Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1bcfaf1f898804cd7aecd9d5ad7449e39fc390d2.roa
File:                     1bcfaf1f898804cd7aecd9d5ad7449e39fc390d2.roa (raw, json)
Hash identifier:          SQjQ2YMbMoRbBx0RS1qOBQzAXVnstHdwdm1/8NQOIlE=
Subject key identifier:   FA:73:03:8D:8D:40:C2:12:44:7F:15:BE:34:96:C3:41:0C:62:24:58
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       20A0AD
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1bcfaf1f898804cd7aecd9d5ad7449e39fc390d2.roa
Signing time:             Tue 02 May 2023 16:17:36 +0000
ROA not before:           Mon 01 May 2023 16:17:36 +0000
ROA not after:            Fri 02 May 2025 16:17:36 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138285 (0x20a0ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: May  1 16:17:36 2023 GMT
            Not After : May  2 16:17:36 2025 GMT
        Subject: CN=1bcfaf1f898804cd7aecd9d5ad7449e39fc390d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:d3:05:d3:ff:37:31:86:f9:f4:fc:e3:15:
                    1b:3a:c2:2b:8b:61:72:5f:86:f0:ab:1a:43:0c:65:
                    5f:87:b9:87:1b:1d:e7:fa:d1:64:0b:a3:b7:0c:7f:
                    d9:4d:37:f4:58:b8:97:bb:f8:74:50:ae:48:fd:7f:
                    15:76:e0:4d:ef:1a:c4:8d:f7:ae:5f:fa:3a:14:d1:
                    fd:df:ac:86:59:b5:92:00:38:70:0f:b7:cf:f8:44:
                    d6:31:70:eb:9f:8e:b6:20:d5:bd:ee:18:82:1a:ac:
                    f0:69:79:f3:7b:71:f2:db:96:98:7c:8b:91:c9:85:
                    54:b2:d0:1b:fe:e0:76:bf:0c:25:56:71:97:7c:83:
                    24:06:d7:63:14:f2:1b:b5:3d:ef:bb:7e:fd:dc:3f:
                    43:e0:b1:17:ec:d3:b8:f7:b5:9e:66:b0:19:61:e4:
                    e5:89:85:81:d4:56:b9:99:bf:c8:2d:c4:de:4f:a1:
                    2a:1d:bf:82:d3:44:fd:8b:ce:52:1e:3f:c6:dc:7b:
                    dc:7a:ac:5a:0e:1d:12:da:eb:33:f0:96:d6:a7:a8:
                    9e:b4:87:d2:95:47:c2:4f:92:dd:cd:fd:2e:02:7a:
                    a6:aa:28:c8:58:f2:f4:07:ea:1a:b9:ee:1d:20:b4:
                    c0:7c:76:71:f2:77:d1:8a:ce:8b:d4:ac:08:8c:3a:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:73:03:8D:8D:40:C2:12:44:7F:15:BE:34:96:C3:41:0C:62:24:58
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/1bcfaf1f898804cd7aecd9d5ad7449e39fc390d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:b5:c5:e2:ea:05:7b:b1:1a:0e:49:6f:1d:90:ab:82:3e:
         39:67:78:ce:7e:35:c6:72:b7:01:6d:9d:47:08:0f:6e:18:dc:
         5e:4d:7b:f8:65:8d:f3:8e:88:c9:9f:65:e9:ec:35:cd:42:17:
         a5:94:0b:0c:20:15:a2:69:d3:ab:20:25:81:99:e9:90:d9:41:
         e0:e2:12:e7:a8:fe:af:96:70:2b:20:1c:05:40:30:75:02:69:
         ef:66:8b:5f:59:36:91:91:21:6e:3e:b4:b0:ff:09:2d:b4:f7:
         18:6a:fe:4b:30:5c:4b:f9:a7:90:7a:18:ff:41:5f:59:5a:f9:
         40:da:46:67:b1:e2:60:d9:de:50:dd:31:03:f3:d2:34:10:82:
         7c:62:16:8b:05:c2:f4:80:89:28:b0:ce:4f:f6:8f:55:8d:13:
         2d:9c:a7:02:22:50:17:21:62:37:76:be:51:0a:09:67:50:3f:
         46:34:42:4d:20:92:04:27:db:6c:1f:eb:c5:92:f5:8d:04:1a:
         1a:0a:12:33:54:36:02:98:39:6b:1f:22:e1:9c:19:b8:ae:4c:
         1f:b4:72:14:92:4c:d5:07:b3:da:9a:e8:02:ff:3d:71:9f:ac:
         c5:f3:8f:ad:d9:25:68:0e:0f:da:d1:94:c3:b8:14:db:b9:60:
         bf:fe:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----