Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9d8a35812431bf117e632b5cc8dc4a33a3fb0e04.roa
File:                     9d8a35812431bf117e632b5cc8dc4a33a3fb0e04.roa (raw, json)
Hash identifier:          rqsk+xPuPRJKmLJBw8tr4XZREy/otiZ4RT9MgjQVsjk=
Subject key identifier:   46:BC:D6:F4:A7:1F:F3:CC:15:4A:11:C4:25:AE:2F:6C:B3:2A:2A:2A
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       210588
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9d8a35812431bf117e632b5cc8dc4a33a3fb0e04.roa
Signing time:             Wed 25 Jan 2023 13:13:00 +0000
ROA not before:           Wed 24 Aug 2022 16:22:08 +0000
ROA not after:            Mon 26 Aug 2024 16:22:08 +0000
asID:                     262589
IP address blocks:        2800:310::/32 maxlen: 48
                          2800:310::/33 maxlen: 48
                          2800:310:8000::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164104 (0x210588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Aug 24 16:22:08 2022 GMT
            Not After : Aug 26 16:22:08 2024 GMT
        Subject: CN=9d8a35812431bf117e632b5cc8dc4a33a3fb0e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:9f:a7:9f:29:e4:67:b0:fc:d3:76:93:d5:
                    41:f1:5d:e0:ec:75:14:87:e2:6a:5f:8a:f3:2d:f1:
                    94:3a:4e:20:67:a4:90:49:8b:e5:73:f8:87:c9:84:
                    dc:0f:93:ad:38:56:3a:4d:d2:38:04:ae:c2:bf:af:
                    65:e9:09:f3:ca:28:52:78:35:55:0b:5f:4f:88:4f:
                    66:d6:c9:b7:9b:c8:73:cf:98:cf:f5:c1:f1:55:13:
                    62:de:16:77:93:0c:24:61:07:99:85:cc:b1:06:dd:
                    7d:7e:2e:aa:58:c7:8d:18:9a:65:62:fb:d7:57:74:
                    24:f1:65:4e:ff:bd:08:41:4d:a3:b2:47:e2:c8:03:
                    aa:a1:74:8d:65:51:9b:2b:b0:e3:be:6a:c3:5b:eb:
                    1b:c0:83:48:1b:99:2a:f5:ae:73:09:c1:d9:73:de:
                    fd:26:6a:b6:c2:83:4c:1d:a9:c0:aa:84:d5:1e:e8:
                    f2:bc:86:87:f6:31:92:c0:3e:b4:35:41:dc:7b:48:
                    6b:1e:c9:72:3a:19:09:84:15:f1:e0:f3:a3:6d:15:
                    b0:c8:93:0c:53:58:ab:0c:62:a9:89:f6:d9:46:69:
                    47:5f:c9:40:08:64:6d:b7:7f:a6:0d:37:8e:e3:d9:
                    36:79:f3:86:6a:29:21:33:f3:77:b1:d3:c0:d0:b5:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BC:D6:F4:A7:1F:F3:CC:15:4A:11:C4:25:AE:2F:6C:B3:2A:2A:2A
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9d8a35812431bf117e632b5cc8dc4a33a3fb0e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:5d:5a:05:e5:e7:4f:d4:90:1f:47:de:51:81:64:80:7e:
         9f:4d:55:71:b9:41:cc:10:cd:0e:97:69:03:e7:1b:b2:4d:33:
         a3:60:82:c7:c6:17:0f:c1:38:fe:a6:26:9c:5d:2c:fe:11:8d:
         3d:4f:ba:ff:6f:bd:78:15:01:06:a8:16:f0:2d:58:c1:61:89:
         ac:b8:b1:45:dd:01:55:b5:17:cf:86:0a:b2:51:44:66:4f:d2:
         41:0b:f0:b3:e1:05:e4:93:e2:81:33:0a:39:ee:ac:6d:d1:9a:
         40:35:61:74:0e:f6:30:01:94:f2:10:d9:25:56:1a:a4:18:b1:
         03:ca:0d:c0:c8:72:aa:d0:f0:4a:07:3e:a7:94:13:9a:d1:fd:
         8d:66:8d:93:17:b2:fd:91:3f:48:cf:b2:d5:7a:3e:79:63:ec:
         ea:b2:02:03:bb:47:d7:9e:19:a2:e4:a1:c3:62:c1:c7:63:9a:
         f4:28:7f:05:7a:e6:2b:79:c8:19:0c:63:b0:06:9b:ee:b2:2d:
         ec:df:ff:92:62:9f:53:d4:98:69:c6:cc:70:1c:ae:b5:a4:f3:
         18:c1:3f:85:10:94:6c:9a:81:5d:26:e8:da:a6:86:02:48:3a:
         03:fa:ad:3b:79:1f:b7:cb:c1:64:db:ae:0d:f9:70:6a:5a:8f:
         3f:60:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----