Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9269b88-efa9-43ed-a517-6f081f0a2945/fe75471660a4e1e0c029cef210ce2b5fa5b8cf0b.roa
File:                     fe75471660a4e1e0c029cef210ce2b5fa5b8cf0b.roa (raw, json)
Hash identifier:          2Jmxk1ELVSC3Y3sCqet4hzIDX7wR6l2yKODw4O8VGKo=
Subject key identifier:   10:57:C7:C1:D4:9C:98:3A:C1:DE:2E:41:AE:27:8B:B7:F2:66:16:DC
Certificate issuer:       /CN=49eabd30682a6de9db043752cdedfa903a14227e
Certificate serial:       05A0
Authority key identifier: 01:20:99:B4:72:93:7E:70:90:6C:D1:F4:3A:88:91:71:0F:34:DE:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49eabd30682a6de9db043752cdedfa903a14227e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9269b88-efa9-43ed-a517-6f081f0a2945/fe75471660a4e1e0c029cef210ce2b5fa5b8cf0b.roa
Signing time:             Wed 22 Feb 2023 18:00:13 +0000
ROA not before:           Tue 21 Feb 2023 17:59:56 +0000
ROA not after:            Sat 22 Feb 2025 17:59:56 +0000
asID:                     272123
IP address blocks:        2803:6f10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49eabd30682a6de9db043752cdedfa903a14227e
        Validity
            Not Before: Feb 21 17:59:56 2023 GMT
            Not After : Feb 22 17:59:56 2025 GMT
        Subject: CN=fe75471660a4e1e0c029cef210ce2b5fa5b8cf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:73:bc:65:db:0e:f7:4f:f5:5e:73:fe:05:
                    21:13:ee:7a:e1:e6:f7:14:16:d1:25:92:6a:bb:07:
                    01:5a:6d:0d:7c:3e:79:18:ac:48:10:43:4a:9f:c3:
                    1a:3a:64:98:14:cc:4b:e0:bd:06:9d:7e:5a:10:a1:
                    33:95:ed:7f:f5:e7:48:e5:3c:1a:fb:c5:68:fa:4a:
                    22:3e:dd:45:05:d7:63:7d:0c:b1:79:0e:d7:7d:e3:
                    88:19:b9:05:46:31:b6:a7:de:be:33:4e:d2:b5:be:
                    4e:59:b1:05:50:d3:a8:b6:1b:8c:92:87:ee:86:e6:
                    33:fd:49:d8:72:f5:11:29:5f:04:ef:2f:bf:6e:7f:
                    04:d7:04:e5:4d:90:41:8b:b6:c2:36:1f:3b:0c:af:
                    08:f5:0d:ea:80:3f:91:3e:57:0f:02:91:43:00:06:
                    59:f3:2b:72:c9:44:f6:ba:14:e0:57:ff:f1:2f:3c:
                    27:98:d5:fb:59:8b:f4:ca:ad:5a:b0:f0:4b:68:97:
                    52:f2:55:8e:cb:cf:0d:0a:35:57:2c:0a:31:e7:e1:
                    80:fa:84:57:5e:d2:99:b2:13:86:ca:89:6c:52:05:
                    66:3b:c8:b6:b3:08:f5:a9:03:f3:94:b9:30:76:eb:
                    dd:2a:ed:2a:f8:26:dd:76:85:00:bb:83:95:a9:83:
                    a3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:C7:C1:D4:9C:98:3A:C1:DE:2E:41:AE:27:8B:B7:F2:66:16:DC
            X509v3 Authority Key Identifier:
                keyid:01:20:99:B4:72:93:7E:70:90:6C:D1:F4:3A:88:91:71:0F:34:DE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49eabd30682a6de9db043752cdedfa903a14227e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9269b88-efa9-43ed-a517-6f081f0a2945/fe75471660a4e1e0c029cef210ce2b5fa5b8cf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9269b88-efa9-43ed-a517-6f081f0a2945/49eabd30682a6de9db043752cdedfa903a14227e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:85:f5:1a:6c:6f:2a:d8:c0:c4:32:4d:56:fe:e5:88:18:42:
         3d:e0:7a:4c:17:73:87:ca:ac:53:af:ba:13:77:e7:37:95:74:
         21:66:42:70:71:27:f3:c8:0c:18:25:10:ce:11:64:b8:88:8f:
         67:dc:75:c1:90:4e:ba:30:97:47:8b:97:9d:2d:c0:ab:09:9d:
         f5:ae:d4:05:9f:8e:c9:04:11:35:46:03:5d:3e:37:08:c1:59:
         3e:9f:c7:36:a1:29:ad:85:72:88:21:6e:04:96:66:8f:ef:84:
         51:46:02:7e:1d:4b:36:fd:0a:8c:99:e2:97:6c:01:dc:e1:cc:
         96:9e:da:4f:e1:6f:b1:e2:b9:20:cc:9d:18:12:91:28:75:fb:
         77:e3:ea:78:c3:3b:fb:fc:32:90:5a:ee:90:33:16:7f:19:3e:
         cb:cc:e5:45:36:bf:47:cc:5f:50:1f:f2:8f:c1:2b:7d:95:b4:
         96:ce:f8:36:6b:49:69:81:48:1d:06:0f:cf:30:16:56:a4:66:
         f0:30:1f:16:9c:a5:50:b5:f1:c5:23:e5:cc:d7:88:6e:58:83:
         46:a1:f3:18:5c:51:67:b0:74:f8:37:e4:a9:45:a0:51:8c:c4:
         b0:06:77:ab:b2:81:6a:66:d7:3b:aa:bd:40:30:e1:a8:a1:07:
         ce:c8:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----