Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7714b273e42f93844cdb0c3541e14ab5a175dd41.roa
File:                     7714b273e42f93844cdb0c3541e14ab5a175dd41.roa (raw, json)
Hash identifier:          xQEVMfrq7nvkucJzRgsw5HufOZg9wqwZjp1jIusM1JI=
Subject key identifier:   63:6A:06:F6:7F:2A:E7:23:67:56:B4:03:6A:5B:8C:BB:49:95:5D:9B
Certificate issuer:       /CN=d344c3cd696b6a27237f504e0c016714b7710f9f
Certificate serial:       273F68
Authority key identifier: F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7714b273e42f93844cdb0c3541e14ab5a175dd41.roa
Signing time:             Fri 15 Mar 2024 13:43:31 +0000
ROA not before:           Fri 15 Mar 2024 13:43:28 +0000
ROA not after:            Thu 15 Mar 2029 13:43:28 +0000
asID:                     266793
IP address blocks:        2803:10a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572136 (0x273f68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d344c3cd696b6a27237f504e0c016714b7710f9f
        Validity
            Not Before: Mar 15 13:43:28 2024 GMT
            Not After : Mar 15 13:43:28 2029 GMT
        Subject: CN=7714b273e42f93844cdb0c3541e14ab5a175dd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:28:54:f6:ee:51:79:b8:75:dd:75:61:14:
                    70:12:1e:06:36:a8:ab:62:7d:fa:07:2d:bd:c4:2c:
                    16:2b:ec:f3:6c:61:52:f5:44:d8:f0:b3:8d:2a:c6:
                    5d:3e:cf:04:15:24:f3:c8:19:10:47:67:9c:b8:1f:
                    98:32:95:72:7d:ac:9b:15:2d:9d:ff:64:63:fb:f4:
                    02:cf:20:1f:ca:ce:04:50:2e:57:d0:6f:86:e2:9c:
                    3c:9b:3e:fa:d9:80:55:b4:82:e4:3e:26:3a:5a:09:
                    fa:2a:57:c2:b0:18:e7:2f:62:e0:03:2e:d1:80:22:
                    5f:2f:cd:67:43:b9:f2:6c:52:d0:ee:7e:3c:26:c5:
                    9f:fd:cc:09:5e:1c:92:4d:9c:a9:ba:6b:a1:e1:e4:
                    ce:ba:b5:16:c0:4f:55:f7:09:15:35:30:d7:46:31:
                    03:db:f1:93:c7:12:3a:d7:a7:2e:e1:26:c1:4c:1b:
                    7c:69:9d:d8:a9:e9:96:65:3d:ce:f7:e7:11:7e:ee:
                    9b:42:ef:3f:7b:3c:ef:db:22:55:60:cf:2f:70:b8:
                    3f:7b:bf:a2:60:ab:f4:53:ab:e0:82:f0:5d:6c:c2:
                    9e:9a:53:75:af:bd:28:2f:35:67:06:43:fd:a2:d7:
                    66:33:5f:1c:23:16:50:91:77:a9:4e:e8:2f:16:63:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:06:F6:7F:2A:E7:23:67:56:B4:03:6A:5B:8C:BB:49:95:5D:9B
            X509v3 Authority Key Identifier:
                keyid:F4:0B:11:89:28:67:2B:14:31:54:1A:C3:C4:2F:8A:F8:20:F9:2A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d344c3cd696b6a27237f504e0c016714b7710f9f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/7714b273e42f93844cdb0c3541e14ab5a175dd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8e5b88d-1ced-40b9-b9bf-1d699fc0f960/d344c3cd696b6a27237f504e0c016714b7710f9f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:10a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:8b:c7:4a:76:57:8a:ae:5c:be:ad:9d:9b:53:d4:aa:fa:
         58:4c:62:b2:2a:4f:5a:2a:bf:38:f5:35:72:ac:fc:e8:f3:31:
         f7:2d:35:d2:f7:ec:40:42:3d:0f:6f:7e:15:67:82:9d:a2:9b:
         c7:9e:53:1e:0b:8f:12:28:eb:26:53:fd:3a:fe:d0:23:d1:cc:
         9d:f0:06:a2:1a:13:9a:58:ab:58:da:0d:e9:1b:df:d8:0a:82:
         98:58:8e:54:10:e5:86:55:2c:43:09:82:75:9d:1d:e7:0c:d1:
         f9:e3:64:8f:99:66:d7:c4:66:40:c1:35:16:98:26:df:f5:96:
         35:f6:58:3f:c3:ac:4f:88:c7:78:5e:c2:f5:57:92:cc:e9:e2:
         fd:b8:3a:ac:d3:bb:27:7f:2a:97:2e:d8:ec:e8:ca:6f:a0:5b:
         7d:1f:d2:a3:28:97:dd:a9:98:8d:09:56:67:04:52:3d:74:a9:
         0e:1c:d4:dd:4d:fe:60:3c:37:60:20:2c:e6:05:f3:02:20:e7:
         d1:97:0a:59:df:47:0e:90:1a:e9:fb:1a:57:7d:89:f8:92:f8:
         9d:86:30:6c:20:17:82:1b:e0:b9:38:40:50:1a:78:1e:a7:66:
         74:39:09:c0:ac:2d:05:28:a9:f7:c7:17:75:db:6b:7d:dc:5b:
         66:82:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----