Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/e326b5662ddbcb35df86160c0bb13efff371047c.roa
File:                     e326b5662ddbcb35df86160c0bb13efff371047c.roa (raw, json)
Hash identifier:          AHxMhJmUyJRwr8kwwJm5ba+8H1TWTL0Q0ru2FWcXk6k=
Subject key identifier:   92:18:EF:32:E0:8B:63:9F:D3:9B:25:D2:AE:54:91:0F:7D:98:87:29
Certificate issuer:       /CN=905b46fff5683184231e0110f383972f42161459
Certificate serial:       0F9FBB
Authority key identifier: F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/e326b5662ddbcb35df86160c0bb13efff371047c.roa
Signing time:             Sun 16 Apr 2023 18:45:46 +0000
ROA not before:           Sat 15 Apr 2023 18:45:45 +0000
ROA not after:            Wed 16 Apr 2025 18:45:45 +0000
asID:                     264668
IP address blocks:        2803:c610::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023931 (0xf9fbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905b46fff5683184231e0110f383972f42161459
        Validity
            Not Before: Apr 15 18:45:45 2023 GMT
            Not After : Apr 16 18:45:45 2025 GMT
        Subject: CN=e326b5662ddbcb35df86160c0bb13efff371047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:98:87:76:05:33:8d:7a:a9:6a:8f:62:e3:
                    df:df:68:a6:59:34:33:e4:a5:be:1f:a7:e3:57:72:
                    75:99:28:c9:f4:49:1c:3b:97:02:69:09:44:ed:30:
                    fa:74:78:32:ab:f8:c4:1d:f3:3c:e7:ad:49:7c:6f:
                    6b:3a:10:14:00:2b:ad:15:2d:d3:7c:35:cc:db:23:
                    eb:11:66:c1:65:27:4a:0b:52:0d:69:d6:5a:35:ce:
                    97:5c:7e:36:42:f5:b1:12:d4:5b:f6:21:80:70:8d:
                    b2:9b:55:dd:9d:cd:eb:f8:57:7d:4e:9a:11:5e:16:
                    95:89:b9:94:7c:06:4d:63:0a:18:ff:2d:d0:9a:88:
                    cd:e4:d3:38:be:a6:26:49:36:78:65:c1:de:5c:9a:
                    ce:49:12:70:dd:02:c4:eb:b0:d0:8d:3f:34:68:59:
                    29:86:a3:5f:a4:a7:06:12:58:18:28:99:bc:e1:89:
                    4b:93:80:6b:2f:81:64:39:a4:79:55:40:55:ef:5b:
                    8b:55:bd:ea:83:fc:50:7f:e0:01:c9:fa:fe:a5:d1:
                    2a:fe:46:1f:16:58:60:ff:f5:fb:0e:1e:ef:a1:95:
                    9d:b9:af:82:18:9b:55:d7:ed:22:ef:e4:87:78:60:
                    08:d5:22:32:b1:78:3f:7a:06:ce:03:b9:9e:39:f0:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:EF:32:E0:8B:63:9F:D3:9B:25:D2:AE:54:91:0F:7D:98:87:29
            X509v3 Authority Key Identifier:
                keyid:F1:FA:A0:A2:66:E1:60:E9:48:31:03:98:E4:87:2D:5C:DE:98:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905b46fff5683184231e0110f383972f42161459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/e326b5662ddbcb35df86160c0bb13efff371047c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf15426-f30e-4d9e-82f3-9db4dcdfa90e/905b46fff5683184231e0110f383972f42161459.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:a8:9f:e4:32:e8:e8:c7:92:50:25:39:20:22:d1:55:10:
         e9:81:3b:20:6d:5b:48:62:80:4b:bf:85:3d:90:95:08:9e:c2:
         57:2b:4e:57:a6:ec:e2:0c:1c:0b:9f:29:9c:5e:d9:92:92:93:
         ae:2c:39:73:cb:53:a0:fc:3d:09:51:c3:30:df:f4:fe:fc:3d:
         91:73:03:2f:40:26:f2:37:9b:12:44:0a:25:2b:35:7b:9a:41:
         49:95:1e:b1:d9:3c:26:48:f1:6d:ea:62:4e:ea:2a:90:b9:75:
         36:be:74:db:30:eb:64:e8:2c:70:20:d0:30:e3:5c:d9:ba:82:
         94:53:96:dc:0a:fb:db:19:c4:03:52:0a:24:06:30:b4:77:97:
         b6:3e:19:48:79:49:f8:c1:43:63:81:0b:79:5d:41:48:74:bb:
         f4:27:95:e6:c8:cb:c6:40:a2:7e:f7:34:1c:81:b2:c4:98:29:
         12:2d:19:ad:4f:04:c7:40:02:28:11:39:0a:31:10:5d:f2:f2:
         dc:8e:63:75:62:2b:51:da:8d:d1:ff:44:ee:a7:d2:f1:5a:8a:
         cb:fb:be:e0:ca:74:3b:9f:89:85:60:0d:74:13:2b:4d:84:3b:
         2d:16:92:ae:ea:bf:da:2b:93:37:9b:c3:78:8b:cf:bc:40:37:
         58:e0:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----