Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/5b4046cff0d62b5e85227cacacc60f1fb10cdfdf.roa
File:                     5b4046cff0d62b5e85227cacacc60f1fb10cdfdf.roa (raw, json)
Hash identifier:          1y6FOylbIazGlNnMQsmo/2P5rm9x0O6E/83q7SV6gXw=
Subject key identifier:   DA:A7:7F:61:EB:91:1B:2F:48:1D:6A:2C:DF:B5:9D:6F:00:87:DC:54
Certificate issuer:       /CN=46d6d988c871f60a42be60f3a214a580497a2e54
Certificate serial:       04ACD5
Authority key identifier: 0E:54:C2:3C:89:92:F5:28:07:22:17:F8:FE:65:C2:C5:52:B5:7A:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d6d988c871f60a42be60f3a214a580497a2e54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/5b4046cff0d62b5e85227cacacc60f1fb10cdfdf.roa
Signing time:             Sat 14 Oct 2023 00:01:56 +0000
ROA not before:           Fri 13 Oct 2023 00:01:56 +0000
ROA not after:            Tue 14 Oct 2025 00:01:56 +0000
asID:                     265619
IP address blocks:        2806:36f::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306389 (0x4acd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6d988c871f60a42be60f3a214a580497a2e54
        Validity
            Not Before: Oct 13 00:01:56 2023 GMT
            Not After : Oct 14 00:01:56 2025 GMT
        Subject: CN=5b4046cff0d62b5e85227cacacc60f1fb10cdfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:b1:a2:6c:4c:60:c3:6c:a2:d0:e8:8e:7b:
                    19:6e:aa:dd:18:69:da:54:0c:19:ef:0c:b2:02:e2:
                    63:30:0b:85:38:8a:62:5d:b5:b2:98:0d:34:f2:e6:
                    c9:96:43:eb:05:8a:bb:f7:0a:99:f3:0f:19:fd:2a:
                    21:3d:80:20:85:68:23:b7:45:25:ed:95:53:76:d8:
                    1b:e1:3b:2c:3f:d5:47:90:c7:dc:05:f9:12:b7:1b:
                    1d:88:e7:19:29:cb:9d:b1:d5:34:c2:51:b9:17:0c:
                    99:ec:81:f1:f0:36:92:64:24:ad:b8:6a:b8:05:eb:
                    59:e7:01:94:59:b3:7d:10:2a:52:a0:9a:ca:1a:73:
                    6b:50:ce:ae:8d:87:7d:36:84:2d:80:62:23:5e:ee:
                    89:5a:da:3c:06:21:35:c0:83:d3:d4:4b:6d:12:f5:
                    c7:a2:8d:2c:53:3c:78:92:19:5c:c1:22:ca:8b:a3:
                    fe:d7:86:16:67:25:35:c6:1a:33:1b:b9:a8:4c:51:
                    95:8b:50:cf:01:da:66:17:6d:19:01:56:87:53:6a:
                    cf:a2:07:c5:b3:6c:5a:29:c4:cf:36:33:19:91:24:
                    44:3c:ca:3e:27:7f:1f:04:ca:89:5e:67:ce:30:11:
                    90:c8:7c:58:d7:7c:e4:a3:26:cb:c3:2f:0e:73:58:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:7F:61:EB:91:1B:2F:48:1D:6A:2C:DF:B5:9D:6F:00:87:DC:54
            X509v3 Authority Key Identifier:
                keyid:0E:54:C2:3C:89:92:F5:28:07:22:17:F8:FE:65:C2:C5:52:B5:7A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46d6d988c871f60a42be60f3a214a580497a2e54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/5b4046cff0d62b5e85227cacacc60f1fb10cdfdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6c1390a-b788-4c1d-8809-f6443ff740d8/46d6d988c871f60a42be60f3a214a580497a2e54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36f::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:07:d4:50:26:31:9e:ab:ba:21:37:9a:4d:e4:d4:98:6a:80:
         93:62:34:f6:4d:bc:f0:65:55:66:d9:cf:1e:f6:46:db:85:50:
         cb:f3:c7:4b:23:ea:3f:41:96:b6:d1:c7:6b:84:11:ef:ad:09:
         6e:6c:25:0d:df:d4:3f:7b:02:5a:4c:43:ee:27:81:f1:ad:79:
         78:80:2c:ca:e1:b7:4b:25:0b:13:2f:75:2c:1a:29:af:7c:1b:
         77:d4:6c:93:cb:dc:d5:93:cf:85:89:2c:ab:7c:bf:1e:55:b8:
         8a:2f:e8:9a:4a:02:65:44:f6:68:89:c6:18:09:2a:5f:3e:17:
         19:56:0b:f1:da:98:4c:25:59:40:b5:11:bd:98:43:da:1c:0e:
         d8:22:81:fd:7b:64:3f:76:62:5f:39:fe:db:1c:72:a0:fd:98:
         90:b7:9f:64:d2:6a:93:70:c8:e1:af:e5:ea:0c:b0:db:06:3e:
         a5:66:ba:e4:9e:58:5f:fe:63:62:56:13:be:90:af:69:55:8e:
         b8:9e:d9:2a:f5:b2:13:a1:5c:08:63:27:52:0b:a1:86:38:09:
         a3:48:08:a3:62:1e:7a:d5:c5:b6:6f:3b:95:42:5c:6a:6c:6e:
         93:f4:ef:82:48:8d:0a:9f:45:9f:12:9c:54:99:c6:1e:2c:03:
         22:1e:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----