Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/5592a8df4b777e693511f18e0d972362d69498bd.roa
File:                     5592a8df4b777e693511f18e0d972362d69498bd.roa (raw, json)
Hash identifier:          w7YvrliP0LWO0POtYaqX+c0YBZ0WPmk1/ufUyzZE3uM=
Subject key identifier:   9C:81:87:2F:09:76:15:F8:65:46:CC:70:39:8F:32:D3:12:F9:31:80
Certificate issuer:       /CN=d5103005cdcbdee1bb7c5939ec470ce97a791bd9
Certificate serial:       25C428
Authority key identifier: F4:32:F1:AD:C4:DD:92:48:5E:F3:B7:0C:DE:08:8B:FC:92:CC:3D:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/5592a8df4b777e693511f18e0d972362d69498bd.roa
Signing time:             Sun 14 Jan 2024 18:39:09 +0000
ROA not before:           Sun 14 Jan 2024 18:39:09 +0000
ROA not after:            Wed 14 Jan 2026 18:39:09 +0000
asID:                     14080
IP address blocks:        2801:10c::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475048 (0x25c428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5103005cdcbdee1bb7c5939ec470ce97a791bd9
        Validity
            Not Before: Jan 14 18:39:09 2024 GMT
            Not After : Jan 14 18:39:09 2026 GMT
        Subject: CN=5592a8df4b777e693511f18e0d972362d69498bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fc:f9:77:84:12:fa:27:0f:af:38:40:d8:89:
                    d1:3c:64:d3:c8:18:97:00:ff:5e:7a:c7:9f:28:57:
                    09:05:fc:9c:7f:24:4a:c8:ce:05:bd:b9:5c:44:29:
                    33:db:28:80:03:8d:ae:bb:30:f9:10:a7:9f:e8:96:
                    69:bb:f2:6e:79:c0:35:e7:14:2a:38:13:03:dc:89:
                    f3:4d:d5:16:2e:44:d1:5e:0f:92:93:1d:f6:f0:89:
                    0e:f9:88:7e:ac:ca:ce:4e:26:45:9e:3b:e3:a4:59:
                    f2:08:28:c7:6a:42:71:f6:39:df:d2:5d:38:ea:d5:
                    c9:55:af:a6:b6:dd:40:8d:18:7f:ff:10:fa:af:f3:
                    47:0d:13:11:51:3a:e0:d2:ff:20:d8:19:b1:a4:22:
                    0e:6e:c3:09:2b:04:fd:7b:74:5e:ba:bc:e5:8b:41:
                    3c:13:91:26:cb:67:e2:94:6c:5a:29:d5:ee:99:1d:
                    54:1f:e0:7e:de:4f:09:f3:94:c3:55:7d:0c:c1:fa:
                    60:32:73:be:db:a9:3a:63:f0:cf:1f:b2:cc:b4:b4:
                    a0:36:3d:0c:f4:bc:b1:ca:64:ad:ec:77:4a:a8:ea:
                    58:ef:8c:fa:d0:d1:12:13:dd:73:72:d6:78:81:e4:
                    26:12:4f:86:4e:d6:0f:fb:32:00:4b:74:df:bb:b5:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:87:2F:09:76:15:F8:65:46:CC:70:39:8F:32:D3:12:F9:31:80
            X509v3 Authority Key Identifier:
                keyid:F4:32:F1:AD:C4:DD:92:48:5E:F3:B7:0C:DE:08:8B:FC:92:CC:3D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/5592a8df4b777e693511f18e0d972362d69498bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10c::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:bb:81:0d:68:a7:d8:ff:d3:f2:3e:27:9a:8e:97:48:4d:
         3a:ac:bc:67:df:8e:43:b0:d5:49:d4:37:14:22:65:82:d1:ec:
         08:bc:76:7a:5e:cb:52:df:e3:b4:42:03:ab:ea:6d:a0:31:38:
         07:51:72:cc:b0:61:eb:d5:8d:32:f2:94:8a:e7:be:01:a7:66:
         3a:e8:43:fb:92:9d:3a:f7:3a:d5:b2:8f:b7:70:55:19:c8:c3:
         b6:f2:25:03:6e:75:11:22:d4:1d:6b:41:37:de:d2:3a:23:4c:
         88:eb:b0:e3:4d:80:4d:f1:df:16:4a:18:d3:42:f3:bf:51:da:
         36:bc:b5:db:cc:83:36:fe:cb:99:b5:d6:1e:1b:75:d2:e4:4a:
         df:bd:b9:8b:8a:2f:ad:3c:cd:c4:26:ff:1d:bc:43:d2:4e:7b:
         d2:fc:5c:f4:be:17:7c:16:69:27:6b:38:fa:5e:de:0a:b9:e8:
         01:d8:cd:d6:ff:7a:9d:83:00:16:31:fd:25:22:7a:93:f7:4c:
         de:4e:74:8d:a4:ed:d9:3a:58:92:95:d5:4f:f2:6e:5f:47:4c:
         16:aa:32:fe:bd:3c:eb:1b:db:4d:8b:75:7a:53:96:c4:69:86:
         59:4b:ab:1e:cd:90:26:12:b6:cd:d2:ec:c5:61:8f:80:72:65:
         44:4c:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----