Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/0bda0d285b18102a9acc4a58ffe13bf4a40e8c7f.roa
File:                     0bda0d285b18102a9acc4a58ffe13bf4a40e8c7f.roa (raw, json)
Hash identifier:          +NCHPcU3HgUlpaIU5sqzbSU8FzhGDCn6mw1txzD4bfs=
Subject key identifier:   DD:78:77:3D:C2:BD:ED:31:1D:06:17:6F:CD:60:0A:27:C7:81:C1:18
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       1BAAA6
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/0bda0d285b18102a9acc4a58ffe13bf4a40e8c7f.roa
Signing time:             Tue 30 Jan 2024 21:53:12 +0000
ROA not before:           Tue 30 Jan 2024 21:53:12 +0000
ROA not after:            Fri 30 Jan 2026 21:53:12 +0000
asID:                     27775
IP address blocks:        2803:a200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813158 (0x1baaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jan 30 21:53:12 2024 GMT
            Not After : Jan 30 21:53:12 2026 GMT
        Subject: CN=0bda0d285b18102a9acc4a58ffe13bf4a40e8c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:b7:b6:a1:9a:06:1c:24:38:d2:89:e2:b4:
                    89:ef:0c:79:20:73:cb:4a:b1:b7:d9:76:7f:ac:15:
                    00:ef:ad:8a:34:4d:15:0e:f8:bf:70:6c:55:a2:34:
                    15:67:71:a3:8a:cb:ce:67:4e:5d:b9:9a:d8:52:ec:
                    b6:e7:34:15:a4:36:1f:20:bb:d2:6d:a8:09:0a:e4:
                    e0:bf:bc:3f:22:00:f6:a8:8b:d0:ee:79:1a:75:09:
                    2d:f1:07:e8:19:97:3b:8a:6a:93:27:39:40:36:83:
                    c6:f8:a5:24:46:2c:56:a0:09:b9:bb:66:64:57:be:
                    29:8e:3f:7a:8e:b2:1c:38:40:20:2b:68:d3:5e:fc:
                    80:a1:b5:51:be:58:97:b3:43:b9:7f:62:4f:6a:c2:
                    fc:2e:c2:96:29:e8:ce:ba:c3:53:6a:c0:a1:4f:6d:
                    84:dd:84:db:d5:c4:ef:a5:ad:42:ec:00:43:16:b6:
                    a7:c4:a4:82:26:a3:f6:ee:94:79:34:bf:36:57:e3:
                    f7:3a:12:e4:19:d1:bf:b4:08:46:53:4f:2b:c1:32:
                    5e:b2:07:52:a5:97:06:15:f0:34:6f:1b:e9:7d:f6:
                    8e:fa:89:ea:02:b4:32:23:91:0b:23:be:28:ee:7c:
                    a0:48:c4:dc:d3:68:00:5a:ad:58:56:db:bf:5b:aa:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:77:3D:C2:BD:ED:31:1D:06:17:6F:CD:60:0A:27:C7:81:C1:18
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/0bda0d285b18102a9acc4a58ffe13bf4a40e8c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:53:5b:53:1f:f1:97:1d:dd:09:8a:44:35:f9:f7:50:63:
         10:e3:71:c4:51:50:62:28:60:64:2c:a0:22:8a:40:92:99:62:
         73:69:bf:1c:9b:3b:f0:80:27:5a:c8:88:67:5e:58:2d:14:6d:
         35:ff:33:f6:d8:33:ef:23:31:a0:00:e8:4b:48:f9:3f:3e:ee:
         de:a1:2b:ff:9d:3f:d6:3c:14:e4:10:52:a0:f6:d2:de:a2:db:
         f3:31:75:db:ec:70:44:f9:56:e6:70:46:0b:4f:db:23:11:f9:
         4b:b6:2e:01:e9:de:99:80:e9:1b:e2:21:67:cf:92:f9:48:17:
         69:23:44:c0:d7:aa:4e:61:4c:d9:7f:06:70:91:27:ca:cc:ef:
         a2:c5:c2:b3:3c:b4:90:36:30:6b:c8:cc:09:df:76:81:6c:3c:
         81:72:e2:d0:30:70:da:cc:cf:1f:d3:f5:a7:2a:c6:e8:24:8f:
         ba:62:9a:41:6c:9a:5b:fb:11:4d:bc:e5:ef:0a:d8:02:e9:12:
         55:33:c7:67:20:b8:85:29:0d:9b:8f:36:28:57:59:a8:4b:bf:
         de:03:1b:c2:03:9e:7d:66:ab:c8:14:77:90:10:7d:92:27:f1:
         b4:b3:16:5a:3d:e2:e6:8f:48:af:7a:d9:c5:91:58:c1:be:4b:
         0c:32:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----