Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ba0e8a11c9a083234a41bb75eaacee85dcae1637.roa
File:                     ba0e8a11c9a083234a41bb75eaacee85dcae1637.roa (raw, json)
Hash identifier:          x8qg51VOstGs7ACofBFJuqxFV4J979X9082AwSyx0+M=
Subject key identifier:   4D:6A:80:95:A1:EE:1C:1A:85:54:C2:47:FF:8E:CC:DB:07:B5:70:12
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1DC2AB
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ba0e8a11c9a083234a41bb75eaacee85dcae1637.roa
Signing time:             Mon 23 Jan 2023 18:27:04 +0000
ROA not before:           Sun 22 Jan 2023 18:23:48 +0000
ROA not after:            Thu 23 Jan 2025 18:23:48 +0000
asID:                     3356
IP address blocks:        2001:1330::/30 maxlen: 64
                          2001:1334::/30 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2803:9b20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950379 (0x1dc2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jan 22 18:23:48 2023 GMT
            Not After : Jan 23 18:23:48 2025 GMT
        Subject: CN=ba0e8a11c9a083234a41bb75eaacee85dcae1637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:cf:4f:99:eb:ab:b7:51:7a:51:69:a6:46:
                    24:9f:83:e4:8e:09:69:2a:9b:3c:61:f4:d0:f6:61:
                    52:a8:a0:d0:34:d5:e8:29:d6:1c:4f:7e:6c:0b:97:
                    d3:28:90:67:89:e5:56:02:06:b7:c4:d2:dc:8d:b1:
                    14:77:74:3a:fa:76:19:b1:0f:7f:90:5b:11:c9:8b:
                    ec:57:7b:6b:fa:e5:15:ef:be:b7:e7:86:33:e4:20:
                    e1:6b:ca:88:82:01:c1:18:1b:5d:e8:09:be:34:6d:
                    80:3e:b0:70:95:e2:cd:24:58:05:e5:66:9e:a7:18:
                    e6:e0:bf:a1:f4:dd:b3:e5:9a:46:17:d6:79:73:15:
                    a4:98:07:48:e0:46:de:ab:87:89:4b:6a:c0:74:a2:
                    38:1c:62:b2:09:e4:bc:44:3f:b9:6b:53:31:9a:a0:
                    dc:76:97:47:d2:7c:d2:53:46:9c:5a:c8:21:75:ed:
                    33:02:37:37:3a:23:59:0e:9a:00:12:3a:a2:0f:a7:
                    eb:e1:76:30:3b:6d:9e:44:bb:08:62:21:1a:d2:d6:
                    45:4e:d9:b3:41:1e:8c:f4:e8:e1:22:ab:78:79:89:
                    7a:bb:78:bf:6f:4e:5d:4d:ec:2b:d4:88:d8:ee:1f:
                    0f:05:6b:7e:30:e1:33:12:b0:63:41:db:35:48:dc:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:80:95:A1:EE:1C:1A:85:54:C2:47:FF:8E:CC:DB:07:B5:70:12
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/ba0e8a11c9a083234a41bb75eaacee85dcae1637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:38:e9:b1:ee:eb:50:f4:e8:f7:46:e5:01:18:1d:3b:41:bb:
         44:f9:6c:8d:55:1e:8e:b0:c1:4c:91:36:5e:43:de:08:d7:f6:
         d1:bb:f5:b7:e8:73:81:ab:6f:0c:cb:89:97:29:42:65:9b:14:
         30:44:26:45:3b:04:fb:50:af:6c:24:18:8b:9a:db:c0:2f:e5:
         63:57:db:76:11:02:25:2a:b4:12:81:10:1e:1f:a9:f9:27:26:
         61:12:3f:7c:3b:59:8c:8a:51:df:6a:9d:88:04:6b:ca:d1:35:
         46:08:ad:c9:09:bd:1f:e2:ec:81:14:50:3f:cf:fb:06:47:b4:
         8d:e7:97:18:f8:c4:3d:46:b8:8e:28:e9:9d:d2:df:60:39:e5:
         ba:dd:f5:a4:e4:a8:fd:b2:60:f3:f4:ad:34:de:2d:25:7b:56:
         3a:e9:bc:50:58:2b:a0:c0:ae:0d:26:2a:80:34:3f:24:ff:4f:
         25:4c:a4:ae:3e:d4:54:92:a5:e3:69:30:8d:54:19:a8:d3:83:
         11:1b:94:23:03:58:d6:07:96:f4:fd:b2:ca:c6:8a:d1:f7:86:
         e8:ad:0c:d1:a1:f1:a9:07:89:a0:71:dd:0e:a3:47:90:58:9d:
         c2:c7:82:ec:f5:5b:ef:27:9a:ef:17:f5:1a:64:fa:14:ab:a7:
         c4:5b:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----