Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/12e46045f7a774e8acd3dd0adfdf4b1c1e583234.roa
File:                     12e46045f7a774e8acd3dd0adfdf4b1c1e583234.roa (raw, json)
Hash identifier:          oTVfDuCNKctXZV11ka/RdPp3H6aqCpy2R4NLv6m7OO0=
Subject key identifier:   56:51:A6:DC:D9:E8:55:63:5F:CA:CD:C3:FA:8B:E1:2E:4E:A5:62:26
Certificate issuer:       /CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
Certificate serial:       1ED0E2
Authority key identifier: C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/12e46045f7a774e8acd3dd0adfdf4b1c1e583234.roa
Signing time:             Sat 18 Feb 2023 22:48:48 +0000
ROA not before:           Tue 23 Mar 2021 14:42:21 +0000
ROA not after:            Tue 24 Mar 2026 14:42:21 +0000
asID:                     265767
IP address blocks:        2803:c7c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019554 (0x1ed0e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
        Validity
            Not Before: Mar 23 14:42:21 2021 GMT
            Not After : Mar 24 14:42:21 2026 GMT
        Subject: CN=12e46045f7a774e8acd3dd0adfdf4b1c1e583234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:10:6c:86:14:83:53:c2:66:93:a8:ce:00:
                    11:4c:bc:64:4d:2d:21:66:92:10:14:80:32:67:97:
                    84:9e:48:60:56:4a:d5:52:25:88:94:63:22:27:9c:
                    3e:a6:5d:d1:85:e5:a1:dd:b5:87:89:41:d5:bc:bc:
                    41:44:a9:f1:b1:87:3c:65:e6:1d:25:0d:34:11:2a:
                    56:84:d5:de:ed:81:41:45:26:1e:b1:45:7c:a0:f9:
                    3a:54:83:d2:35:37:e4:57:99:51:bd:36:23:b8:42:
                    5d:67:81:46:91:b2:9b:85:a0:e1:a3:65:34:57:e1:
                    b4:42:e8:cd:0d:b1:6b:64:ac:a6:da:06:8e:67:76:
                    dc:5c:15:d9:d9:e1:16:4a:1c:d8:fb:aa:ae:a4:ad:
                    f7:a7:98:41:c9:c7:ea:ac:ca:12:c6:f3:2f:1b:4f:
                    90:8a:ba:02:95:f4:b5:b2:77:ea:fe:fb:71:59:79:
                    b9:f0:e0:b0:12:73:f3:8f:10:58:cc:2d:1f:4b:79:
                    40:b0:7d:b4:6e:f1:80:68:dd:20:37:90:00:14:53:
                    8d:7d:a9:ca:9e:8c:90:75:90:46:11:c0:22:c6:c0:
                    fb:30:4d:4a:36:9e:8c:83:2a:b6:97:2d:8c:ab:8a:
                    b8:a1:ff:0b:ef:36:12:61:4d:d1:c9:aa:5d:a8:bc:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:A6:DC:D9:E8:55:63:5F:CA:CD:C3:FA:8B:E1:2E:4E:A5:62:26
            X509v3 Authority Key Identifier:
                keyid:C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/12e46045f7a774e8acd3dd0adfdf4b1c1e583234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/a5346d2ac1e2fe0a8450cb3df09c729567332040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:4e:83:a4:80:4f:62:c8:ec:67:2a:1d:08:14:b6:ac:18:
         25:40:62:a7:96:4b:cf:57:88:9c:c8:d7:a8:99:96:94:11:eb:
         0b:fa:e9:bf:e7:bf:5f:b0:fc:93:37:24:cf:11:92:6a:93:1f:
         31:35:ee:48:b6:96:af:5d:00:3b:22:27:c1:1d:ef:b6:17:45:
         b0:bd:29:41:90:66:41:f8:ad:99:a8:01:48:b4:82:56:bd:c5:
         0e:39:39:fe:8f:2d:e5:44:46:cc:5b:90:08:97:fc:fc:93:95:
         1f:53:76:28:5d:aa:9b:fc:ae:01:ef:5c:ac:1c:ba:2d:c3:55:
         e9:d5:d3:d9:12:cc:66:d0:80:f3:eb:a8:dc:7f:3a:21:f5:74:
         c3:0c:7c:3a:65:77:0a:1b:fa:1e:e9:9c:41:ef:ed:05:ee:f0:
         33:7b:0c:f1:89:ab:4f:14:a9:7f:38:e6:c8:82:ed:74:7b:ae:
         b1:57:9e:d4:1c:68:e5:e4:3a:9a:84:ea:54:ae:e2:6c:ae:2d:
         6c:c0:b9:5a:2b:45:ef:37:97:cb:13:77:aa:86:96:f8:54:2d:
         43:b3:36:07:8f:c1:7c:15:b8:3f:12:e5:3d:d3:34:f2:2a:21:
         c0:af:6a:6c:03:86:0e:1d:ac:a8:cc:ac:2d:cc:8d:f7:53:b0:
         1d:37:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----