Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/f97e587fd56ab0f8256cec3b2ef8c6a01d68c9d8.roa
File:                     f97e587fd56ab0f8256cec3b2ef8c6a01d68c9d8.roa (raw, json)
Hash identifier:          7OqnVbkqk47T8g8SWW2bXkKVyJxVkdu+x8Fb5cBC/Bc=
Subject key identifier:   15:A6:62:C3:F4:B6:61:0A:67:D8:71:90:4B:ED:99:98:11:50:A4:CD
Certificate issuer:       /CN=9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c
Certificate serial:       277C44
Authority key identifier: 10:20:8A:1B:7D:3F:A9:50:0B:C8:89:3E:E8:8D:7A:9C:C7:3F:62:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/f97e587fd56ab0f8256cec3b2ef8c6a01d68c9d8.roa
Signing time:             Tue 19 Mar 2024 17:54:55 +0000
ROA not before:           Tue 19 Mar 2024 17:54:55 +0000
ROA not after:            Thu 19 Mar 2026 17:54:55 +0000
asID:                     263224
IP address blocks:        2803:d680::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587716 (0x277c44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c
        Validity
            Not Before: Mar 19 17:54:55 2024 GMT
            Not After : Mar 19 17:54:55 2026 GMT
        Subject: CN=f97e587fd56ab0f8256cec3b2ef8c6a01d68c9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:15:ab:ce:09:a0:fe:5b:97:f8:03:35:1d:0e:
                    73:c3:89:84:fd:cb:7e:f2:07:43:2e:f8:db:04:ea:
                    31:7a:52:2b:50:51:33:6b:a5:c0:ba:8e:36:b8:3e:
                    6b:13:15:7f:53:06:6d:64:e9:58:d4:44:e9:fa:b5:
                    66:d9:77:8c:1a:a9:bb:4a:bb:c7:c4:24:ba:88:05:
                    f1:e4:6a:1b:19:33:00:1e:06:fb:57:5d:fe:91:50:
                    5b:c7:21:eb:62:6a:8e:04:3e:2e:6f:63:02:25:28:
                    3b:bb:bc:63:d8:12:02:78:98:1f:4d:f6:1a:cb:36:
                    52:53:f4:72:55:25:ac:5f:34:2d:db:d9:71:ba:59:
                    c6:0a:e4:7b:04:c8:77:2a:e0:97:81:47:24:e1:0b:
                    f0:70:3a:aa:2d:33:8b:37:e9:cf:ca:e9:c9:e7:02:
                    3a:34:e3:e0:d5:e9:96:ef:69:ce:77:57:22:14:b9:
                    f6:09:f1:0d:1b:79:3f:63:82:6d:3a:fb:68:0f:ca:
                    13:6f:29:64:fb:42:1d:85:1d:3c:e7:77:41:3e:bb:
                    fa:d5:ba:32:dd:d6:1c:21:d5:24:6c:9c:7a:c1:46:
                    f6:84:29:35:bd:70:ce:c9:25:c3:f3:77:7a:4f:ca:
                    fd:58:b1:79:f7:2f:64:6b:ef:2a:e0:92:9f:66:90:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:62:C3:F4:B6:61:0A:67:D8:71:90:4B:ED:99:98:11:50:A4:CD
            X509v3 Authority Key Identifier:
                keyid:10:20:8A:1B:7D:3F:A9:50:0B:C8:89:3E:E8:8D:7A:9C:C7:3F:62:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/f97e587fd56ab0f8256cec3b2ef8c6a01d68c9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cad6bd43-0be9-47a2-949e-17e9dd2ab774/9db2a0ff15be72dc4c6e8a4c748dbfd648ff886c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d680::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:91:33:9b:9b:04:b7:68:5d:54:78:f2:3f:7c:1e:e9:67:
         3e:be:1f:79:30:91:a8:e7:18:45:59:46:59:01:c9:c4:60:be:
         08:c7:ee:fb:a6:74:19:18:e8:ca:96:29:07:96:67:0a:cf:6e:
         25:bf:e4:e3:2e:d0:1d:66:38:3d:6f:dd:51:52:13:20:90:81:
         57:f8:24:dd:5f:dd:4d:ba:e0:4a:8e:ee:27:d8:9b:e5:7b:54:
         44:bc:af:ab:5b:67:53:fe:83:ce:6e:6c:4b:d2:97:6c:15:82:
         1d:04:a0:97:88:66:88:85:08:1f:c7:aa:82:3e:2a:cc:80:3d:
         de:fb:1c:d3:21:65:1d:34:4b:20:8b:19:bc:eb:ea:94:e8:e9:
         1c:f5:b8:af:de:5d:b3:5b:21:4e:31:8a:9a:59:06:07:96:a3:
         06:d4:99:1f:4c:0b:97:56:f8:82:4e:0c:5b:a3:fa:4e:96:cd:
         90:dc:ca:98:14:97:6e:67:3d:b6:92:9a:b3:e1:9a:97:89:80:
         4c:61:3f:ad:85:30:7f:79:a5:77:f9:91:e9:88:17:22:60:21:
         04:7e:64:84:fe:5d:ab:0b:ee:30:e6:87:8e:dc:21:5d:8b:1a:
         7e:87:fe:35:da:53:a0:a2:dd:79:0a:f8:e3:34:9f:98:b4:97:
         11:45:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----