Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/d2d9195ab992b08e5ad12b100af838ce5dbab611.roa
File:                     d2d9195ab992b08e5ad12b100af838ce5dbab611.roa (raw, json)
Hash identifier:          R+kROOGUVD+xpAr+gVpmIkNVIGhT8YM8fX7vcekjRt8=
Subject key identifier:   2C:B4:D4:AB:B2:77:7B:6D:35:29:71:EA:3B:0F:9A:B5:7C:B9:48:24
Certificate issuer:       /CN=7be338779993b5a43526ba10761aa524da070d7d
Certificate serial:       23CD62
Authority key identifier: 49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/d2d9195ab992b08e5ad12b100af838ce5dbab611.roa
Signing time:             Fri 08 Sep 2023 16:18:29 +0000
ROA not before:           Thu 07 Sep 2023 16:18:29 +0000
ROA not after:            Mon 08 Sep 2025 16:18:29 +0000
asID:                     52336
IP address blocks:        2801:158::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346338 (0x23cd62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be338779993b5a43526ba10761aa524da070d7d
        Validity
            Not Before: Sep  7 16:18:29 2023 GMT
            Not After : Sep  8 16:18:29 2025 GMT
        Subject: CN=d2d9195ab992b08e5ad12b100af838ce5dbab611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:47:b9:92:fc:55:c1:d1:8d:2f:a5:55:3c:37:
                    fd:ae:a9:43:83:be:fe:85:8e:70:cc:cf:72:22:f4:
                    1b:fa:85:d0:b9:53:99:de:db:0b:8a:4f:75:42:36:
                    b2:26:3c:83:38:2c:57:4b:a8:5e:1b:33:90:87:44:
                    81:a3:b3:0d:2a:c2:07:37:7e:b5:2d:eb:d6:97:d2:
                    7e:69:0d:2a:8b:17:05:89:03:9f:a6:a1:3a:39:22:
                    89:f3:f1:48:e3:2b:20:43:11:b8:d5:09:d6:48:a2:
                    44:80:52:28:74:b8:a5:96:66:1c:28:e9:ce:06:ee:
                    12:17:98:90:8f:cd:8c:43:0f:b2:ba:94:c3:ad:9b:
                    ee:a2:de:28:02:78:4f:ea:af:3c:98:2b:60:10:a7:
                    67:73:19:2e:bc:1a:c8:9b:87:63:d5:d8:f1:2c:e7:
                    58:f7:71:39:98:ad:20:b6:58:fa:b2:72:f1:3b:93:
                    7f:1e:57:8e:70:c8:99:d9:4d:82:04:0f:17:1c:0e:
                    82:9b:88:69:52:5e:4d:67:fd:94:75:d2:d8:af:0d:
                    4e:96:a7:da:4e:96:00:31:89:ad:3f:52:4e:bc:71:
                    9d:5e:a3:5e:dc:96:5f:08:9a:22:39:7b:89:86:11:
                    af:60:9e:7c:46:4c:91:9d:e0:94:ff:7a:d8:6c:2f:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B4:D4:AB:B2:77:7B:6D:35:29:71:EA:3B:0F:9A:B5:7C:B9:48:24
            X509v3 Authority Key Identifier:
                keyid:49:6C:BD:64:40:D7:D4:BF:CD:B6:0B:A4:FC:3B:D1:07:8A:1F:1B:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7be338779993b5a43526ba10761aa524da070d7d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/d2d9195ab992b08e5ad12b100af838ce5dbab611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e76f41e3-fe70-4af6-9f3d-768d47cb2504/7be338779993b5a43526ba10761aa524da070d7d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:158::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:cb:9e:0f:dc:ab:71:c4:de:cd:4a:a0:02:79:ff:7c:fc:66:
         37:2c:47:24:d2:b8:1a:0d:9b:8b:d6:7f:35:3a:ae:83:71:90:
         74:85:b6:cc:c4:59:08:27:8e:b6:6c:4d:48:d7:96:70:92:ce:
         85:05:82:87:3d:b1:09:14:4f:4c:ef:98:39:58:d6:26:66:61:
         11:a2:27:96:ad:eb:2b:25:a8:aa:ca:cd:10:c9:9d:68:23:05:
         1a:2d:5d:44:f5:9a:10:47:b2:fd:47:32:ad:39:cd:b4:eb:57:
         c4:e1:53:fb:ea:99:e0:06:1e:b7:5e:38:14:fe:87:b0:05:97:
         51:1a:41:f3:21:86:8e:e1:35:53:29:c2:02:55:52:4d:bf:04:
         fc:6c:17:68:d3:4f:2b:a4:dd:6d:05:f6:b7:a7:88:87:1a:b5:
         ae:bf:83:0f:de:f7:37:2b:c1:eb:44:3d:53:eb:c8:12:2a:e2:
         8f:be:de:0e:0b:c8:8b:0c:10:66:88:86:24:80:9d:c4:a5:fc:
         f5:e5:52:f7:e9:6c:e8:0b:db:cb:1d:b0:a5:54:2d:73:ca:a5:
         c4:f4:bc:de:80:cb:fb:33:77:57:52:77:62:99:c7:58:84:5d:
         81:56:30:d3:f9:93:b4:66:d3:9a:06:50:cc:83:11:b5:de:9d:
         c9:0e:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----