Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/844a9633cd4e8301643351f2ebb347764a3e628d.roa
File:                     844a9633cd4e8301643351f2ebb347764a3e628d.roa (raw, json)
Hash identifier:          QzaRBWGtrDm7vlYpOBqJ5s5nJKYXj+X6WeM9qTN6gHg=
Subject key identifier:   C3:81:82:E0:97:A5:52:F6:38:E5:B0:BC:E5:1B:45:ED:76:6D:94:8A
Certificate issuer:       /CN=734d48b8ac986ac396d20b61f218f6d07558ab25
Certificate serial:       204193
Authority key identifier: 4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/844a9633cd4e8301643351f2ebb347764a3e628d.roa
Signing time:             Sat 09 Sep 2023 08:30:03 +0000
ROA not before:           Fri 08 Sep 2023 08:30:03 +0000
ROA not after:            Sun 07 Sep 2025 08:30:03 +0000
asID:                     269809
IP address blocks:        2803:c4e0::/36 maxlen: 36
                          2803:c4e0:1000::/36 maxlen: 36
                          2803:c4e0:2000::/36 maxlen: 36
                          2803:c4e0:3000::/36 maxlen: 36
                          2803:c4e0:4000::/36 maxlen: 36
                          2803:c4e0:5000::/36 maxlen: 36
                          2803:c4e0:6000::/36 maxlen: 36
                          2803:c4e0:7000::/36 maxlen: 36
                          2803:c4e0:8000::/36 maxlen: 36
                          2803:c4e0:9000::/36 maxlen: 36
                          2803:c4e0:a000::/36 maxlen: 36
                          2803:c4e0:b000::/36 maxlen: 36
                          2803:c4e0:c000::/36 maxlen: 36
                          2803:c4e0:d000::/36 maxlen: 36
                          2803:c4e0:e000::/36 maxlen: 36
                          2803:c4e0:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113939 (0x204193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734d48b8ac986ac396d20b61f218f6d07558ab25
        Validity
            Not Before: Sep  8 08:30:03 2023 GMT
            Not After : Sep  7 08:30:03 2025 GMT
        Subject: CN=844a9633cd4e8301643351f2ebb347764a3e628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:01:46:27:0f:51:8a:76:5a:b9:c3:fd:7f:
                    33:d7:42:00:0f:d3:9a:34:fe:9b:42:c3:6f:6e:e4:
                    29:f6:7f:07:a9:a5:dd:98:4d:38:af:dc:e0:9f:83:
                    18:c6:68:b1:24:3e:e8:49:6c:38:62:b6:a3:22:66:
                    52:c7:27:be:73:ec:0f:7a:0f:a0:70:ec:e8:37:41:
                    4d:26:90:49:08:47:eb:1f:a7:fa:66:79:30:47:77:
                    e3:4c:57:c1:b2:b5:49:25:a5:5d:1f:c7:26:99:09:
                    01:87:44:f6:b2:30:e6:a3:9d:7c:52:e9:18:3d:55:
                    81:51:cd:88:a3:fe:eb:88:6f:ae:9e:5e:52:73:44:
                    95:8d:6c:21:93:9d:b2:12:43:75:31:68:43:23:f5:
                    1f:26:1d:d1:fa:a4:51:54:6a:94:e9:06:4c:01:96:
                    08:50:c9:29:8d:a0:02:49:05:06:b7:96:50:e9:ce:
                    40:c5:70:d8:71:e4:bf:94:35:cb:ba:c8:2a:78:87:
                    d6:3e:7b:79:24:99:bc:e4:68:95:8c:80:6f:3d:dd:
                    77:0d:e4:39:a8:9d:e7:d8:dc:61:34:2e:c7:74:18:
                    b7:d1:7b:44:95:f7:1f:e9:67:a0:04:31:4d:0e:ab:
                    86:f1:b3:d4:69:87:0f:bb:f4:5a:6e:44:43:11:0d:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:82:E0:97:A5:52:F6:38:E5:B0:BC:E5:1B:45:ED:76:6D:94:8A
            X509v3 Authority Key Identifier:
                keyid:4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/844a9633cd4e8301643351f2ebb347764a3e628d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/734d48b8ac986ac396d20b61f218f6d07558ab25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:96:d2:87:5b:cd:9b:75:68:27:f6:ae:82:99:55:49:78:e1:
         d7:f9:19:2d:0c:0e:ec:74:06:12:f2:0a:5a:a8:9e:08:fb:9a:
         b0:84:58:c4:4c:38:40:74:81:73:48:d0:fd:7b:a8:d7:55:be:
         a4:3b:f2:20:03:58:ff:23:13:fd:06:2c:74:a7:a4:c2:0d:47:
         10:b5:c4:9f:88:11:bf:ef:81:6b:16:76:da:70:9f:34:8c:35:
         1e:68:21:55:c1:d1:ea:4e:87:99:21:c0:95:a4:63:31:96:0f:
         b1:d0:61:8b:89:20:0c:89:c3:65:a9:a1:5c:cf:4f:81:59:9b:
         61:f1:d8:65:0e:28:7e:78:bd:e9:1d:ed:b7:42:d9:4e:c5:15:
         f5:9a:3d:8e:2b:e2:e4:50:9a:15:de:de:a9:8b:0b:ab:b0:1e:
         cf:4b:b5:f5:92:59:22:ea:3a:c5:97:99:21:9c:a1:be:f3:f1:
         f6:6d:06:35:23:f3:06:a7:af:ef:df:84:bd:83:75:64:58:53:
         ef:28:ff:98:0c:3f:c0:f7:87:90:76:98:ac:26:1d:7b:4f:80:
         4e:67:d4:6c:c4:43:e5:5b:de:78:2e:b4:b1:a3:46:93:6a:dc:
         a9:11:f1:51:4f:01:ad:dc:4e:a7:4f:32:bd:97:76:4b:bb:59:
         80:12:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----