Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/89353f33ab0b6ee059e478fc96f132a148ef448c.roa
File:                     89353f33ab0b6ee059e478fc96f132a148ef448c.roa (raw, json)
Hash identifier:          UwOlfv7cEdnfvG76dqnjP3ykbiNCPrBvw92zVhrRdG8=
Subject key identifier:   56:03:99:2E:17:E5:AD:E7:81:CF:6E:89:D0:75:61:BE:4C:91:24:1D
Certificate issuer:       /CN=d5103005cdcbdee1bb7c5939ec470ce97a791bd9
Certificate serial:       25F041
Authority key identifier: F4:32:F1:AD:C4:DD:92:48:5E:F3:B7:0C:DE:08:8B:FC:92:CC:3D:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/89353f33ab0b6ee059e478fc96f132a148ef448c.roa
Signing time:             Mon 22 Jan 2024 20:05:20 +0000
ROA not before:           Mon 22 Jan 2024 20:05:20 +0000
ROA not after:            Thu 22 Jan 2026 20:05:20 +0000
asID:                     14080
IP address blocks:        2801:10c::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486337 (0x25f041)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5103005cdcbdee1bb7c5939ec470ce97a791bd9
        Validity
            Not Before: Jan 22 20:05:20 2024 GMT
            Not After : Jan 22 20:05:20 2026 GMT
        Subject: CN=89353f33ab0b6ee059e478fc96f132a148ef448c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:35:c5:74:ae:77:fb:1b:f6:65:c0:6a:d0:
                    96:7a:9c:3a:fc:40:b8:e1:28:50:ff:8e:d5:7f:a1:
                    59:ab:4a:4c:75:9a:af:ec:bf:37:8c:c2:f0:4c:ff:
                    ed:15:4d:23:b1:b0:4d:a9:89:8b:34:95:d2:e7:f3:
                    fb:72:b1:41:c4:d2:75:ad:97:db:6e:99:ce:5e:75:
                    53:c1:ba:67:12:bc:a0:66:bf:56:31:d7:36:b1:85:
                    47:10:65:f5:dc:66:d7:9e:ad:7e:31:c2:0e:3a:58:
                    eb:76:84:b0:aa:85:1f:2e:e2:a5:fd:b6:63:dc:a4:
                    be:9f:8b:28:1c:83:a7:1d:f8:ae:e2:99:2a:dd:c3:
                    fe:19:07:3e:94:ea:47:5c:74:5d:a6:de:90:0d:dd:
                    5a:2c:75:0c:9e:3f:7d:ac:e7:4f:2e:8a:05:4e:16:
                    9f:5c:41:93:ca:16:36:b7:8f:4f:ce:51:c7:bb:2d:
                    33:35:07:49:de:c0:3e:7e:3c:7b:7f:29:4d:78:93:
                    dd:39:38:5b:43:51:4c:4c:b9:ab:84:86:f6:5e:92:
                    8d:be:15:e2:41:89:96:8f:4b:23:28:fe:1b:91:1f:
                    ff:89:20:f6:38:27:61:1c:b0:a5:b0:47:29:67:75:
                    cd:05:9a:c8:1e:1c:af:6f:29:a1:79:fa:1c:a9:e4:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:99:2E:17:E5:AD:E7:81:CF:6E:89:D0:75:61:BE:4C:91:24:1D
            X509v3 Authority Key Identifier:
                keyid:F4:32:F1:AD:C4:DD:92:48:5E:F3:B7:0C:DE:08:8B:FC:92:CC:3D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/89353f33ab0b6ee059e478fc96f132a148ef448c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dbba5c32-8756-4c94-a6e4-33bccbc87102/d5103005cdcbdee1bb7c5939ec470ce97a791bd9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10c::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:1d:c2:dc:be:6b:96:ef:6a:87:07:4e:cc:74:1e:ee:13:
         05:ce:b7:2a:c2:a8:05:20:93:28:07:96:22:4f:aa:62:a5:9c:
         50:93:50:df:2d:34:d3:e2:72:7e:4a:0c:f8:b2:48:29:50:35:
         e5:8d:95:a5:9c:9a:51:c8:ff:27:d2:e7:e7:33:fb:09:13:41:
         35:3e:f3:c6:7b:31:a5:31:89:03:df:ea:db:ce:88:66:3b:ba:
         d0:34:57:ee:25:fc:f7:c9:c0:a9:ac:c9:17:5d:df:81:5f:c5:
         fc:ad:ed:31:a6:bc:a7:39:15:df:d0:1e:d2:c3:40:27:49:09:
         25:40:50:26:e7:e8:98:cc:c3:53:a1:d6:89:6d:3a:b7:23:69:
         2a:ef:65:05:a9:a5:d8:01:cc:82:d8:10:95:ac:17:98:86:3c:
         3d:fc:2f:94:c0:6c:f5:b5:6f:7c:7f:ff:ac:7b:71:b5:f5:4f:
         6d:bf:22:09:de:94:8d:46:38:58:c2:39:5d:ed:56:14:6f:79:
         ad:3f:90:16:bb:bc:00:a6:84:a0:45:e9:ae:17:66:ff:d3:12:
         76:48:1f:fa:11:bb:42:30:82:a5:d1:d1:1d:53:a0:07:b6:71:
         67:37:4a:d1:8d:32:5c:10:14:3f:e4:10:1f:21:84:6f:5a:8a:
         3b:5e:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----