Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2275e3-0278-4220-8465-a6b3b61e4311/e2f4ef6f84d2dada7dfc8c95a68d60067c714b89.roa
File:                     e2f4ef6f84d2dada7dfc8c95a68d60067c714b89.roa (raw, json)
Hash identifier:          U6DEVDM5ba5MgDeG/vNtB394aeusZKJQW0fntrXNIaA=
Subject key identifier:   4A:FC:32:DA:D9:6D:D5:A9:D9:C4:84:4A:74:28:A0:48:BE:28:1F:8F
Certificate issuer:       /CN=63bc4b1ce1115ac1ef7ea5c6f155683312bcf9b1
Certificate serial:       0C7C
Authority key identifier: FD:8C:27:4F:A0:B2:6F:73:5C:DD:FD:10:1C:18:85:7B:1E:B6:D5:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63bc4b1ce1115ac1ef7ea5c6f155683312bcf9b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc2275e3-0278-4220-8465-a6b3b61e4311/e2f4ef6f84d2dada7dfc8c95a68d60067c714b89.roa
Signing time:             Thu 17 Aug 2023 14:27:01 +0000
ROA not before:           Wed 16 Aug 2023 14:27:01 +0000
ROA not after:            Sun 17 Aug 2025 14:27:01 +0000
asID:                     22411
IP address blocks:        2803:4ba0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63bc4b1ce1115ac1ef7ea5c6f155683312bcf9b1
        Validity
            Not Before: Aug 16 14:27:01 2023 GMT
            Not After : Aug 17 14:27:01 2025 GMT
        Subject: CN=e2f4ef6f84d2dada7dfc8c95a68d60067c714b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:6b:f9:f4:34:1c:1b:3c:fa:49:c0:4b:48:
                    de:31:b6:a7:5a:63:4e:db:be:11:6b:ee:dc:7d:00:
                    47:f2:27:06:e9:42:83:6d:b2:ab:a6:d8:e9:46:70:
                    7b:c2:03:6f:78:24:e6:31:d1:ce:f1:b0:f1:9d:53:
                    78:e9:73:c8:13:7a:95:77:cd:ac:bb:87:9f:53:e2:
                    65:c8:32:5d:94:02:12:cc:06:af:34:da:cf:74:0b:
                    b3:21:e2:4a:a9:bf:68:1c:1d:cf:6d:0d:fa:cc:eb:
                    62:4d:e8:45:b8:32:0d:2f:eb:ea:7d:01:a8:3c:ea:
                    e9:be:72:18:c1:c4:1c:b5:58:d4:77:e0:4b:3c:3b:
                    b1:cd:81:44:97:a2:fe:bb:88:cd:d0:21:c6:5a:54:
                    b2:df:61:7b:14:31:92:85:27:cf:57:c8:73:0d:3a:
                    8e:f5:81:08:e6:b9:50:ae:c9:d4:a3:5b:df:3a:09:
                    bf:7d:bf:30:81:8c:28:be:c4:ce:54:64:f4:93:06:
                    0a:21:f0:9a:c9:50:bb:2c:4e:b0:6d:08:42:62:ef:
                    6a:a5:04:77:39:5d:05:81:42:44:ef:31:a3:9e:2f:
                    b0:a2:a9:9b:7a:94:6f:f1:96:f3:be:8a:00:27:be:
                    ce:85:25:9a:ff:24:7c:09:a7:79:24:90:f1:73:7f:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:32:DA:D9:6D:D5:A9:D9:C4:84:4A:74:28:A0:48:BE:28:1F:8F
            X509v3 Authority Key Identifier:
                keyid:FD:8C:27:4F:A0:B2:6F:73:5C:DD:FD:10:1C:18:85:7B:1E:B6:D5:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63bc4b1ce1115ac1ef7ea5c6f155683312bcf9b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2275e3-0278-4220-8465-a6b3b61e4311/e2f4ef6f84d2dada7dfc8c95a68d60067c714b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc2275e3-0278-4220-8465-a6b3b61e4311/63bc4b1ce1115ac1ef7ea5c6f155683312bcf9b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:91:49:89:d5:17:bc:a1:31:40:05:16:0d:47:e3:76:44:bb:
         20:18:61:c6:2f:e0:17:48:33:db:98:7d:88:d8:a9:20:d8:f4:
         12:c8:a6:dd:d7:d0:0e:e0:eb:7a:78:a2:85:a6:75:ee:c1:ee:
         bf:0c:02:cf:a3:8d:ba:ce:5e:9d:df:05:43:b0:1d:fb:70:74:
         9d:dc:f5:8c:3a:a2:be:4a:64:dc:3c:16:ec:c4:25:1f:fa:7e:
         b9:f7:d9:09:ca:25:6a:c9:36:dc:96:e1:8b:f0:fd:fc:21:a3:
         76:12:8c:50:03:9f:ca:cb:07:e3:96:37:e0:90:25:50:bb:8c:
         07:bf:a7:a6:79:39:b4:9d:d5:16:31:d4:0b:c0:da:42:a5:5d:
         bc:c1:41:43:2b:f1:ae:c4:da:1c:78:04:55:1b:cf:ad:c4:8f:
         ff:fa:ae:7e:b6:f0:78:0b:12:1d:16:59:5a:d6:50:08:87:a2:
         99:b8:b8:11:76:a1:d1:24:d2:7b:4d:88:11:09:83:b0:18:55:
         a3:51:61:20:d0:6c:db:44:d8:d7:f4:9b:b2:65:87:e4:75:8a:
         b6:f5:cf:62:1b:aa:f5:6e:bf:f7:c4:b9:71:35:06:0d:c9:64:
         7a:f4:a6:02:9a:06:b2:9e:96:12:13:2a:3a:d4:f5:9b:b5:29:
         99:70:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----