Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/038d47e62c20b7366244c4907403f4752dd24022.roa
File:                     038d47e62c20b7366244c4907403f4752dd24022.roa (raw, json)
Hash identifier:          c1PX4HrjMJMwYbmMNWCEunFmFfXlaTLnbZL5SvC+Cs0=
Subject key identifier:   F2:A2:52:98:81:AF:BA:58:A2:CB:5C:B5:A3:C1:AF:F9:CF:EB:B8:4C
Certificate issuer:       /CN=e486bb439ce56e99ede5cf3e73d7c94f7a24897f
Certificate serial:       06D215
Authority key identifier: 84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/038d47e62c20b7366244c4907403f4752dd24022.roa
Signing time:             Fri 19 Jan 2024 14:35:29 +0000
ROA not before:           Fri 19 Jan 2024 14:35:29 +0000
ROA not after:            Mon 19 Jan 2026 14:35:29 +0000
asID:                     262589
IP address blocks:        2801:1d:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446997 (0x6d215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e486bb439ce56e99ede5cf3e73d7c94f7a24897f
        Validity
            Not Before: Jan 19 14:35:29 2024 GMT
            Not After : Jan 19 14:35:29 2026 GMT
        Subject: CN=038d47e62c20b7366244c4907403f4752dd24022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:85:dd:05:38:b5:ea:c2:2f:c7:af:bc:99:
                    81:b6:bc:f2:b7:f2:c3:ad:e1:e0:c7:db:7c:97:47:
                    02:88:c6:b4:68:75:f0:51:d3:e7:55:de:f5:f8:e3:
                    b2:78:bb:ba:56:b0:e3:57:a3:3e:f0:ab:75:3a:a3:
                    9f:96:13:0e:47:62:55:91:ce:37:ec:a6:ce:72:e1:
                    42:8a:c7:13:d7:78:d8:73:f0:a7:f2:72:9f:37:2f:
                    68:92:0c:34:a2:3f:b7:75:8b:7d:62:27:a4:95:74:
                    9b:b1:c2:d2:88:7b:a7:64:04:d5:58:77:4a:97:58:
                    e6:a6:f6:13:7b:45:ba:2b:ab:59:06:74:a2:30:28:
                    82:0c:a1:67:e0:6e:36:c7:f2:07:8e:ba:dc:40:57:
                    5b:16:3d:a9:bb:3e:1d:66:9a:13:ee:00:99:33:46:
                    b0:f2:3f:37:7c:66:45:d9:95:75:ba:70:27:4e:f5:
                    f6:a8:57:d6:2e:8e:b6:75:56:3a:a2:e1:2b:ca:2e:
                    0d:f6:01:f1:26:8f:94:be:16:28:54:b1:ae:d0:34:
                    6b:a6:e9:67:49:22:b8:5c:ff:9b:96:63:c9:84:d9:
                    64:64:56:43:f5:36:57:97:2a:5e:b9:3c:1c:25:d5:
                    f3:10:d1:07:06:fc:26:e4:8e:50:f4:df:ff:0d:f6:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:52:98:81:AF:BA:58:A2:CB:5C:B5:A3:C1:AF:F9:CF:EB:B8:4C
            X509v3 Authority Key Identifier:
                keyid:84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/038d47e62c20b7366244c4907403f4752dd24022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:57:0f:90:0b:a7:99:e7:12:dd:c2:92:b1:8a:6f:f1:09:
         22:6d:61:bf:05:5b:be:b4:27:00:80:d5:f6:fe:87:49:e5:70:
         30:1f:2d:00:91:e2:ba:75:3d:ce:58:18:b7:b9:bf:11:0c:20:
         eb:84:c2:f8:53:9b:01:ba:f2:d4:d6:5b:b1:6d:6e:c8:9a:90:
         bf:60:b9:d9:ef:c5:87:b9:d6:7a:7c:20:d3:15:d9:27:56:77:
         87:df:63:76:09:ef:d8:a4:03:b8:7c:17:11:0e:92:5c:2e:46:
         f8:0a:9e:62:05:f9:8d:0e:73:bf:60:a5:c2:bd:3e:31:a1:54:
         f3:81:46:a2:e1:23:65:af:ec:63:b1:2f:1c:57:84:2c:0f:2d:
         0b:4d:47:53:dc:3a:e5:6c:b1:56:c9:9e:11:e9:f2:5e:04:42:
         08:d4:38:01:dc:62:2b:fe:5d:3d:f9:f1:a6:a4:ab:4b:41:c5:
         79:f7:2a:5f:28:8b:34:21:92:b4:e0:fc:80:9b:69:7c:cb:16:
         b4:84:93:09:33:48:a4:e0:10:b6:2f:6e:0f:98:58:b7:ee:7a:
         8f:d7:47:1b:55:dd:0f:aa:f1:02:fd:42:1a:72:59:79:63:29:
         f1:37:59:8e:ee:5c:0d:8b:1e:81:55:d5:7b:bf:54:88:12:2e:
         46:5e:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----