Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/c1f86af813c2468818a3c93632620656c1afb167.roa
File:                     c1f86af813c2468818a3c93632620656c1afb167.roa (raw, json)
Hash identifier:          2OYQTtbY8XLDQNYNYc8wijF7LZRGQ/ORjoinkaAPaqc=
Subject key identifier:   D1:EC:EC:74:A8:27:D7:D9:6E:75:05:C4:FF:F3:74:95:C3:56:4E:BA
Certificate issuer:       /CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
Certificate serial:       04D86E
Authority key identifier: EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/c1f86af813c2468818a3c93632620656c1afb167.roa
Signing time:             Mon 31 Jul 2023 04:52:26 +0000
ROA not before:           Sun 30 Jul 2023 04:52:26 +0000
ROA not after:            Thu 31 Jul 2025 04:52:26 +0000
asID:                     272937
IP address blocks:        2803:3190:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317550 (0x4d86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4195cc9e3c1519904a3f174089ebe65f0ac0cae9
        Validity
            Not Before: Jul 30 04:52:26 2023 GMT
            Not After : Jul 31 04:52:26 2025 GMT
        Subject: CN=c1f86af813c2468818a3c93632620656c1afb167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:14:f4:7a:3a:b9:3a:54:53:3e:49:9c:eb:
                    a4:8c:d1:39:4b:e7:4c:e8:ac:ae:c1:f0:08:a3:ab:
                    c0:8e:00:50:ba:dd:71:3f:de:61:a7:69:70:a5:a2:
                    72:0c:ca:c2:5e:cd:d3:d8:0c:4b:77:4c:71:48:ae:
                    c1:c5:c3:07:3d:09:a6:55:5d:18:49:ec:14:c4:80:
                    1b:07:27:29:49:cd:d0:e6:08:4b:15:f6:62:79:99:
                    44:9f:77:0e:a5:7c:6d:89:fd:99:f7:c2:23:d8:86:
                    5e:db:c7:5b:67:d1:bc:5d:8e:15:41:5c:16:a7:82:
                    d2:76:c0:a4:25:a4:de:ec:f7:b0:e1:14:1d:8d:2a:
                    b8:10:9f:2e:86:a6:18:fe:a8:cb:f7:7f:3d:e4:24:
                    30:87:86:7b:3b:36:35:e6:16:1b:6b:36:a0:7a:0b:
                    84:9a:f4:85:18:65:86:ad:02:2c:29:aa:c1:e5:cb:
                    39:e5:c2:0b:df:83:4f:86:67:48:10:6c:27:85:c5:
                    c4:ba:45:7d:9f:dc:cc:fe:1f:a5:00:ca:30:fe:7d:
                    d0:12:1e:b3:c5:73:b9:96:9c:f1:97:7b:43:e2:7b:
                    f0:00:5d:f5:4d:1c:f2:d5:2c:b7:85:7c:94:0e:2f:
                    7e:52:3f:56:cb:14:a4:94:05:7b:62:dc:6a:cd:50:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:EC:74:A8:27:D7:D9:6E:75:05:C4:FF:F3:74:95:C3:56:4E:BA
            X509v3 Authority Key Identifier:
                keyid:EE:EB:09:96:F0:97:3A:4B:75:3F:87:05:8F:25:5A:7E:D1:A4:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/c1f86af813c2468818a3c93632620656c1afb167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8fedb73-36b4-42c9-a9d8-a3d328f12a72/4195cc9e3c1519904a3f174089ebe65f0ac0cae9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3190:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:42:92:43:f6:de:08:06:c7:a3:6b:15:d5:aa:c2:c5:f1:80:
         04:cb:ad:d2:44:d3:35:10:85:d4:9f:aa:04:b9:75:57:02:81:
         c8:81:0a:74:36:aa:72:9b:a7:41:b0:8f:dc:d0:1b:c0:f6:e1:
         44:42:33:4b:0a:e3:e6:b1:fa:24:81:4f:03:5e:fa:3e:12:91:
         6a:af:fb:31:cb:dc:0c:81:e7:23:d0:93:a2:53:0c:2d:94:61:
         2d:8e:93:6a:2f:5c:e1:cd:3d:bc:70:13:cc:e2:53:bd:cd:9e:
         8d:2e:49:1f:27:b5:45:aa:ca:bf:fa:6a:e0:41:51:06:7e:3b:
         e8:b4:ca:9a:6b:02:bf:47:7e:40:6b:e6:e3:2e:5f:24:6f:74:
         4e:43:2a:17:32:85:36:9f:1b:ce:cf:0e:ac:2e:13:35:68:2a:
         c7:89:8f:4a:dd:e1:e2:2d:e1:c8:68:b1:9c:91:42:58:11:84:
         a6:8c:3b:db:31:94:41:20:ac:39:a9:41:68:11:3f:81:62:61:
         f6:c1:3d:90:3a:61:28:a2:a6:3f:03:11:a6:11:8e:b6:73:9b:
         99:60:14:fe:b0:a3:33:4d:4d:e5:3a:c1:e2:5d:3a:ce:85:37:
         d2:38:eb:49:e8:44:eb:3c:9d:eb:22:a2:c1:d2:06:7b:bc:63:
         65:17:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----