Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/14dc62e6bb385216114878413ccb3d7da5b5f8b2.roa
File:                     14dc62e6bb385216114878413ccb3d7da5b5f8b2.roa (raw, json)
Hash identifier:          nRUCkM9t3nuwOOIfvnlAUDPf9Ca8gVzTbEpljCGzntw=
Subject key identifier:   AE:5C:A6:58:EE:81:DD:7E:77:C2:EF:1B:6C:4C:6A:F9:9F:ED:82:D5
Certificate issuer:       /CN=bf38729659b3ab84a635f8b5534cde56fe622a7b
Certificate serial:       289C6D
Authority key identifier: A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/14dc62e6bb385216114878413ccb3d7da5b5f8b2.roa
Signing time:             Fri 12 Apr 2024 13:35:44 +0000
ROA not before:           Fri 12 Apr 2024 13:35:44 +0000
ROA not after:            Sun 12 Apr 2026 13:35:44 +0000
asID:                     14232
IP address blocks:        2800:2b0::/32 maxlen: 48
                          2800:2b0:4000::/34 maxlen: 48
                          2800:2b0:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661485 (0x289c6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf38729659b3ab84a635f8b5534cde56fe622a7b
        Validity
            Not Before: Apr 12 13:35:44 2024 GMT
            Not After : Apr 12 13:35:44 2026 GMT
        Subject: CN=14dc62e6bb385216114878413ccb3d7da5b5f8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:db:83:ae:f8:28:8e:f6:85:c9:5b:21:f5:
                    fa:a2:0d:b0:8a:3b:c3:51:09:8c:37:ea:a7:93:70:
                    1d:c2:40:de:12:02:73:eb:9a:7f:fd:fd:aa:51:e9:
                    1c:a5:b9:23:b7:1f:e7:c3:91:a5:3c:20:b9:5f:15:
                    5a:2d:ff:4e:2f:c1:06:1a:18:51:7d:7f:b7:07:c2:
                    be:ce:bb:30:62:cb:ec:56:8e:6c:2c:4e:d5:cf:40:
                    97:d8:06:64:f3:c6:8b:27:94:9c:41:2a:00:a1:bb:
                    45:30:70:03:1f:01:56:63:42:a1:0c:11:97:e0:31:
                    f6:50:e1:d6:96:db:7d:db:24:25:9d:66:0b:56:13:
                    8a:8d:48:bd:d6:d3:cb:d4:65:d1:42:5c:4e:e6:88:
                    1e:bd:2a:66:c8:d2:83:0f:ff:9f:95:88:1d:c6:7f:
                    a6:8c:c4:a5:09:54:3c:80:3f:13:9c:e6:3f:dd:a9:
                    0e:80:4e:2d:49:85:08:94:cd:f4:73:1f:fe:5d:de:
                    47:3d:9b:72:9a:6e:9e:07:d7:9f:7d:7e:4d:00:5a:
                    ec:32:a1:f7:e0:3a:d8:f3:7b:16:9b:1b:a4:73:6f:
                    66:83:f9:18:46:6f:9c:34:34:28:7a:80:84:e8:82:
                    c0:61:3f:90:9e:b8:9f:c5:8a:37:9d:8f:9d:e8:33:
                    65:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:A6:58:EE:81:DD:7E:77:C2:EF:1B:6C:4C:6A:F9:9F:ED:82:D5
            X509v3 Authority Key Identifier:
                keyid:A5:5D:CF:19:72:8B:E3:B8:A2:A9:1C:6A:38:EB:B5:3E:86:16:0C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf38729659b3ab84a635f8b5534cde56fe622a7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/14dc62e6bb385216114878413ccb3d7da5b5f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aacf58c3-f7f6-4438-9bc7-495121332594/bf38729659b3ab84a635f8b5534cde56fe622a7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:41:d7:3e:af:c4:05:3c:4d:f0:ed:ea:81:86:c8:bb:5d:84:
         86:55:48:e0:c1:64:e0:27:58:61:b6:45:db:2b:6c:c2:1b:b7:
         51:54:9e:9e:38:95:e8:7f:45:d1:15:99:ed:b5:15:dd:b6:c4:
         bb:5c:38:b8:64:88:79:e6:4a:80:7c:7d:39:16:c5:2c:22:11:
         18:91:fc:e2:6f:90:be:1b:6d:32:f0:5c:99:fc:a9:c0:65:f0:
         ae:f6:b9:48:1d:4f:9a:e8:f5:aa:47:f5:bf:20:b0:6f:7c:bb:
         e4:15:6f:7e:63:39:5e:0f:54:db:e1:2b:1b:20:75:df:e3:d9:
         6d:1c:3e:63:78:e1:4b:6a:71:0f:00:8a:76:0a:25:a8:8f:73:
         b7:38:86:89:84:8a:1c:f6:cd:da:de:58:28:7c:e2:6b:b3:d2:
         47:8d:ed:b1:8b:45:be:c7:e4:b6:bf:0f:e6:5a:42:8b:60:bc:
         9b:75:c9:d0:5c:45:d7:d5:48:c6:3a:e3:02:b1:3a:e1:09:8f:
         d5:6c:9c:fc:85:d5:93:6c:e6:28:66:96:96:c7:c0:61:a8:8c:
         6e:b9:03:67:dd:6c:ff:ed:64:8e:d6:4d:72:cf:41:54:31:38:
         72:b2:35:53:35:47:77:6a:7d:70:66:19:61:c8:3c:42:37:26:
         9f:c7:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----