Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/8dfaebaec50b2d82bc614891c8d3cc9c17effc39.roa
File:                     8dfaebaec50b2d82bc614891c8d3cc9c17effc39.roa (raw, json)
Hash identifier:          2jAnyg6QTHm2oQapwdMfz7EnvKSseqlpRuBMScvfREo=
Subject key identifier:   1D:0F:28:BE:2F:F9:A3:8A:5B:C1:B8:BE:3E:D0:A3:30:57:59:8E:A2
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       197EFB
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/8dfaebaec50b2d82bc614891c8d3cc9c17effc39.roa
Signing time:             Mon 12 Jun 2023 08:42:21 +0000
ROA not before:           Sun 11 Jun 2023 08:42:21 +0000
ROA not after:            Thu 12 Jun 2025 08:42:21 +0000
asID:                     10753
IP address blocks:        2803:5ce0:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670907 (0x197efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Jun 11 08:42:21 2023 GMT
            Not After : Jun 12 08:42:21 2025 GMT
        Subject: CN=8dfaebaec50b2d82bc614891c8d3cc9c17effc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:35:43:3e:b1:b0:e1:f5:ba:61:d9:9a:42:
                    6a:62:be:0a:15:33:b8:3b:c0:7e:c4:49:e4:c6:45:
                    28:af:a8:cc:65:74:0c:4f:1c:cb:31:0d:ef:63:ec:
                    a2:c6:7d:ab:f3:64:5f:1d:90:7d:00:3e:ba:9b:f5:
                    61:c7:24:19:77:bf:49:6d:db:b8:07:e6:b9:cc:a8:
                    17:e7:cc:bf:7c:c3:97:c5:ea:33:1a:bd:aa:6b:9d:
                    47:0e:0d:b6:1c:ec:c0:1c:e7:6a:9c:21:3d:a3:59:
                    df:b3:7b:99:39:d0:2c:67:0b:52:57:ed:92:9f:cb:
                    75:d1:05:d3:a5:6f:2e:e9:b5:b2:e5:57:41:48:e4:
                    21:b9:a4:1b:7c:5d:92:4e:c4:64:fd:08:7d:2b:0e:
                    19:69:c4:2b:00:44:fb:e1:5a:24:e9:f6:77:02:e9:
                    35:70:73:9b:4d:9c:45:4b:9b:0d:bc:8c:cc:f1:70:
                    9e:33:ac:43:47:05:49:86:cc:5d:cf:73:ae:02:6f:
                    12:69:3a:f7:d6:be:fe:ca:74:c1:52:4e:70:65:e2:
                    98:2b:d6:67:7f:4d:82:99:c8:4f:2c:b9:20:85:8e:
                    84:b0:9c:a9:1d:c1:da:db:22:d9:c1:df:86:0b:14:
                    f3:2b:c5:48:8b:16:24:3c:2c:4c:5b:40:ec:46:0d:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0F:28:BE:2F:F9:A3:8A:5B:C1:B8:BE:3E:D0:A3:30:57:59:8E:A2
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/8dfaebaec50b2d82bc614891c8d3cc9c17effc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:d1:4f:e9:8d:87:b4:b5:6a:4f:33:e2:9b:d6:96:88:c3:5a:
         29:e3:6c:28:35:3e:01:4c:72:25:00:51:c4:57:b7:ed:90:75:
         01:01:af:2e:e9:eb:5a:92:06:75:1d:a4:06:a8:62:59:c1:32:
         96:3e:78:10:ce:ea:65:08:27:be:a7:d8:75:7b:25:63:25:61:
         15:1a:a5:7b:4a:07:a2:73:0b:b5:f1:b0:3d:b5:77:b7:f4:41:
         18:ce:72:f6:d7:f9:44:7d:b6:b5:93:c9:fb:36:17:94:88:8c:
         51:4b:fa:46:f3:7c:e9:d6:0d:84:df:fc:bf:3d:ee:92:d2:43:
         d6:7c:c9:ac:b2:c9:ef:7c:61:3d:cd:35:a2:40:ed:77:7a:ac:
         4b:85:d3:e3:37:82:5b:65:27:6a:e0:33:20:b3:1f:1a:0e:cb:
         44:b3:0a:61:3c:f6:b6:b7:0c:0e:36:61:ea:1d:0c:0e:de:0f:
         57:ad:62:6d:10:b3:5b:d5:3c:b0:5e:7f:df:e6:05:e8:71:3f:
         73:2c:d3:3b:29:97:52:5c:ca:ad:67:77:7c:10:32:fb:c7:81:
         5c:33:98:29:7a:d2:e0:84:46:ec:94:24:5b:6a:3b:c2:4f:c3:
         ec:47:8f:92:e8:35:e7:a0:29:ed:f1:db:86:6b:5f:64:c9:ae:
         8c:76:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----