Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/b3f66292e40b34530e5589b6030b1da5c36952a4.roa
File:                     b3f66292e40b34530e5589b6030b1da5c36952a4.roa (raw, json)
Hash identifier:          C7wVB8uzGCo/1iKI6GQxf26BdhbizWo8iAhWY8HG0fs=
Subject key identifier:   E8:A8:C0:C4:28:E4:06:E9:55:C5:10:64:76:CE:77:29:FE:57:ED:73
Certificate issuer:       /CN=dd6660715432dca219d013cf5f8591f73aafbd11
Certificate serial:       11F563
Authority key identifier: 97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/b3f66292e40b34530e5589b6030b1da5c36952a4.roa
Signing time:             Mon 31 Jul 2023 21:30:07 +0000
ROA not before:           Sun 30 Jul 2023 21:30:07 +0000
ROA not after:            Thu 31 Jul 2025 21:30:07 +0000
asID:                     271925
IP address blocks:        2801:13:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176931 (0x11f563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6660715432dca219d013cf5f8591f73aafbd11
        Validity
            Not Before: Jul 30 21:30:07 2023 GMT
            Not After : Jul 31 21:30:07 2025 GMT
        Subject: CN=b3f66292e40b34530e5589b6030b1da5c36952a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:c6:31:0e:81:f8:b9:05:5a:22:43:8e:fc:
                    7a:2d:c0:3d:0f:03:86:f4:d5:a3:12:20:b1:a7:1b:
                    30:31:b0:9a:e9:a0:7a:b2:7d:f1:17:e6:01:01:36:
                    e7:dd:d2:fe:77:3f:19:87:60:68:53:9c:a1:51:a1:
                    b5:20:fd:ba:7f:2f:c2:16:e8:80:77:6e:7e:54:55:
                    0c:2c:e4:45:e5:a3:76:3f:34:00:f9:57:2e:1b:f0:
                    43:26:4d:c0:c0:5c:ac:fc:f3:e1:76:d5:32:da:d0:
                    99:6c:5e:99:85:1b:6e:0c:45:24:18:94:44:f9:69:
                    5e:bd:e3:b3:71:26:88:32:73:06:e2:bf:a5:cd:01:
                    e2:f3:53:58:1f:42:61:a3:84:7b:39:32:53:d0:57:
                    72:e2:bc:b9:aa:77:1f:43:2b:14:62:6a:83:7b:78:
                    c8:e0:7d:09:bb:2a:91:13:3f:73:e2:45:0d:95:a3:
                    8a:5f:ba:2d:d8:1a:11:a2:91:4a:52:6a:b9:63:6b:
                    e6:dc:38:dd:d6:2a:c1:f7:1a:a4:c0:a0:ba:26:6d:
                    a1:cb:a0:ee:fd:ec:13:6b:db:ea:f8:ae:a7:02:47:
                    3b:da:b3:a0:a9:dd:59:4c:bc:d4:89:83:5f:e6:e4:
                    73:22:3a:93:49:1c:9f:ae:5e:b9:a8:f7:64:e9:1e:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:C0:C4:28:E4:06:E9:55:C5:10:64:76:CE:77:29:FE:57:ED:73
            X509v3 Authority Key Identifier:
                keyid:97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/b3f66292e40b34530e5589b6030b1da5c36952a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:84:9d:38:72:49:64:d3:bb:ae:eb:76:d2:ec:72:ed:71:
         fb:6f:41:73:e5:5d:1a:72:92:34:c3:14:26:54:36:f8:f6:f1:
         4a:b1:b2:e6:aa:b5:37:ef:bc:d0:a4:1e:4c:47:92:1e:14:10:
         5a:55:dc:50:62:59:35:d8:70:c1:f3:63:7c:3e:bd:41:99:0a:
         ee:05:17:2a:03:bd:39:18:58:a3:91:51:9b:ec:58:0a:eb:76:
         30:8a:4a:7a:8d:f5:5c:15:53:e9:23:c7:3e:48:f0:30:c5:d7:
         41:ea:33:c1:79:5a:95:3f:46:10:c0:48:2e:01:6c:01:7d:06:
         34:ea:08:79:5d:50:b2:ed:c4:2b:ed:d3:68:e3:9b:c7:99:02:
         2c:0a:7c:2e:d0:2a:3f:82:84:c1:f8:0f:19:79:e4:69:96:b1:
         f5:61:7d:50:89:be:69:1a:c2:b6:82:43:c6:a8:0d:d0:4a:d2:
         68:3c:b6:12:79:63:40:47:48:29:8b:c8:8f:78:6e:1b:50:fd:
         76:1f:92:b3:6f:da:1d:e3:44:a5:2b:4d:71:42:09:8e:b9:49:
         12:1f:8f:d9:45:12:83:a4:d1:78:f7:9b:a3:fc:d7:3e:89:45:
         29:78:d6:41:3d:9c:bc:35:4a:57:fe:e5:9d:3d:6e:f4:49:ac:
         d2:d3:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----