Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/a9da839c5cc0f1b7008c65ba597cd6921b78f672.roa
File:                     a9da839c5cc0f1b7008c65ba597cd6921b78f672.roa (raw, json)
Hash identifier:          h80Seb8L6QJTaOn63OaOdyMQ5yHfnYgU9rmpb49uB+U=
Subject key identifier:   CA:AF:25:8A:12:13:E9:D9:C9:BE:0A:C1:EF:D0:B0:C1:40:0A:22:83
Certificate issuer:       /CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
Certificate serial:       1ACE8F
Authority key identifier: D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/a9da839c5cc0f1b7008c65ba597cd6921b78f672.roa
Signing time:             Tue 21 Nov 2023 14:22:07 +0000
ROA not before:           Tue 21 Nov 2023 14:22:07 +0000
ROA not after:            Fri 21 Nov 2025 14:22:07 +0000
asID:                     265798
IP address blocks:        2803:cb80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756815 (0x1ace8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6c5e9533c6eb5af58cbd6336fc050db67d3be3
        Validity
            Not Before: Nov 21 14:22:07 2023 GMT
            Not After : Nov 21 14:22:07 2025 GMT
        Subject: CN=a9da839c5cc0f1b7008c65ba597cd6921b78f672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:13:61:6b:51:24:f7:45:b2:8f:8a:d8:81:
                    3d:ee:9c:f4:ab:71:d3:42:1a:62:00:5d:29:b6:28:
                    09:7f:34:d5:a3:60:86:fd:b2:76:96:a7:c4:f0:bf:
                    d6:4b:c1:14:47:25:9d:ed:5c:47:7f:88:11:13:78:
                    62:5a:58:cb:2c:de:e2:21:4d:34:a4:e6:f5:61:06:
                    0d:7c:cf:20:6e:20:78:e5:6a:0c:be:88:ea:56:81:
                    ed:4e:62:ee:86:ee:37:27:9d:07:be:d1:76:e5:d3:
                    3f:a9:be:8e:d9:90:09:3b:f5:22:95:ce:bf:bf:00:
                    63:23:7c:01:8c:21:4b:24:4a:e1:6e:9c:3d:c8:26:
                    fb:ee:37:86:9a:b4:de:38:2f:52:eb:bc:05:24:e4:
                    25:76:b7:9a:28:ff:1e:c7:07:15:26:0e:99:b9:cb:
                    8d:5e:ff:01:cb:6b:9e:79:7f:d8:53:2d:63:9f:32:
                    86:b0:7a:c4:9b:01:e7:11:4f:dc:9b:30:ad:9b:36:
                    bb:fa:f3:1a:7a:21:3a:1f:05:9a:41:b7:30:1b:40:
                    4e:28:29:6c:e2:ad:dd:62:7f:c6:9e:96:2f:26:5f:
                    1f:41:95:ce:b6:25:94:d7:45:30:8c:c5:aa:b4:e7:
                    25:b7:0d:4d:61:3e:98:84:c2:c2:8c:50:88:42:83:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:25:8A:12:13:E9:D9:C9:BE:0A:C1:EF:D0:B0:C1:40:0A:22:83
            X509v3 Authority Key Identifier:
                keyid:D0:6D:14:AA:17:EE:99:AD:E2:40:A1:23:7D:61:18:C8:1B:5E:C5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/a9da839c5cc0f1b7008c65ba597cd6921b78f672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de74f287-ba77-4bcc-aed1-7ced3ade8e06/9d6c5e9533c6eb5af58cbd6336fc050db67d3be3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:ac:10:88:5f:da:9d:76:34:fa:7c:3f:15:7f:05:af:54:
         6e:35:72:37:12:fa:dd:59:db:24:11:16:c6:9a:04:9c:f5:40:
         be:1c:cc:f2:d5:28:84:5e:a1:82:42:39:fb:22:ad:08:22:2d:
         72:86:18:5c:cd:2c:40:49:55:2c:14:10:3d:fb:e1:f5:89:d6:
         d7:1e:a7:5a:20:c0:ab:de:4e:07:a7:2a:74:18:87:6d:6e:4b:
         af:15:97:c4:23:23:c7:89:74:ef:53:31:1a:95:54:24:53:6e:
         83:05:29:e8:87:8f:0d:f4:f7:a5:90:42:8c:cb:25:52:81:2b:
         bb:16:d7:f8:8d:9d:84:f9:13:32:e7:b8:97:dd:63:d5:d7:94:
         0f:ce:ce:12:1b:e6:46:36:16:b8:02:5f:a5:e8:d8:d9:32:6f:
         94:8c:a7:a9:d5:04:dd:48:3b:4e:43:a7:cf:96:82:50:6f:9f:
         b0:9c:bf:19:be:95:41:87:2e:03:d1:df:bb:0a:9e:c3:6d:29:
         b2:fd:d8:8b:e0:03:92:92:58:11:eb:a4:12:f4:6b:9c:9b:7f:
         e2:36:f8:0f:34:db:1b:37:bd:5b:bb:ce:30:0b:27:9c:d0:fb:
         86:05:d5:a2:10:af:ca:ba:e7:8e:09:4f:64:46:21:18:9b:da:
         44:40:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----