Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/bfa6e88d10d95075053e3ff01cc93e3b75783703.roa
File:                     bfa6e88d10d95075053e3ff01cc93e3b75783703.roa (raw, json)
Hash identifier:          5v/mmag7S22K+OpJSIyo0a9SOvH4YA4/dm7zmX2rx/g=
Subject key identifier:   AA:46:4E:06:2C:0F:5A:13:8B:43:84:6B:49:66:C5:99:A4:2E:6A:63
Certificate issuer:       /CN=7366b6ba710d5818cba6a97094ac141b297f6f10
Certificate serial:       07B79B
Authority key identifier: 09:27:AE:ED:C2:A7:F6:64:35:5B:48:DF:A4:E2:E8:A3:68:B7:34:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7366b6ba710d5818cba6a97094ac141b297f6f10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/bfa6e88d10d95075053e3ff01cc93e3b75783703.roa
Signing time:             Wed 09 Aug 2023 16:09:34 +0000
ROA not before:           Tue 08 Aug 2023 16:09:34 +0000
ROA not after:            Sat 09 Aug 2025 16:09:34 +0000
asID:                     272112
IP address blocks:        2803:f10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505755 (0x7b79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7366b6ba710d5818cba6a97094ac141b297f6f10
        Validity
            Not Before: Aug  8 16:09:34 2023 GMT
            Not After : Aug  9 16:09:34 2025 GMT
        Subject: CN=bfa6e88d10d95075053e3ff01cc93e3b75783703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:df:4b:a5:af:ed:60:1e:9b:67:ea:2d:19:
                    70:08:80:02:55:74:e3:2a:05:4b:ec:24:b6:58:db:
                    0e:dd:ab:13:1b:da:d7:74:dc:55:05:e6:93:14:9a:
                    28:25:92:1f:54:4c:e6:8c:85:d9:f4:a9:fd:74:e2:
                    24:8f:b6:14:fc:86:d0:38:be:c2:6d:04:9c:bb:3a:
                    ed:92:e7:96:24:96:b8:2d:f0:c9:d4:fb:c1:98:9e:
                    0f:79:05:85:0f:7f:8b:5b:fc:1e:71:9c:28:98:f0:
                    7d:20:47:8d:3c:c2:86:b2:7e:82:58:7b:02:ac:7e:
                    b0:a6:10:6e:2f:37:a9:6a:57:7c:c2:99:9a:c3:9b:
                    40:fc:0f:01:11:f2:7e:94:66:e1:b7:18:a8:42:ae:
                    ee:82:42:d5:9d:0e:5b:2d:f4:17:9c:37:0f:e4:43:
                    02:9a:8f:db:67:a4:c6:ae:59:d8:64:95:20:4f:e3:
                    e1:ba:31:69:8f:12:19:3d:96:ab:72:ea:6e:19:07:
                    3c:b5:78:40:9d:96:3e:a5:f8:d6:cf:c0:bb:87:1f:
                    22:68:3c:7b:54:be:96:6f:af:3c:d4:75:03:e8:3f:
                    20:a7:e8:a5:77:42:1c:55:09:5a:3f:20:e5:86:1b:
                    4e:0b:30:1c:6d:6d:cb:3b:18:08:e5:bd:9d:27:3d:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:4E:06:2C:0F:5A:13:8B:43:84:6B:49:66:C5:99:A4:2E:6A:63
            X509v3 Authority Key Identifier:
                keyid:09:27:AE:ED:C2:A7:F6:64:35:5B:48:DF:A4:E2:E8:A3:68:B7:34:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7366b6ba710d5818cba6a97094ac141b297f6f10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/bfa6e88d10d95075053e3ff01cc93e3b75783703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/7366b6ba710d5818cba6a97094ac141b297f6f10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:d4:f7:58:e5:93:30:ec:9a:7f:cf:0d:41:fc:97:89:2d:
         1c:6a:b7:6c:03:d9:5a:c1:7a:bb:ce:a5:09:54:94:a7:20:5f:
         c3:ef:9f:c0:3b:e1:f5:d3:9b:77:9a:a7:8e:03:80:e2:30:39:
         01:1f:00:11:d0:9e:86:ba:38:b4:ca:0c:cd:1b:0a:6c:88:26:
         98:95:b3:e6:bf:34:ff:cd:69:e7:ef:91:ab:eb:bc:17:5f:a0:
         e4:a7:75:04:7e:33:de:71:8a:80:69:d8:74:64:1f:0b:49:01:
         07:65:80:94:eb:89:c9:fe:c9:e4:7a:48:46:4c:06:1e:ed:b2:
         c9:99:cc:cc:1a:ad:f2:29:45:d6:e7:9c:72:8f:d9:08:49:c1:
         3e:3a:6c:a8:4d:a9:f8:f4:78:2d:1d:43:20:e6:77:01:8e:55:
         06:6c:2d:a7:78:48:7d:15:f0:2b:b0:f8:89:bd:9a:0b:7a:e8:
         fc:57:d4:87:68:91:fe:7f:70:4d:6e:73:a4:42:7c:9d:89:40:
         32:e6:c2:82:cc:39:ec:58:1e:ac:40:93:36:9a:6c:2a:33:3f:
         c5:de:5b:da:b2:c1:5b:bf:65:89:be:47:01:83:0c:72:9e:60:
         35:ca:d5:0d:cc:9b:b5:97:6c:1d:b4:63:d6:17:3f:90:9c:61:
         ff:1a:15:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----