Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/db4968b4f7e36a0bc2010b9f20ec5ad448fd6690.roa
File:                     db4968b4f7e36a0bc2010b9f20ec5ad448fd6690.roa (raw, json)
Hash identifier:          KBjhcxDINXHC1uH6I4Z1+N2hI0395cDROqdNXxxtXhc=
Subject key identifier:   67:B5:F9:49:AA:26:63:D9:13:99:23:45:73:31:25:9B:85:50:CB:20
Certificate issuer:       /CN=6aca29b07c02c710bd73d00bf0cd4579755f76d4
Certificate serial:       04F312
Authority key identifier: 6E:66:B5:91:73:A1:AE:FD:FD:5D:17:53:A4:C6:4A:66:80:B2:BD:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aca29b07c02c710bd73d00bf0cd4579755f76d4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/db4968b4f7e36a0bc2010b9f20ec5ad448fd6690.roa
Signing time:             Sat 28 Oct 2023 22:02:54 +0000
ROA not before:           Sat 28 Oct 2023 22:02:54 +0000
ROA not after:            Tue 28 Oct 2025 22:02:54 +0000
asID:                     272882
IP address blocks:        2803:9a90::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324370 (0x4f312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca29b07c02c710bd73d00bf0cd4579755f76d4
        Validity
            Not Before: Oct 28 22:02:54 2023 GMT
            Not After : Oct 28 22:02:54 2025 GMT
        Subject: CN=db4968b4f7e36a0bc2010b9f20ec5ad448fd6690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:11:7c:05:e3:9c:cb:f2:b7:75:fb:bd:8f:
                    19:5b:cc:51:a8:cf:d8:37:27:6b:cf:05:61:0a:59:
                    8b:d6:e1:46:fa:54:ed:f1:9c:8c:4c:1a:93:44:5f:
                    45:7f:1e:a3:ae:fa:69:9c:52:3e:3e:b0:71:3d:0e:
                    10:ac:a4:b5:cc:96:b2:28:b6:73:1c:50:fc:b8:e8:
                    5f:8d:12:f7:c6:d0:9a:ce:53:ae:52:d2:9c:da:5e:
                    22:75:0d:64:13:9b:1d:c2:59:a2:f8:18:fd:45:04:
                    e2:82:93:5b:13:56:b2:72:c0:2a:98:9b:c6:ee:3f:
                    81:ac:51:06:fe:73:13:74:35:c5:2f:07:2e:4b:7c:
                    1f:5e:23:9d:4c:a5:bc:bd:2a:df:8a:97:fe:29:b5:
                    32:02:7e:79:fd:b4:51:c3:9e:9e:5f:73:89:1e:cc:
                    59:08:9a:88:e8:45:b6:b7:44:0b:a4:c7:c1:2a:a8:
                    3f:44:fe:e2:e9:2c:6d:8e:d8:2b:7e:fb:8a:3c:71:
                    7f:7e:02:d1:6b:bc:de:23:56:66:04:43:9d:f2:37:
                    82:fd:73:c2:be:5b:b0:10:8d:80:9b:93:bc:9f:6f:
                    b0:e7:3b:80:ca:eb:d5:77:07:4c:d9:73:e4:2d:13:
                    a5:59:2b:8d:8b:ba:2d:51:00:7c:ca:49:e4:a3:41:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:F9:49:AA:26:63:D9:13:99:23:45:73:31:25:9B:85:50:CB:20
            X509v3 Authority Key Identifier:
                keyid:6E:66:B5:91:73:A1:AE:FD:FD:5D:17:53:A4:C6:4A:66:80:B2:BD:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6aca29b07c02c710bd73d00bf0cd4579755f76d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/db4968b4f7e36a0bc2010b9f20ec5ad448fd6690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae9c1368-2755-4b28-9612-6762fe82675f/6aca29b07c02c710bd73d00bf0cd4579755f76d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:ba:be:3a:2a:42:1f:3a:11:31:c6:61:90:a2:4a:11:14:
         57:03:af:b0:ae:85:60:9e:0d:54:76:e9:dc:99:de:42:e1:35:
         3b:f2:2a:b8:bc:8b:f1:c3:d9:90:53:00:dd:ba:96:1b:8a:4e:
         b4:ab:2b:76:d1:69:16:02:80:62:2b:37:8e:cc:02:7d:40:35:
         0e:0a:b1:4b:c3:58:81:f3:f2:d7:27:0c:af:9e:f3:15:e5:81:
         93:41:33:37:2e:73:c3:b2:82:a8:9d:0b:e0:67:8f:f4:c4:5f:
         06:c3:03:a0:88:25:cd:f9:30:41:ee:09:25:8f:ce:87:95:62:
         72:0d:b9:75:3e:cd:11:1a:b4:13:78:8b:ed:23:db:8f:59:12:
         54:ee:98:04:5a:68:b0:cf:30:fd:e4:81:19:e0:20:1b:9d:8e:
         27:34:f1:19:2a:89:ec:3e:ff:b9:ec:4f:3d:0a:13:bd:b6:5c:
         a6:cc:37:98:17:52:bc:90:39:bc:f3:72:a8:df:fd:01:a5:3d:
         f0:ba:30:e4:9f:df:67:59:63:e9:d7:c5:9a:77:91:2b:55:d7:
         79:82:01:88:cd:59:6b:be:e4:18:17:47:6b:9e:2d:c1:24:fb:
         f9:2f:62:42:b4:b4:ef:69:28:e9:c3:37:96:8c:30:9a:a9:38:
         a8:ff:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----