Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/e5ef814cbd975329017e8947dc875647e8a3720b.roa
File:                     e5ef814cbd975329017e8947dc875647e8a3720b.roa (raw, json)
Hash identifier:          8/vl5BlrA83HPNz4O8QOLfGf+PY56cQ/Bs7HyJOS5y4=
Subject key identifier:   11:43:C4:45:E3:8A:6B:E5:41:36:44:71:FD:44:AF:C2:80:0A:89:1D
Certificate issuer:       /CN=8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d
Certificate serial:       F282
Authority key identifier: DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/e5ef814cbd975329017e8947dc875647e8a3720b.roa
Signing time:             Tue 14 Nov 2023 18:06:36 +0000
ROA not before:           Tue 14 Nov 2023 18:06:35 +0000
ROA not after:            Fri 14 Nov 2025 18:06:35 +0000
asID:                     273103
IP address blocks:        2803:7050::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62082 (0xf282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d
        Validity
            Not Before: Nov 14 18:06:35 2023 GMT
            Not After : Nov 14 18:06:35 2025 GMT
        Subject: CN=e5ef814cbd975329017e8947dc875647e8a3720b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:69:c6:50:61:b7:09:c2:88:d9:d8:99:7b:
                    92:23:12:e1:65:3e:79:98:cd:5e:df:16:22:37:4f:
                    a6:a8:99:22:ad:9d:ff:ea:1c:df:8a:fe:c7:14:df:
                    d0:ba:90:db:0e:9f:78:89:8a:6d:39:1c:ec:fd:9e:
                    76:96:2d:a4:be:3b:5c:91:ba:f5:34:ed:78:c6:28:
                    a7:98:4e:65:16:4c:c4:19:e2:41:67:02:72:67:e3:
                    ff:15:2a:02:70:a4:66:74:6f:16:54:ef:a3:8b:c0:
                    e2:ab:89:a7:c9:d3:f5:1f:42:1b:50:d0:49:c0:39:
                    46:74:0a:b0:17:be:da:1e:88:ef:26:16:8b:b3:67:
                    f9:11:b7:f9:72:44:15:59:ac:32:3d:4f:66:2d:93:
                    2f:22:c9:96:f0:ca:6d:4b:e0:a9:7b:2f:8a:80:0e:
                    a3:4e:53:1b:cd:de:7b:de:5e:e9:2b:da:5a:f6:1f:
                    0e:df:77:2b:7c:b2:4c:d7:77:5e:2f:56:df:e7:62:
                    f5:58:6c:24:df:aa:98:98:cb:8e:b8:f1:3b:a1:58:
                    8f:4b:7a:0c:41:bc:a4:01:ec:53:f7:c1:d9:e5:74:
                    40:8f:ab:61:1a:07:9d:46:08:bf:ff:c6:b5:9e:5d:
                    39:9f:53:e2:31:bc:7d:2a:72:b6:59:c0:fb:c6:04:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:43:C4:45:E3:8A:6B:E5:41:36:44:71:FD:44:AF:C2:80:0A:89:1D
            X509v3 Authority Key Identifier:
                keyid:DF:04:11:59:40:71:62:78:1C:7D:C7:8E:35:88:31:67:24:7D:00:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/e5ef814cbd975329017e8947dc875647e8a3720b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a24a8a49-2724-4dd3-a7fd-9fb5bf99ef86/8f81e4aaad6a0d73a6f8c9786a766940dd1daf0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7050::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:1c:30:39:44:3d:87:52:e7:5a:73:2c:41:d1:9e:c7:9b:3f:
         d8:20:5d:d0:8b:6e:86:36:91:f5:5b:8e:c0:0d:3c:d9:f5:53:
         b9:ac:eb:64:ac:de:66:ee:c6:e3:3b:1a:9a:b3:71:c1:d6:75:
         c2:c3:c6:c4:6d:50:bf:31:80:9c:df:0b:11:90:0b:9e:ac:37:
         06:ef:49:5b:3e:ab:45:d0:bb:1f:a0:0d:00:a6:f0:73:ae:57:
         a5:48:b3:29:b3:53:a6:cd:a5:05:0e:df:9d:65:d2:da:ee:fa:
         de:aa:7e:60:d9:61:c3:8e:b4:ac:74:6b:9e:53:4b:59:2f:7e:
         bb:4d:d0:55:0a:e1:fb:db:90:6d:0d:a1:a1:d4:37:9a:ef:4e:
         10:52:74:b0:66:c5:90:46:4e:37:e9:2c:14:98:0a:5a:83:a5:
         cc:a0:46:9f:2a:41:fd:dd:6e:35:6b:17:d6:b2:83:ad:14:f2:
         10:dd:2d:92:70:b8:ca:76:15:94:cb:91:88:52:46:da:96:58:
         40:97:ec:f6:50:98:f5:98:71:20:82:d1:cd:13:e0:57:38:b5:
         8a:e8:a7:06:8e:89:b5:6a:af:6b:55:e0:d0:03:e3:c0:fc:ef:
         01:68:03:1c:89:97:fb:de:ae:98:bd:89:5e:dd:cb:89:95:c2:
         62:7c:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----