Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/fa69d46a974f1524743958903672b405c5af7773.roa
File:                     fa69d46a974f1524743958903672b405c5af7773.roa (raw, json)
Hash identifier:          cCDVeuDzmxTVOKN7OpxOX529bDLLkYXEljwWGM81xOk=
Subject key identifier:   9F:71:E3:7B:3C:89:55:B1:2E:66:A1:54:3B:4F:3B:54:5A:A0:70:45
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       248344
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/fa69d46a974f1524743958903672b405c5af7773.roa
Signing time:             Sun 12 Nov 2023 14:07:05 +0000
ROA not before:           Sun 12 Nov 2023 14:07:05 +0000
ROA not after:            Wed 12 Nov 2025 14:07:05 +0000
asID:                     263779
IP address blocks:        2801:1d:a002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392900 (0x248344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Nov 12 14:07:05 2023 GMT
            Not After : Nov 12 14:07:05 2025 GMT
        Subject: CN=fa69d46a974f1524743958903672b405c5af7773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:6a:31:72:a7:5c:f3:69:9e:1c:2f:a1:3b:
                    48:fc:17:08:60:ad:e6:c3:93:dd:53:f9:f6:c5:ea:
                    b0:6f:29:b8:76:b2:eb:ff:0c:c7:6c:2f:ca:7e:61:
                    2c:f1:73:56:bb:79:83:6d:5e:7b:b2:a2:9c:b5:ba:
                    22:00:d6:35:37:cd:74:20:80:62:88:35:05:f1:1a:
                    4d:b8:dc:96:77:16:49:89:bc:6e:af:f1:86:c1:f6:
                    bd:6c:68:82:98:ee:4e:8e:eb:f2:aa:6d:98:1e:45:
                    40:f4:53:16:6c:d3:64:1c:e0:fb:65:b2:d6:99:46:
                    5f:d2:be:16:b7:90:f0:cc:2c:8b:41:c2:71:d4:34:
                    85:01:c6:0c:ae:eb:78:10:e2:a9:b8:2b:67:8a:9c:
                    20:81:b7:b6:32:46:fb:a7:30:70:c9:19:2b:b2:51:
                    c4:b1:7b:f4:f5:94:ea:44:58:dc:eb:a0:5c:39:41:
                    51:4a:d5:df:ee:f6:b5:5d:36:5d:34:47:fa:cc:e0:
                    6b:ea:2f:a6:9e:b5:6e:f6:37:73:30:75:6b:b0:d6:
                    6f:0e:58:cf:ce:cd:83:93:6c:8a:67:05:d2:6a:b8:
                    47:c7:cb:1e:ce:17:b2:1c:24:d6:76:fa:50:9a:3d:
                    9d:f0:ec:1b:0d:7e:ba:fa:e0:90:a1:0f:16:50:43:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:E3:7B:3C:89:55:B1:2E:66:A1:54:3B:4F:3B:54:5A:A0:70:45
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/fa69d46a974f1524743958903672b405c5af7773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a002::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:51:11:fb:d9:8e:7d:a1:5d:d7:15:cf:ba:05:4c:0d:dc:
         56:41:3e:84:f0:97:56:17:3b:0a:8e:47:3d:92:1e:15:62:10:
         b3:fb:a5:11:d9:64:e6:02:c8:5e:5c:57:99:90:1f:f5:87:ca:
         8a:93:31:32:97:b6:18:64:ea:0d:9d:68:fe:8c:77:07:28:f6:
         84:86:48:cb:a4:7e:8a:8e:2d:9a:b0:15:ea:f2:cb:c2:25:4c:
         10:9f:d1:e0:11:d4:1a:cf:48:51:e6:b5:de:19:28:fc:76:38:
         06:b5:e3:a0:26:7d:cf:37:0d:a0:09:ea:2a:f5:df:80:db:0d:
         01:c5:95:e5:fe:52:49:eb:71:88:4e:b6:27:87:a4:16:3c:95:
         78:77:9b:9d:60:48:d4:81:72:7e:34:fa:5e:9f:3a:d3:ff:41:
         bb:aa:49:be:86:f8:6f:88:d6:cf:05:7b:01:4c:ea:5a:b5:4d:
         26:0a:6f:ad:49:ed:5a:f6:4c:c6:bf:76:37:d9:25:8d:70:ec:
         87:7e:77:92:e6:b2:f3:fe:08:4e:46:dd:f5:e4:43:2e:04:39:
         d4:6a:dc:6e:3d:2a:aa:ac:08:70:bb:44:75:cd:53:40:17:f1:
         6e:13:64:37:c9:6f:6b:92:22:af:3d:0b:2d:df:a4:ce:91:a3:
         4c:19:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----