Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa
File:                     923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa (raw, json)
Hash identifier:          fUJPkc2qIoc7oVwSZuw+2eJsxoIgYJt/CHLXz5fmQhc=
Subject key identifier:   21:3D:44:3E:2B:84:44:ED:7C:EE:8C:AB:01:A3:3F:48:28:9D:4A:69
Certificate issuer:       /CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
Certificate serial:       0C294E
Authority key identifier: 98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa
Signing time:             Tue 26 Mar 2024 05:29:17 +0000
ROA not before:           Tue 26 Mar 2024 05:29:17 +0000
ROA not after:            Thu 26 Mar 2026 05:29:17 +0000
asID:                     272831
IP address blocks:        2803:f490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797006 (0xc294e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0
        Validity
            Not Before: Mar 26 05:29:17 2024 GMT
            Not After : Mar 26 05:29:17 2026 GMT
        Subject: CN=923dda4c6736a640579053c6dc7ba5bdbfc14b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:8e:44:35:23:5b:39:49:00:50:e2:7b:0b:
                    49:d5:d4:4b:30:e5:5a:68:ad:9b:cd:03:49:58:ed:
                    14:82:49:3b:d7:a5:66:38:bb:ba:d0:a0:b7:f9:b3:
                    62:9b:fa:c4:3b:c4:21:a4:40:13:12:4e:31:5f:0d:
                    ca:d2:6e:c8:40:21:65:aa:77:17:47:24:db:7d:af:
                    e2:4c:2e:07:6d:73:80:14:6e:84:5b:bd:97:b8:d0:
                    9d:45:24:2c:2f:00:17:69:7a:af:7e:6f:20:9e:8c:
                    79:50:bf:e9:8d:4b:98:0a:90:61:ac:00:16:65:fa:
                    b8:8d:66:81:30:dc:51:bf:08:b0:84:74:da:65:5a:
                    d8:93:ba:09:c5:4d:6d:3d:72:38:db:a6:4e:71:1b:
                    a3:cd:6a:74:49:16:1b:e3:2c:41:33:dc:9d:f5:0f:
                    93:05:a4:16:c9:8c:28:af:06:97:34:ba:a6:47:42:
                    09:f3:6b:12:27:da:c1:9a:c7:41:2c:8e:4e:2a:71:
                    66:60:80:e3:40:81:bf:7e:e7:d6:6c:5c:25:b2:8f:
                    81:88:51:4b:d5:f1:f1:2d:33:a2:72:50:b0:dc:e0:
                    b3:dd:2c:da:2a:55:3c:a3:68:15:9b:8a:29:0e:9c:
                    29:aa:02:12:0b:a8:3d:5e:6b:b2:23:a3:fe:24:e1:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:44:3E:2B:84:44:ED:7C:EE:8C:AB:01:A3:3F:48:28:9D:4A:69
            X509v3 Authority Key Identifier:
                keyid:98:8F:E0:2B:93:F3:33:60:61:68:8C:2B:08:1F:20:B9:D0:DF:39:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/923dda4c6736a640579053c6dc7ba5bdbfc14b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abfcfc8a-5076-4f46-93a5-2afe16ecfcdf/fc000518b72d6e1a4fec73d96a0f7c0c48dc32b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f490::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:78:a7:8a:e4:7b:a8:f2:52:55:a1:a5:50:1b:4d:43:d6:
         98:fc:a0:75:3e:3c:0f:e0:38:03:7c:8d:03:9c:c2:c2:81:af:
         3b:84:e6:7b:ce:50:22:7b:e1:88:50:bf:98:ed:ae:87:dc:d3:
         82:0c:2b:a7:cd:36:5b:6c:75:aa:d4:92:ae:c7:24:28:5f:75:
         00:6e:44:b2:49:c3:20:6f:77:ed:09:da:97:5a:3c:31:1e:7c:
         e5:c1:4b:a0:2c:48:9d:a0:11:2b:1f:e7:40:fd:8a:0d:9b:63:
         34:cd:cc:65:37:96:00:3a:b6:ed:99:e7:7c:f0:3d:93:dc:03:
         00:74:21:d7:f2:d3:c0:17:9c:5d:1a:4b:c8:91:ea:fc:7c:76:
         e5:7a:91:da:9d:59:34:00:dd:84:82:44:95:97:ef:b7:d9:eb:
         0b:e8:2d:8f:56:14:a1:20:41:66:fb:d3:19:2a:2a:c0:f5:41:
         cd:51:54:87:24:e9:81:b5:f6:a8:e2:c9:46:24:92:67:9e:2a:
         31:0d:e4:88:4a:59:53:5f:cd:4d:9b:a3:2d:7a:18:14:c9:77:
         42:f3:42:6e:cf:fe:69:ec:c3:51:56:86:1c:61:4f:08:3b:90:
         18:de:60:ce:9b:0c:88:b7:3c:19:23:56:5d:a6:66:d3:d2:6a:
         ae:d2:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----