Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/7d1283459cf4d138917385216d680c3d3e5499f6.roa
File:                     7d1283459cf4d138917385216d680c3d3e5499f6.roa (raw, json)
Hash identifier:          u/U65qC6+nAggKrERECLuLONIFm+vtN0Ozi5KKJcnsk=
Subject key identifier:   40:EB:5A:4C:AD:40:3A:74:8B:F7:CF:85:42:D4:CE:EB:4F:72:6E:84
Certificate issuer:       /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial:       53F0
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/7d1283459cf4d138917385216d680c3d3e5499f6.roa
Signing time:             Sun 08 Oct 2023 01:25:33 +0000
ROA not before:           Sat 07 Oct 2023 01:25:33 +0000
ROA not after:            Wed 08 Oct 2025 01:25:33 +0000
asID:                     28435
IP address blocks:        2806:366::/48 maxlen: 48
                          2806:366:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21488 (0x53f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
        Validity
            Not Before: Oct  7 01:25:33 2023 GMT
            Not After : Oct  8 01:25:33 2025 GMT
        Subject: CN=7d1283459cf4d138917385216d680c3d3e5499f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:7c:09:6c:5e:1f:a3:72:fa:6b:72:7e:fa:
                    3b:b1:fe:a9:e6:0f:78:83:d8:70:7e:de:a7:58:08:
                    b8:ed:60:72:2b:c0:47:1e:5f:14:cf:28:77:95:e5:
                    34:23:e6:02:b7:9b:da:91:2d:ce:48:af:a1:60:23:
                    96:7d:ff:5b:ad:a6:69:d6:89:73:9a:82:fe:2f:33:
                    ac:9d:82:22:ff:cc:ce:41:3b:23:62:c7:a1:2d:fb:
                    79:d8:dc:77:c2:bb:6a:01:5b:19:cf:d0:b5:0e:f1:
                    25:ac:9e:3f:da:41:5d:43:6c:46:6f:f3:b9:be:04:
                    4a:1f:e4:0d:2b:a1:11:60:7a:27:f4:cc:4b:24:c3:
                    66:b7:79:8c:f4:2a:27:09:c4:17:80:9f:69:67:18:
                    67:3c:2b:db:ec:96:7d:41:8e:cd:d5:37:4c:7e:ab:
                    1e:19:0a:f8:dd:47:e8:95:62:a0:a5:ea:b4:ee:c4:
                    91:af:bc:d7:8d:3e:41:08:fe:9b:d8:a3:75:50:99:
                    27:57:78:fa:59:89:3b:45:91:9b:15:cd:64:b0:4a:
                    91:a3:28:e2:7f:14:12:ff:92:a0:4e:f6:3e:65:6f:
                    09:8e:70:f3:97:a7:7f:13:9a:d0:a8:a5:ee:77:f7:
                    b0:43:55:7c:b0:75:e5:d3:57:dd:b1:ac:c1:f2:ea:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:5A:4C:AD:40:3A:74:8B:F7:CF:85:42:D4:CE:EB:4F:72:6E:84
            X509v3 Authority Key Identifier:
                keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/7d1283459cf4d138917385216d680c3d3e5499f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:366::/47

    Signature Algorithm: sha256WithRSAEncryption
         03:4a:35:12:3a:75:93:52:9b:f0:5d:63:e9:82:70:4f:61:35:
         8f:d8:93:a5:21:09:6b:18:1d:be:33:81:0c:70:87:9c:8f:09:
         fc:54:4a:0e:7d:f8:69:4b:19:9e:2f:f0:cd:08:d1:35:86:1f:
         ca:29:ca:ea:db:8e:a7:2e:dc:3d:8e:27:de:e4:93:8c:71:86:
         df:a6:ab:43:d2:28:54:23:81:35:97:37:ac:2a:ba:8c:4d:a6:
         56:69:1b:92:ed:39:66:4f:bf:56:9d:8e:42:d1:61:d9:80:a9:
         1e:6f:41:47:bc:6b:b6:a0:74:ac:29:2a:e9:5d:d8:89:6e:83:
         cb:fc:70:78:22:a3:02:d5:68:12:07:01:f6:06:78:05:0f:ba:
         7b:62:29:9d:ce:d1:5e:fc:8b:88:19:87:db:88:bd:6a:4f:de:
         dc:f6:f7:fa:1f:a7:21:10:0d:ef:af:54:9f:87:7e:51:7a:0b:
         8a:90:27:9d:8d:f8:6d:5e:55:d1:ad:78:3d:c9:92:d5:8e:ab:
         ef:ad:da:dc:7e:67:83:07:7c:49:f8:cc:f7:da:e2:2c:20:c4:
         5d:0a:a6:3f:5a:bb:dd:16:48:28:cb:5b:2e:52:b5:e3:79:ef:
         45:bf:1b:3c:1b:da:ac:91:c3:22:89:85:12:06:65:74:79:1b:
         f5:dd:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----