Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/67b049bfe13474e01191e4c4034b16c2ecd2ffc7.roa
File:                     67b049bfe13474e01191e4c4034b16c2ecd2ffc7.roa (raw, json)
Hash identifier:          H8jqKbfCq8B1/TupZrYQINDZfUd5iAfGPZh1nLGcFtY=
Subject key identifier:   E8:4F:28:A2:F1:9C:31:70:07:98:EF:57:61:B7:B6:2E:F9:E4:93:CA
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       23366F
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/67b049bfe13474e01191e4c4034b16c2ecd2ffc7.roa
Signing time:             Thu 19 Oct 2023 19:30:25 +0000
ROA not before:           Thu 19 Oct 2023 19:30:25 +0000
ROA not after:            Sun 19 Oct 2025 19:30:25 +0000
asID:                     266668
IP address blocks:        2803:a920::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307695 (0x23366f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Oct 19 19:30:25 2023 GMT
            Not After : Oct 19 19:30:25 2025 GMT
        Subject: CN=67b049bfe13474e01191e4c4034b16c2ecd2ffc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:f3:7f:6f:93:dd:23:40:3f:96:42:3f:c9:
                    47:d0:5b:04:13:81:ea:53:69:a6:a4:de:b4:e8:b6:
                    ac:29:3f:04:eb:45:e7:5b:da:69:25:55:79:33:d3:
                    a9:f4:95:95:c0:e2:de:a7:af:76:0e:b1:b8:20:96:
                    77:a8:f0:a9:90:0a:22:03:2e:5f:53:4a:5c:7c:97:
                    6f:ad:d5:ac:94:8c:fc:60:9d:b2:39:06:e8:36:14:
                    d6:b6:1a:65:5e:d2:61:c3:f7:be:fd:fc:76:0e:f8:
                    75:d6:73:3f:a2:e1:21:e6:1f:d5:37:7a:c3:f7:e6:
                    56:56:08:e1:48:12:e4:41:62:4f:b6:50:af:bc:4b:
                    57:54:8e:91:8a:3e:f7:68:ab:9a:5e:49:79:4c:77:
                    39:f9:d5:20:f9:99:6c:5a:23:b5:24:61:02:09:69:
                    b3:4c:cc:d5:b3:d8:3a:eb:6e:b5:a6:66:0e:8b:ce:
                    ed:22:89:03:c0:eb:9b:90:93:0c:d0:55:22:48:be:
                    c9:4a:ac:6c:b5:6d:8b:40:4a:fb:c0:4a:cd:fb:1b:
                    ee:e9:68:bf:36:fb:a7:54:a9:69:6e:5f:c0:82:4c:
                    c6:ef:ef:30:93:9a:92:23:a0:54:20:19:26:69:49:
                    cd:c0:db:a5:56:a2:98:5a:20:da:1f:53:96:6b:f5:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4F:28:A2:F1:9C:31:70:07:98:EF:57:61:B7:B6:2E:F9:E4:93:CA
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/67b049bfe13474e01191e4c4034b16c2ecd2ffc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:72:c6:0e:2f:7d:9e:48:5b:30:a5:c6:f9:2d:2c:36:7b:da:
         42:e8:37:f8:36:78:30:0a:d2:56:44:b3:01:06:eb:d2:5e:84:
         68:8d:74:25:b2:1c:98:53:31:ed:1b:42:30:75:bf:aa:ca:2e:
         32:62:fd:5d:15:25:9f:6c:31:46:7b:ab:bf:29:0f:c9:ff:3c:
         1f:e1:78:87:44:ae:59:15:49:82:06:e9:e6:3c:5a:e4:73:9d:
         75:ff:1d:a6:10:36:03:8d:68:c9:76:29:e9:fe:cd:0c:67:e1:
         3b:0d:b5:e2:38:ae:72:71:67:6f:b1:2a:e8:7f:0a:81:9d:fc:
         90:0d:a8:b3:cc:e1:38:32:9d:01:42:b6:e0:9d:ae:3a:6b:1a:
         3f:41:ee:64:47:07:4b:a4:05:f1:2e:5f:5e:04:49:c6:2d:2e:
         e2:91:3c:08:a9:9b:11:c7:80:45:5a:cd:f4:2f:ea:9d:69:f2:
         ca:20:a4:40:9c:79:40:3b:ef:7e:1e:f2:17:bb:f8:d0:93:ca:
         bb:d6:84:fa:24:19:4c:d1:0d:bd:e9:d8:e2:05:ce:78:48:3c:
         99:97:eb:e3:84:5e:d5:0b:cb:c4:ed:ff:cf:b4:c8:2a:ae:b3:
         01:89:83:f1:1a:a7:9c:0a:6a:ff:11:76:5e:dc:42:fc:72:8c:
         25:34:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----