Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/67f0a788ad1d5ecc0667a4f9ea8c71bfb9682df2.roa
File:                     67f0a788ad1d5ecc0667a4f9ea8c71bfb9682df2.roa (raw, json)
Hash identifier:          KtItOcD0UrmptGXY+1rpopBofJ/DWhlzJmLw8GzNH98=
Subject key identifier:   67:48:94:AE:BC:70:98:34:F9:54:50:F4:12:65:A1:2D:EB:F3:9C:07
Certificate issuer:       /CN=a15b01c2a8902bf345199fd88a365f092418a1fe
Certificate serial:       1EE8DD
Authority key identifier: BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/67f0a788ad1d5ecc0667a4f9ea8c71bfb9682df2.roa
Signing time:             Tue 07 Mar 2023 14:50:54 +0000
ROA not before:           Sun 05 Mar 2023 14:07:19 +0000
ROA not after:            Fri 07 Mar 2025 14:07:19 +0000
asID:                     265837
IP address blocks:        2803:e420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025693 (0x1ee8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15b01c2a8902bf345199fd88a365f092418a1fe
        Validity
            Not Before: Mar  5 14:07:19 2023 GMT
            Not After : Mar  7 14:07:19 2025 GMT
        Subject: CN=67f0a788ad1d5ecc0667a4f9ea8c71bfb9682df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:1b:95:f4:b9:1b:71:59:9b:20:fa:67:ea:
                    dc:fe:0b:05:3d:1e:e1:fa:d4:53:b1:09:81:0a:d9:
                    53:be:80:31:22:09:7b:e0:76:6f:10:d5:c5:b7:50:
                    f8:32:ea:52:88:18:3a:5b:e8:3f:4b:55:84:20:1b:
                    72:67:8b:e2:42:93:9f:f4:b1:a2:80:a2:98:c1:e7:
                    bb:1c:e4:6c:d2:2b:0e:b1:a2:9f:43:dd:bc:fe:4b:
                    d4:44:53:69:3e:57:61:d2:32:20:5f:17:f4:c3:29:
                    6d:5e:29:c6:42:6a:a5:ec:22:cb:04:e2:92:89:b8:
                    ed:bb:75:81:ff:a4:0d:7c:fa:96:7e:f6:a7:85:49:
                    e4:05:a2:13:e8:5a:75:a1:4b:4d:35:f0:4e:ce:84:
                    a9:46:3b:50:38:36:e3:13:43:04:7c:ce:57:38:af:
                    c3:69:30:69:73:4f:05:62:8d:6e:fe:79:9c:8d:b3:
                    e8:cc:8c:eb:ad:c1:48:d5:ae:9d:1b:6b:15:81:8d:
                    ee:cb:de:fc:fc:f0:44:03:9c:8e:d8:87:e4:bd:8b:
                    d0:88:ce:6a:4c:bd:13:2b:13:cc:a4:99:8f:9c:24:
                    0d:91:bf:73:27:1c:4b:55:9c:bc:91:58:5f:c8:a1:
                    10:32:27:b2:ed:98:f3:41:48:e9:a1:dc:fd:57:2f:
                    b9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:48:94:AE:BC:70:98:34:F9:54:50:F4:12:65:A1:2D:EB:F3:9C:07
            X509v3 Authority Key Identifier:
                keyid:BB:FC:F1:42:C4:C7:BA:5D:1C:4B:C6:3D:85:FB:B3:90:EF:19:EE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a15b01c2a8902bf345199fd88a365f092418a1fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/67f0a788ad1d5ecc0667a4f9ea8c71bfb9682df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e24430-e7f4-4b2a-88a8-07c3eb9a1fe0/a15b01c2a8902bf345199fd88a365f092418a1fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e420::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:f7:38:0a:10:fe:fa:e2:6d:c1:c6:9d:c0:52:20:43:09:
         f4:ef:e1:0c:ef:06:d2:ff:b9:99:0a:7e:58:a7:71:4c:ba:92:
         51:39:54:40:bb:ca:de:6b:17:60:57:02:8c:8a:28:cb:11:71:
         fb:8f:aa:e2:c4:8a:8f:60:72:ae:30:02:82:34:96:b8:58:fd:
         09:c1:d0:7a:f1:99:b5:eb:f6:c0:fe:28:0c:c2:14:1b:e3:06:
         ce:c5:0b:8f:a2:77:a8:fa:37:96:16:fc:f1:66:ea:29:78:9c:
         bf:5e:37:aa:69:e7:df:08:57:67:e7:bc:54:b9:d5:d5:3d:0a:
         55:cb:30:97:98:87:e9:b1:ca:de:94:76:90:2b:fa:86:8b:fd:
         f7:4b:e5:9e:ff:c3:ba:bd:77:3b:b4:bc:c5:89:0d:4e:3f:97:
         81:56:62:8c:cd:aa:30:cb:bf:c6:46:ec:a9:3a:9f:b8:7b:b5:
         92:d6:4d:47:41:5c:9a:5d:76:36:9e:b0:28:5a:7a:5a:76:03:
         25:ab:6d:fc:53:74:45:87:34:2a:22:f9:a8:a9:98:8a:8c:73:
         40:eb:d2:ce:8e:8d:53:05:26:18:18:69:fe:ca:1d:9e:f4:84:
         ec:8e:f1:53:db:7d:ca:4a:43:0e:f3:3d:f2:e7:b9:8a:22:31:
         a2:3b:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----