier:          SoXPYsaiuHM6VnBvMC8GrEEZF3Raa27r0NagX8BYz3E=
Subject key identifier:   39:55:F0:74:82:7B:3F:66:00:01:45:08:2C:9A:4B:D1:F0:79:E6:49
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       18004F
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/6f3670f1c1b789f2b09511d9fcbadcd9ef82fd4d.roa
Signing time:             Sat 29 Apr 2023 08:30:04 +0000
ROA not before:           Fri 28 Apr 2023 08:30:04 +0000
ROA not after:            Sun 27 Apr 2025 08:30:04 +0000
asID:                     271809
IP address blocks:        2803:5ce0:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572943 (0x18004f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Apr 28 08:30:04 2023 GMT
            Not After : Apr 27 08:30:04 2025 GMT
        Subject: CN=6f3670f1c1b789f2b09511d9fcbadcd9ef82fd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:89:3d:36:62:4e:13:df:06:47:f8:a1:6a:
                    c6:ee:18:fb:88:92:0f:c2:88:e5:aa:a8:fb:23:f0:
                    85:c4:b5:1b:e7:01:40:9a:9d:b4:74:e5:db:3f:a8:
                    64:f3:2e:3d:45:3d:e7:4b:52:07:2b:d7:4a:54:2e:
                    68:8b:d3:e0:98:64:c2:8e:e7:02:ea:c5:b8:e9:9d:
                    83:e9:0c:bf:27:5b:90:20:e3:ad:a0:84:ee:6f:5f:
                    94:ba:b2:1c:63:9b:25:50:33:6c:d7:99:1e:0d:b0:
                    6d:12:4f:9e:e6:53:a1:1c:31:c7:ff:58:19:d9:92:
                    1e:1e:60:85:2b:07:ff:5e:4b:af:b0:d4:cb:5f:a1:
                    63:f2:17:95:70:dc:4a:2d:b1:44:09:b9:39:62:01:
                    a5:ed:ae:f7:da:6b:5f:2b:e4:ed:e9:97:a1:64:22:
                    03:98:b7:f4:25:7f:67:59:d8:66:92:84:49:c0:80:
                    ce:35:61:c0:28:6b:0b:9b:b0:aa:7b:35:dd:b0:8c:
                    ad:a1:4b:e7:df:1e:7c:c4:5f:25:cc:23:e5:19:10:
                    13:f2:af:6b:07:ea:34:c3:54:08:54:ec:1b:48:d6:
                    29:7d:95:e3:9b:8a:4f:66:1d:10:1b:78:4d:fc:80:
                    e6:a3:bd:75:5f:fe:db:70:91:e1:5c:0d:1a:fd:a5:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:F0:74:82:7B:3F:66:00:01:45:08:2C:9A:4B:D1:F0:79:E6:49
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/6f3670f1c1b789f2b09511d9fcbadcd9ef82fd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:ef:08:99:87:11:3f:66:22:83:e1:01:59:fb:3e:dc:b9:
         ef:82:b0:e2:21:75:d9:0e:f1:5c:7e:92:de:1d:ad:10:d0:53:
         b5:b7:1c:2a:6b:80:5e:6a:fd:2d:51:35:5c:ef:26:55:d0:98:
         8d:1f:37:67:da:1d:fd:c5:04:d3:f4:7f:b2:72:a9:9c:56:d1:
         27:07:11:88:43:92:50:fa:4a:92:d6:e1:27:85:52:6b:31:21:
         e1:04:e1:9a:0d:c2:6b:c0:b5:bc:f8:84:99:65:83:2c:7b:c1:
         c9:49:85:30:3f:c3:8b:58:5b:f3:0f:12:99:90:51:67:58:a0:
         e3:78:cb:e0:1a:3d:e1:89:30:4b:a6:d4:43:00:41:b0:48:ad:
         d3:81:e1:c9:72:9a:f5:77:bb:f8:dc:02:bf:94:aa:bc:f0:b8:
         e9:ae:b9:94:eb:a3:a5:7f:32:4c:eb:2e:6b:10:d8:ff:9b:73:
         b0:fc:3a:07:80:23:73:c0:01:91:78:85:8a:22:e1:88:5b:63:
         17:42:bf:6a:57:4f:eb:90:4f:11:d5:74:ce:4e:ea:c8:c7:c3:
         ee:ff:04:c6:92:78:08:d9:a3:69:2a:f1:bd:fa:54:7f:1f:5c:
         f2:6a:b5:35:31:61:ad:89:e8:b3:15:81:a2:aa:ee:b7:69:98:
         ca:53:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----