Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/400995979417e029995e5a723f24872045a0a17f.roa
File:                     400995979417e029995e5a723f24872045a0a17f.roa (raw, json)
Hash identifier:          aDDMqp7cSCdPbQVZvLRZa3CJ2KihYE5iKqZH+ApTNdk=
Subject key identifier:   88:8C:25:12:EE:C1:67:33:D1:8E:5F:DC:64:61:2D:AA:B1:26:B7:55
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       433D
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/400995979417e029995e5a723f24872045a0a17f.roa
Signing time:             Sun 05 Feb 2023 23:29:35 +0000
ROA not before:           Sat 04 Feb 2023 23:04:10 +0000
ROA not after:            Wed 05 Feb 2025 23:04:10 +0000
asID:                     272937
IP address blocks:        2803:3190::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17213 (0x433d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Feb  4 23:04:10 2023 GMT
            Not After : Feb  5 23:04:10 2025 GMT
        Subject: CN=400995979417e029995e5a723f24872045a0a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:f4:8a:1f:84:97:e2:20:9a:d0:ca:00:c3:
                    fc:ce:64:b0:a5:9f:9e:ac:46:03:1a:9f:8c:74:e9:
                    dc:9f:1c:ba:06:68:c7:c2:0b:c3:4c:f4:c6:43:6b:
                    32:e3:00:31:fd:15:34:13:bb:bb:2d:6b:d5:ac:fc:
                    33:81:7c:fb:4a:a3:48:98:35:85:83:12:f6:b1:cc:
                    30:25:43:05:ac:41:f9:01:d5:ca:ad:1d:7c:c0:bf:
                    5e:dd:33:9e:3b:a0:b9:a3:df:01:38:e8:17:49:e2:
                    4e:4e:62:b8:e9:40:41:72:87:fc:2a:e3:a7:91:9d:
                    0e:ef:a5:c2:a3:43:e0:6a:49:95:88:f4:74:f6:78:
                    4e:65:88:b4:e1:fa:36:09:db:a1:5a:89:b9:64:a2:
                    e4:7d:7a:fa:08:0e:e0:eb:93:e3:3b:ff:46:8e:a5:
                    23:6a:be:51:75:48:46:bd:d4:19:2a:c0:91:dc:90:
                    5d:9e:0a:7a:34:cd:57:e9:92:33:b1:e0:ca:8f:24:
                    30:e3:15:1b:c2:7b:8e:09:60:cc:a9:cc:70:51:9c:
                    bc:b0:41:46:44:8c:79:60:6e:fa:c8:07:c3:e8:9a:
                    2d:f4:46:25:d7:5f:db:7e:c4:50:92:d3:b4:62:4d:
                    30:7c:a1:d2:b4:cc:51:06:86:f8:6e:4f:be:1c:fb:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8C:25:12:EE:C1:67:33:D1:8E:5F:DC:64:61:2D:AA:B1:26:B7:55
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/400995979417e029995e5a723f24872045a0a17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:1e:55:81:20:01:f7:07:42:b9:28:ba:b9:ef:ac:5a:05:
         00:57:cb:a9:81:5c:ad:a7:ee:35:24:fd:fb:66:a3:2e:60:db:
         c8:43:09:d7:4b:35:3e:ab:ab:90:5e:8e:d2:0a:c8:f4:e5:f2:
         ae:ac:c4:88:99:33:0d:21:46:01:fe:00:69:7f:6f:de:ed:23:
         90:10:e6:d1:4b:8f:bf:05:35:ef:8a:08:15:16:37:05:e9:d4:
         e0:a3:2d:e0:a5:b3:40:69:09:b4:5b:c6:20:ed:b1:58:10:10:
         ad:2a:46:88:65:aa:8d:a1:bb:c0:b6:6f:1b:8d:6d:a6:ea:56:
         5e:cc:2b:45:55:f6:5e:13:75:ff:1f:e1:43:39:22:c8:8a:0d:
         1c:6b:89:c0:e0:7a:f3:ea:5e:36:9e:c8:63:27:48:1b:55:ff:
         0f:f1:48:43:63:c3:26:47:15:24:ba:6c:f9:c4:39:b2:da:87:
         0a:ee:85:29:ae:ab:b5:4d:4b:e2:b7:10:13:7c:f2:ca:b8:f0:
         0e:68:7b:92:57:7d:63:21:dc:5e:b5:69:34:f6:74:b6:db:30:
         f4:b1:c0:67:e8:51:f4:97:29:d5:41:e3:cb:a0:55:08:c0:46:
         0a:cf:a4:1e:38:53:be:6e:dc:d2:bb:a0:82:34:e3:54:21:68:
         25:00:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----