Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/34a3791a7976e6c7dc7c6987c3873c22e3440e8e.roa
File:                     34a3791a7976e6c7dc7c6987c3873c22e3440e8e.roa (raw, json)
Hash identifier:          m7rzyQE2itNeshFqW/XZpb8sTaF1m/sFv25b+1pFRIo=
Subject key identifier:   6A:23:C7:B8:CE:FE:BD:92:7E:5E:9B:CD:B7:8D:38:E9:1A:A9:AF:13
Certificate issuer:       /CN=b4261735d9345695ee247995a8e711a305b68272
Certificate serial:       02E320
Authority key identifier: 2F:D0:76:87:0D:F5:37:82:FB:C3:01:F6:BC:8E:01:64:1B:ED:E9:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4261735d9345695ee247995a8e711a305b68272.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/34a3791a7976e6c7dc7c6987c3873c22e3440e8e.roa
Signing time:             Wed 14 Jun 2023 22:24:01 +0000
ROA not before:           Tue 13 Jun 2023 22:24:00 +0000
ROA not after:            Sat 14 Jun 2025 22:24:00 +0000
asID:                     265583
IP address blocks:        2806:338::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189216 (0x2e320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4261735d9345695ee247995a8e711a305b68272
        Validity
            Not Before: Jun 13 22:24:00 2023 GMT
            Not After : Jun 14 22:24:00 2025 GMT
        Subject: CN=34a3791a7976e6c7dc7c6987c3873c22e3440e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:ce:a4:cf:a5:29:d5:9a:29:f9:02:cf:8b:
                    f9:dd:87:9a:d0:6a:ee:dd:82:7e:fc:49:ba:91:a6:
                    da:1d:cd:fb:19:53:90:b9:fe:4b:5f:7f:3c:cc:47:
                    da:0e:be:c4:c6:12:db:6e:ff:28:be:fe:10:e2:26:
                    fc:ce:b5:7c:6f:3e:e7:68:79:9e:d7:21:40:0f:8c:
                    c2:47:16:9e:9a:f4:bd:52:ba:ac:90:d6:b5:30:03:
                    50:10:cc:96:bb:cf:29:7d:e3:c4:e9:8a:28:a4:2e:
                    ba:05:bc:51:e2:c8:ce:bc:df:bc:3b:8f:47:81:cf:
                    97:a1:ba:0d:d6:2b:c1:3d:63:96:b1:35:46:af:64:
                    13:19:05:9b:1d:0f:dd:2e:48:88:bf:ca:18:bc:d5:
                    34:4f:57:15:31:14:d5:ae:48:5f:39:5d:ad:c5:ed:
                    81:ed:2d:e5:7c:db:5d:aa:90:a2:9d:d1:16:a6:7f:
                    3d:95:3b:23:07:48:84:ad:d6:96:48:c3:79:cc:2e:
                    10:0f:a9:8a:88:8d:29:33:96:b6:85:e7:45:ff:87:
                    c9:f5:c0:57:fc:73:8f:30:4c:ab:2c:c4:05:80:8a:
                    65:f3:22:b3:2e:85:79:7e:e4:a6:e0:a0:f7:9c:89:
                    14:38:a3:6a:32:ec:f8:ac:48:eb:da:c2:75:49:e0:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:C7:B8:CE:FE:BD:92:7E:5E:9B:CD:B7:8D:38:E9:1A:A9:AF:13
            X509v3 Authority Key Identifier:
                keyid:2F:D0:76:87:0D:F5:37:82:FB:C3:01:F6:BC:8E:01:64:1B:ED:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4261735d9345695ee247995a8e711a305b68272.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/34a3791a7976e6c7dc7c6987c3873c22e3440e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9ae5a69-5728-4f4f-bc7d-509967395e7b/b4261735d9345695ee247995a8e711a305b68272.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:338::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:74:46:6e:71:b7:3a:63:36:8e:76:cf:86:57:32:f1:a5:ab:
         7d:e8:09:08:7a:30:49:8e:fd:5b:e0:90:ca:e4:e1:79:cd:49:
         fd:e2:b0:26:be:c6:d6:c3:37:93:f9:1b:f0:7d:ea:a2:cb:7d:
         47:5a:1e:cf:ba:7e:a1:6c:c8:ac:3a:17:21:fa:8d:52:6c:73:
         98:a4:da:1b:0e:77:b4:54:7d:5d:5f:d2:ab:d9:62:c6:3d:8f:
         f2:32:93:05:9e:3c:73:3e:93:59:85:50:33:e9:03:31:b7:54:
         71:38:71:2a:8a:05:e1:0c:ed:5c:9b:53:96:c0:76:5e:c8:c8:
         f1:60:5f:d1:af:d8:68:37:12:0e:9b:1f:2b:7b:f5:af:4d:d3:
         f9:2c:a1:5a:b0:55:8b:04:14:cd:b2:2b:6b:28:a6:f8:09:ad:
         60:08:0e:b6:fb:8f:8d:8f:af:5b:ab:ad:dc:b6:d3:e0:71:12:
         f0:10:c7:2c:be:11:3e:f1:e2:c0:13:e9:ec:e0:0b:32:c5:49:
         42:93:a6:b2:4a:06:b3:c6:cc:bf:47:ec:8f:f3:b4:66:04:2f:
         e8:d4:d2:74:01:c9:e0:2f:77:c7:45:48:4a:a2:ae:fd:a6:ec:
         12:1f:ee:f6:db:32:74:82:6a:87:59:b6:1d:e5:5a:c8:fb:9d:
         7c:78:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----