Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/2f927aae9d1d4e79bdaf8e6380689d837abb3bb3.roa
File:                     2f927aae9d1d4e79bdaf8e6380689d837abb3bb3.roa (raw, json)
Hash identifier:          t4QoABzdO3mraxAMmxoz0/67YA42mdtpNDK0oKsQGMs=
Subject key identifier:   4D:8C:6C:A5:A1:19:D2:AE:E6:77:8C:4E:73:28:55:D0:38:C7:1B:BB
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       27B72B
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/2f927aae9d1d4e79bdaf8e6380689d837abb3bb3.roa
Signing time:             Mon 19 Feb 2024 15:36:57 +0000
ROA not before:           Mon 19 Feb 2024 15:36:57 +0000
ROA not after:            Thu 19 Feb 2026 15:36:57 +0000
asID:                     27986
IP address blocks:        2800:330::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602795 (0x27b72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 19 15:36:57 2024 GMT
            Not After : Feb 19 15:36:57 2026 GMT
        Subject: CN=2f927aae9d1d4e79bdaf8e6380689d837abb3bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:e9:ab:13:b9:b7:cb:5f:a9:f1:ba:9b:00:
                    8e:ca:f5:fe:0f:c3:a0:d2:8d:f3:fa:07:5c:41:91:
                    50:f7:1d:e4:27:88:cc:bf:80:de:25:c4:74:35:b0:
                    1f:db:5e:1b:aa:54:ba:84:ed:84:ed:23:78:c5:eb:
                    db:af:77:65:09:c2:e0:83:8b:de:7e:f1:34:bf:eb:
                    0a:f8:8e:c6:ed:bc:d6:ef:a0:67:04:e8:8c:77:04:
                    73:49:c8:2d:e5:33:be:cd:70:75:85:59:56:1d:f2:
                    9f:6e:c4:52:0a:67:d0:fb:2d:ff:b8:9a:0c:8b:f4:
                    2f:50:1a:7f:c9:9a:7d:55:b2:7a:87:42:e3:be:65:
                    13:8c:45:cd:30:22:49:3a:0a:58:3f:9d:fd:b9:30:
                    78:b1:bb:3e:2b:14:ba:15:59:77:92:db:a5:e3:e9:
                    b7:73:5d:02:e6:b7:fd:48:8e:d8:6b:16:1e:70:1f:
                    d6:dc:ff:64:53:b4:f0:bd:ef:d2:86:95:dc:ab:b4:
                    d9:af:55:e3:68:a9:fe:b4:ac:f7:13:2a:c8:8e:57:
                    f6:07:9a:94:99:95:34:51:42:6c:a8:2b:d8:cc:6e:
                    b7:7b:07:72:ca:b4:1a:1d:67:58:aa:24:20:19:f1:
                    37:7f:a8:a9:3c:de:65:fa:b9:0c:87:58:ef:c8:c6:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:6C:A5:A1:19:D2:AE:E6:77:8C:4E:73:28:55:D0:38:C7:1B:BB
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/2f927aae9d1d4e79bdaf8e6380689d837abb3bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:90:c8:30:ea:fb:7e:70:57:e2:0b:7f:2a:d2:3e:f7:c6:de:
         20:81:42:12:72:4d:2d:c0:e8:0a:a9:53:56:bc:95:f0:f6:ca:
         60:18:db:4d:5c:a4:f4:f3:30:7a:3a:30:fe:5d:85:64:45:ee:
         95:b9:c0:83:a3:cd:46:b5:18:50:25:2e:5c:a1:bd:a5:09:bc:
         1c:b8:f7:c1:0f:9d:5f:ec:4b:48:d2:2f:26:73:d5:ca:46:44:
         ed:3d:2c:ef:40:a8:5f:dd:6f:e6:cb:d6:6a:9e:ec:ce:7b:b3:
         9e:52:26:a1:d0:16:f0:31:09:75:4d:fc:d4:73:7e:b9:05:bc:
         e5:cb:90:2f:d5:4d:58:1f:cf:39:b2:21:3d:c5:a0:ae:ad:6b:
         e6:68:72:c3:2f:2b:36:51:90:c3:19:8b:35:a0:79:9c:c1:1d:
         6e:e3:3d:08:a0:78:79:71:e8:12:be:ef:01:89:c6:39:4f:68:
         b7:31:af:78:24:1c:24:10:31:c3:9f:b9:df:78:fc:54:b6:06:
         27:06:05:3a:1f:c8:d0:16:cc:07:26:ce:49:7e:35:5e:20:29:
         50:a0:c8:99:94:75:5b:c5:e3:ab:78:a1:17:1c:cc:67:ce:38:
         8a:9e:51:3e:6b:07:4c:20:15:06:22:52:44:ca:45:b8:8d:68:
         02:b4:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----