Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/36d408256e3dad44a2c70295f9d4e6990c311527.roa
File:                     36d408256e3dad44a2c70295f9d4e6990c311527.roa (raw, json)
Hash identifier:          X1MIwRDOppPjommowq+AUjD1n6TNrD1HQLdAA5Obfuw=
Subject key identifier:   5B:95:38:6C:FE:BF:C7:EF:0D:AE:64:9C:37:F5:45:16:A3:93:CA:16
Certificate issuer:       /CN=badc597dac1debf52afd4da6abc08896e46e7502
Certificate serial:       118DF5
Authority key identifier: 7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/36d408256e3dad44a2c70295f9d4e6990c311527.roa
Signing time:             Wed 31 Jan 2024 07:30:07 +0000
ROA not before:           Wed 31 Jan 2024 07:30:07 +0000
ROA not after:            Fri 30 Jan 2026 07:30:07 +0000
asID:                     271991
IP address blocks:        2803:1110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150453 (0x118df5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badc597dac1debf52afd4da6abc08896e46e7502
        Validity
            Not Before: Jan 31 07:30:07 2024 GMT
            Not After : Jan 30 07:30:07 2026 GMT
        Subject: CN=36d408256e3dad44a2c70295f9d4e6990c311527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:ca:d8:09:fa:c7:af:6f:a0:d0:cf:fb:21:
                    63:b6:5e:2b:c6:66:75:09:8c:75:80:c5:72:66:07:
                    03:d4:ee:c4:6e:10:c7:00:0c:0d:45:11:5c:ff:70:
                    44:b9:61:7b:32:29:90:f6:11:9c:33:03:85:c6:a2:
                    d1:07:50:7b:ef:08:22:07:25:46:6c:08:02:42:4a:
                    81:23:b5:95:64:5d:99:54:54:46:4f:d0:7f:f5:a7:
                    06:dd:f5:8b:dd:7e:a2:47:59:55:d7:69:17:ae:54:
                    50:91:32:32:db:ff:d0:ec:7f:87:70:55:b4:c2:2b:
                    b7:6f:69:35:6e:72:9f:4b:5a:ee:d3:a3:d4:5d:bb:
                    67:51:c2:ce:82:3a:39:09:6f:a6:9b:75:56:56:44:
                    46:60:35:2a:96:27:6a:c2:6a:5d:37:66:69:a3:a7:
                    a3:7f:7b:cd:75:f2:0d:75:6b:59:f2:33:60:00:17:
                    ec:e5:38:ba:83:b5:22:2c:42:83:f7:18:01:c6:da:
                    2a:53:34:19:e4:2b:07:d6:37:b1:4e:72:99:cb:a4:
                    9b:d1:3b:c0:b9:71:5c:4d:6d:c0:62:10:57:df:71:
                    74:76:30:89:a3:0a:4d:60:9c:ea:f1:55:4a:0b:7e:
                    2f:dc:bb:17:f8:93:69:43:14:41:f5:98:77:c0:22:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:38:6C:FE:BF:C7:EF:0D:AE:64:9C:37:F5:45:16:A3:93:CA:16
            X509v3 Authority Key Identifier:
                keyid:7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/36d408256e3dad44a2c70295f9d4e6990c311527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:6e:fd:42:2f:d7:8d:2b:be:5c:60:82:5a:bb:30:c7:f2:
         88:8f:93:d5:b6:d6:4b:f9:cc:9a:9b:1b:1e:cf:ce:b6:f4:df:
         fd:e6:c2:63:28:32:20:34:27:d1:da:9a:a3:6d:fb:0e:0b:fc:
         22:e8:d7:95:b8:c3:9a:a7:b0:59:1f:40:2a:40:4e:b0:f7:46:
         2f:51:35:87:b4:91:ad:d4:57:d7:7c:69:af:ad:f2:70:b5:77:
         e2:e6:6f:4c:b5:03:30:e2:00:28:c2:f9:64:ad:e5:c8:30:8f:
         24:02:ab:12:c1:98:0b:a4:13:d8:9d:dc:ea:35:58:df:65:29:
         45:8e:af:2d:c6:08:1a:8a:d8:7a:85:b6:77:d4:58:67:e9:9e:
         d4:32:6e:36:fd:4c:fb:20:42:96:3b:76:15:67:fd:c2:19:b3:
         30:e7:9e:db:f7:19:05:15:98:1c:6c:b5:75:a0:d7:ee:54:c7:
         a5:32:58:15:2f:e0:a8:14:50:21:7f:8c:e0:c7:cd:69:ec:f7:
         88:8b:44:93:f5:c3:fb:a4:c1:ba:62:c9:c9:60:86:99:93:12:
         a3:ee:4d:1e:60:e1:1b:c9:16:f0:ea:10:cf:76:02:6e:54:77:
         6b:0f:e0:4d:41:3c:2b:74:da:23:f4:79:68:d7:fc:35:b8:2f:
         d2:4a:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----