Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/f08e13ebb851a040666f91dcaca9f4ac0ed2053e.roa
File:                     f08e13ebb851a040666f91dcaca9f4ac0ed2053e.roa (raw, json)
Hash identifier:          eFexGkZ3XQv2yvksbZvuKtVOWX4L+i7x1/MCJi73uAc=
Subject key identifier:   AB:CC:28:9C:EF:67:3C:FE:73:FC:91:12:21:8E:5C:B1:FA:47:65:86
Certificate issuer:       /CN=a26ec314a343bc26436d508024e2d68ff97ea3a5
Certificate serial:       030740
Authority key identifier: 06:89:35:37:5B:DA:80:44:3D:FE:B4:7E:54:06:09:27:8A:D2:33:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26ec314a343bc26436d508024e2d68ff97ea3a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/f08e13ebb851a040666f91dcaca9f4ac0ed2053e.roa
Signing time:             Thu 14 Sep 2023 16:25:43 +0000
ROA not before:           Wed 13 Sep 2023 16:25:43 +0000
ROA not after:            Sun 14 Sep 2025 16:25:43 +0000
asID:                     28431
IP address blocks:        2806:32d::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198464 (0x30740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26ec314a343bc26436d508024e2d68ff97ea3a5
        Validity
            Not Before: Sep 13 16:25:43 2023 GMT
            Not After : Sep 14 16:25:43 2025 GMT
        Subject: CN=f08e13ebb851a040666f91dcaca9f4ac0ed2053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:29:df:87:bc:a8:9a:39:54:6c:23:81:15:cf:
                    0e:aa:6d:19:e2:a3:13:d2:12:1d:5c:15:9e:e5:81:
                    7d:60:c2:96:45:dc:f0:39:24:fe:3f:b6:34:29:99:
                    57:0f:1e:1c:6c:e3:dd:93:28:83:f6:1c:4b:4d:f6:
                    52:a9:a6:b2:49:d6:fc:cc:d2:95:1f:7e:a8:a0:ff:
                    8d:d8:46:36:44:5f:f9:57:76:90:8e:11:84:92:5a:
                    07:c3:f4:d2:1b:05:8a:91:03:34:4d:72:e8:f3:46:
                    a0:5d:97:61:b8:f4:47:d5:88:cd:9d:94:11:98:de:
                    ed:c9:ba:fa:28:e6:3d:70:d5:4a:c6:6d:7e:31:36:
                    78:0b:c2:e1:72:88:f7:a9:f8:68:0b:0a:38:08:e1:
                    04:16:cc:ad:d3:6f:94:e2:98:aa:70:8a:c9:ac:62:
                    c5:27:83:b7:ad:ab:78:ff:2d:44:e6:27:e0:f0:b6:
                    be:c0:a2:29:b5:12:18:4b:15:30:75:63:93:49:e1:
                    77:e3:d1:a3:e1:5a:62:31:f0:5e:1c:6f:dd:a6:6b:
                    c0:ec:37:2c:ec:4d:ef:d3:70:48:e6:e2:a2:01:44:
                    cf:0d:20:34:81:15:5d:61:41:fa:cf:9d:1b:48:b3:
                    67:b6:c1:a4:b4:2a:90:51:01:d5:1e:bc:cb:c1:92:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:28:9C:EF:67:3C:FE:73:FC:91:12:21:8E:5C:B1:FA:47:65:86
            X509v3 Authority Key Identifier:
                keyid:06:89:35:37:5B:DA:80:44:3D:FE:B4:7E:54:06:09:27:8A:D2:33:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a26ec314a343bc26436d508024e2d68ff97ea3a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/f08e13ebb851a040666f91dcaca9f4ac0ed2053e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db4c3667-e791-4f1b-acb0-b12c45bdff14/a26ec314a343bc26436d508024e2d68ff97ea3a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:32d::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:84:49:0b:d5:70:c9:ea:25:96:ca:39:d9:a3:56:3f:2e:
         cc:b4:a7:91:9b:cc:1c:36:38:41:26:21:e6:4f:0b:32:f6:13:
         71:e3:5f:6c:04:28:1c:f0:f9:df:f9:bd:3a:51:d0:f6:a0:a5:
         70:73:4b:7b:98:a4:7d:c1:0d:d6:f3:fe:54:90:a5:c5:e2:9c:
         b0:4b:91:b3:28:36:d8:00:70:16:0b:c3:a8:e4:d8:ae:a7:76:
         b3:0f:78:88:c4:d6:f6:fc:79:7c:c2:e5:27:63:13:56:3d:83:
         ab:68:9c:82:43:ca:47:e9:89:09:35:63:67:1a:66:73:b0:99:
         d7:23:c2:9e:95:96:b4:e7:db:ed:ed:3f:85:96:c4:60:af:f9:
         58:02:0b:52:58:5e:c0:a1:00:93:74:2d:78:98:f2:a1:4c:c2:
         da:a0:64:a5:ed:05:92:70:df:55:1e:63:f1:46:b1:da:27:b1:
         39:53:ef:fb:76:0d:b1:f6:1f:e9:13:a3:ef:af:db:be:a4:80:
         14:7a:42:1a:3b:77:0e:f3:a4:bd:43:18:26:44:c1:c4:07:9d:
         45:8e:e2:f8:37:41:6b:cb:55:26:5f:e4:85:75:f3:d6:68:8e:
         a1:05:f0:e0:80:07:87:8e:df:0d:39:3b:bc:cb:f5:c1:7f:fd:
         5c:7b:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----