Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ac66c4e95b6c1472f42b11a9c4dd414f4d5ee6ea.roa
File:                     ac66c4e95b6c1472f42b11a9c4dd414f4d5ee6ea.roa (raw, json)
Hash identifier:          Fg85xiUPGIXBseJ/L+oGyKOHlW6VhDXDJVPX11ZySo4=
Subject key identifier:   97:E2:35:BF:ED:D2:61:C6:74:4C:25:79:4F:32:66:7B:27:41:28:85
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       090987
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ac66c4e95b6c1472f42b11a9c4dd414f4d5ee6ea.roa
Signing time:             Mon 10 Jul 2023 20:42:01 +0000
ROA not before:           Sun 09 Jul 2023 20:42:01 +0000
ROA not after:            Thu 10 Jul 2025 20:42:01 +0000
asID:                     262589
IP address blocks:        2801:1c8:5f1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592263 (0x90987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Jul  9 20:42:01 2023 GMT
            Not After : Jul 10 20:42:01 2025 GMT
        Subject: CN=ac66c4e95b6c1472f42b11a9c4dd414f4d5ee6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:4e:86:a8:55:1b:58:43:74:b1:64:f6:1a:
                    ad:c5:9e:8a:e7:d1:e7:c6:c6:3d:58:0e:44:99:fa:
                    b6:22:4f:84:98:13:37:54:ae:0d:2c:6b:64:89:88:
                    d9:1d:3d:c7:cc:24:9f:ab:90:f5:7f:65:c1:3b:b6:
                    ad:1c:a3:03:53:49:4e:d7:a9:cb:b9:61:06:16:16:
                    cd:16:9e:c8:18:86:a6:16:69:6b:5c:ff:e6:e3:30:
                    b5:64:64:2f:63:af:9f:34:f7:a2:27:71:c7:0a:92:
                    36:75:bc:d1:ce:42:96:45:0d:e7:a1:08:15:91:a4:
                    2b:4e:d2:63:09:47:19:c9:e7:78:3f:3c:9d:76:82:
                    69:b5:e5:06:2b:64:4a:46:64:a1:3a:ea:15:5c:2f:
                    54:27:a6:d9:fc:72:0d:79:fe:f8:b6:1a:40:45:4e:
                    ca:d8:22:de:29:72:5c:eb:d3:67:d4:9d:96:69:b6:
                    c8:ed:5d:c7:4d:87:c7:f6:da:1a:7d:c8:0c:c7:a7:
                    a8:f9:e8:5e:1d:96:32:16:4b:c5:78:c0:29:5c:ac:
                    22:d8:2f:da:0d:9a:38:2e:f6:77:9f:be:c9:54:b4:
                    56:8a:8d:e2:30:14:79:63:13:fe:01:56:c2:0d:e0:
                    b7:7b:c3:68:a5:57:d3:6e:a8:ed:3f:b2:b5:da:67:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:35:BF:ED:D2:61:C6:74:4C:25:79:4F:32:66:7B:27:41:28:85
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ac66c4e95b6c1472f42b11a9c4dd414f4d5ee6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:5f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:f5:c2:0c:fa:2f:ef:ef:a1:2d:41:de:d3:c9:92:2a:8e:
         56:24:3c:41:32:d2:7b:0a:1e:fe:9b:9a:ed:7d:4f:f2:af:7a:
         e3:a2:25:c2:57:44:f4:28:38:ce:96:18:1e:f6:0e:cb:53:8c:
         2e:ee:c5:df:82:69:a1:f7:6c:8a:15:6a:84:c6:4f:37:28:f6:
         95:78:d2:5e:1e:5b:04:5a:33:2a:3d:77:42:0d:3f:98:73:0a:
         90:cb:aa:7f:b8:6f:f4:ed:01:69:09:eb:c9:bf:4a:3b:4b:90:
         62:14:ba:56:bc:20:cc:47:71:95:bd:86:c1:ef:69:68:50:d2:
         09:1a:a2:34:8e:f3:e8:ea:05:ae:f2:9e:3a:47:f4:32:0d:d8:
         aa:98:8f:cf:eb:d7:14:45:75:49:25:a0:0c:85:f7:4c:4d:89:
         ea:00:6f:d5:ed:eb:54:30:8c:f4:32:5e:41:b7:bb:c2:e9:c5:
         6d:d0:9a:4d:dc:9f:74:d4:c7:1d:15:44:e2:3c:3f:fc:5d:9e:
         98:81:15:ad:e2:9d:e5:b0:8c:42:0b:0a:c5:2b:ae:0d:ce:b1:
         6b:17:90:c6:4a:c4:61:5c:6c:29:1d:a3:8e:32:05:c3:ef:67:
         1b:97:2b:6f:c1:f1:1c:a2:08:9e:32:1b:2c:b3:d4:87:74:b4:
         be:bd:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----