Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2dbad2a-7928-4031-bf73-ade3dc67acf4/e8a36d2ddfe1279b367894fed7be4c1ae48c7954.roa
File:                     e8a36d2ddfe1279b367894fed7be4c1ae48c7954.roa (raw, json)
Hash identifier:          rWXYHSaD1J07bVyAXCaXAbpqUqF1uTkNfOAqqo+LmBU=
Subject key identifier:   C4:CC:BA:2D:20:A8:7A:ED:0D:87:4F:46:2A:05:F1:31:E6:F6:4F:D1
Certificate issuer:       /CN=e01423dde00f4fe2793272400021d93ed3b97deb
Certificate serial:       08DF71
Authority key identifier: 86:7B:75:EC:E5:AD:6E:3E:A9:EC:EB:52:E5:2E:F1:E6:B3:B1:07:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e01423dde00f4fe2793272400021d93ed3b97deb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2dbad2a-7928-4031-bf73-ade3dc67acf4/e8a36d2ddfe1279b367894fed7be4c1ae48c7954.roa
Signing time:             Fri 29 Sep 2023 10:32:50 +0000
ROA not before:           Thu 28 Sep 2023 10:32:49 +0000
ROA not after:            Mon 29 Sep 2025 10:32:49 +0000
asID:                     272872
IP address blocks:        2803:3a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581489 (0x8df71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01423dde00f4fe2793272400021d93ed3b97deb
        Validity
            Not Before: Sep 28 10:32:49 2023 GMT
            Not After : Sep 29 10:32:49 2025 GMT
        Subject: CN=e8a36d2ddfe1279b367894fed7be4c1ae48c7954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:d3:9a:59:85:e7:dc:5b:84:da:7d:33:01:
                    4f:93:0c:d5:dd:3e:21:ee:df:84:6b:fe:17:50:a0:
                    ff:63:5b:1d:a8:39:3f:f7:19:79:4c:72:fc:54:37:
                    44:4b:1c:e4:9e:1e:57:63:98:a5:dd:ae:43:60:66:
                    3b:98:26:31:c5:97:01:15:4a:12:59:46:aa:2c:93:
                    62:55:84:73:0f:4c:80:e3:c4:76:56:1b:28:e4:73:
                    3b:c3:c0:54:d3:55:e0:87:73:f7:1e:db:98:f8:fb:
                    73:42:7a:f8:aa:cd:e4:d0:01:13:87:2a:85:5a:9b:
                    43:f4:77:b1:ba:bc:d1:98:4d:52:9f:b7:42:55:8a:
                    50:13:40:51:4b:ec:26:c8:a1:52:c9:9d:2a:cd:67:
                    2c:6f:2e:83:14:73:2b:4a:f1:9e:2d:6e:d0:bb:3b:
                    9b:4e:8e:c5:9e:07:60:f5:47:2f:da:b6:8a:a0:44:
                    6c:f8:08:ac:b2:9c:0b:1b:db:e4:4a:68:56:a8:7e:
                    36:c3:c1:f3:ff:ec:f6:36:40:97:b8:46:82:ac:09:
                    a6:1d:1b:96:e0:4f:a6:67:5c:1c:10:5b:67:24:6d:
                    89:ec:e7:65:32:2f:19:84:98:26:d2:7d:22:cc:32:
                    ea:76:e0:5b:f8:7f:ef:80:d5:b2:6d:8e:b8:b3:40:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CC:BA:2D:20:A8:7A:ED:0D:87:4F:46:2A:05:F1:31:E6:F6:4F:D1
            X509v3 Authority Key Identifier:
                keyid:86:7B:75:EC:E5:AD:6E:3E:A9:EC:EB:52:E5:2E:F1:E6:B3:B1:07:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e01423dde00f4fe2793272400021d93ed3b97deb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2dbad2a-7928-4031-bf73-ade3dc67acf4/e8a36d2ddfe1279b367894fed7be4c1ae48c7954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2dbad2a-7928-4031-bf73-ade3dc67acf4/e01423dde00f4fe2793272400021d93ed3b97deb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:92:57:b6:f1:36:68:43:0c:03:0c:a5:18:bb:26:1e:a0:da:
         da:79:4c:41:34:a3:ed:c3:6f:44:9f:3b:bc:c3:5e:a8:27:3a:
         2f:62:d0:2d:10:88:5e:1b:fc:8c:fb:9c:ad:e8:41:42:43:0b:
         8a:b2:d5:a6:1f:3d:bf:fd:ad:8b:a0:dd:a6:fc:0b:8d:5d:09:
         57:97:e0:6a:7a:d6:f4:17:dd:d2:58:af:3d:18:59:2e:1a:6b:
         96:11:8f:37:87:bf:8a:3b:bd:68:80:4a:0c:e9:76:2a:8d:82:
         a4:fd:71:90:b5:a8:33:9d:1b:47:91:b3:b1:58:11:d7:dd:91:
         85:1c:02:43:47:0e:9e:46:e0:2c:62:80:21:85:cf:09:16:c5:
         e3:50:41:b5:ee:9b:4d:af:1d:bb:ac:31:38:8b:d5:6a:d3:bc:
         28:0b:0e:f2:fb:1a:fb:33:c5:a8:09:ee:f4:82:41:01:9e:d8:
         c0:5c:20:60:07:ae:8f:93:04:ea:28:a9:79:6b:f4:14:f8:94:
         6e:c9:3b:dd:aa:27:83:cd:4f:76:33:b9:26:03:8d:15:ea:9a:
         1e:25:50:07:5d:26:c8:ff:1f:36:b5:6a:9f:ec:bf:10:ca:6c:
         50:b6:15:24:7b:cc:d2:28:07:13:24:74:e9:ca:c7:6e:25:a8:
         59:73:29:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----