Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/58223b74b0c5ceceb9bba2fcc461feed73ad6702.roa
File:                     58223b74b0c5ceceb9bba2fcc461feed73ad6702.roa (raw, json)
Hash identifier:          JPYpJ/7KXWlrb6ZfHG9cqWhqrQAh29kuLWpf32VsE5U=
Subject key identifier:   7C:9C:CF:3A:57:A3:C8:A4:87:98:EC:02:15:9A:C0:A3:D6:CF:F2:3F
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       1EBD4A
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/58223b74b0c5ceceb9bba2fcc461feed73ad6702.roa
Signing time:             Tue 14 Mar 2023 14:16:43 +0000
ROA not before:           Mon 13 Mar 2023 14:16:30 +0000
ROA not after:            Fri 14 Mar 2025 14:16:30 +0000
asID:                     264646
IP address blocks:        2803:1780::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014538 (0x1ebd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: Mar 13 14:16:30 2023 GMT
            Not After : Mar 14 14:16:30 2025 GMT
        Subject: CN=58223b74b0c5ceceb9bba2fcc461feed73ad6702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:b6:98:b3:30:f3:18:88:be:8d:ce:86:22:
                    1c:80:24:36:ac:8c:f8:95:da:c0:e0:6d:91:c3:c9:
                    d7:e6:f8:de:e1:de:d5:25:56:ab:54:53:f8:e0:2f:
                    8a:dd:25:ff:57:f3:b3:ea:e3:78:19:54:71:66:5d:
                    1c:62:e9:7f:3a:7c:4b:f9:c7:62:b5:68:d4:4f:74:
                    a2:86:e5:6b:2e:f2:99:f9:b7:c7:d1:4c:52:aa:a6:
                    66:3c:e4:22:e5:2b:8d:ef:cb:82:5d:66:b1:0e:b1:
                    b4:00:bf:d1:a8:ae:99:ac:d9:e8:4d:70:b8:75:d8:
                    67:b4:e2:13:01:13:dc:b5:d9:02:e9:9a:2b:88:8e:
                    a9:a7:78:84:f8:04:6e:76:20:fb:3b:17:01:9a:87:
                    05:00:6c:f9:fc:71:b7:da:ce:2f:84:d2:a2:b2:27:
                    1e:a9:12:aa:ed:c7:fb:73:e4:2c:14:41:2b:c1:9e:
                    d2:ba:ca:d4:ee:76:a5:27:81:93:62:9f:04:6b:e8:
                    9e:93:4a:22:9e:a7:62:60:55:13:57:e9:46:e0:d7:
                    13:17:cf:0f:1f:dd:78:2c:7b:19:4a:07:1f:af:02:
                    c4:9e:35:06:77:da:05:4a:44:cc:e7:5d:84:b2:9c:
                    6d:ec:99:0b:10:ed:f2:c8:e3:40:c9:51:e8:ff:d9:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:CF:3A:57:A3:C8:A4:87:98:EC:02:15:9A:C0:A3:D6:CF:F2:3F
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/58223b74b0c5ceceb9bba2fcc461feed73ad6702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:34:6f:24:a9:d5:2a:ae:5a:c0:fe:3b:5e:e5:af:2e:8b:
         ae:75:2e:20:7c:1d:0d:25:df:0c:54:ca:6a:04:6b:39:f3:97:
         28:72:95:00:d7:c0:32:83:94:13:c0:34:35:4f:b8:10:25:0e:
         56:17:71:a1:23:e2:e5:01:aa:f9:7d:55:a9:76:51:55:ac:0a:
         43:95:21:e8:25:0c:72:bd:ba:61:0a:e9:c8:88:82:6f:81:73:
         62:30:80:a9:8c:2e:d5:e7:f5:9f:55:9b:64:80:24:29:b5:4e:
         0b:25:55:4a:95:07:64:6b:1c:ef:13:41:c2:a5:8b:92:07:54:
         57:3b:86:29:93:84:a4:16:4c:09:41:e7:4b:f3:c1:6f:54:40:
         f2:9e:fa:e1:91:36:b0:9f:cd:97:05:27:f3:e0:bf:21:f8:98:
         46:14:31:84:62:33:83:f0:41:ae:f2:e3:e6:cc:0c:9b:b0:fc:
         33:83:ff:7e:e4:86:b3:b7:c2:1d:81:ff:7f:fb:34:27:3e:ab:
         15:80:fb:33:e3:ce:36:7d:01:f4:a9:7c:bb:5a:46:d5:1c:2f:
         85:11:f9:d1:f7:1f:17:50:0d:e7:26:51:3e:6d:d8:c1:25:b3:
         04:8e:05:32:1f:77:d9:9b:88:43:85:bf:f6:73:27:06:17:6d:
         a9:86:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----