Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6cb1fee0d4528b08bc394a1e32df2af7aa698a60.roa
File:                     6cb1fee0d4528b08bc394a1e32df2af7aa698a60.roa (raw, json)
Hash identifier:          MXGbQMugvbCYVZIiNI9FG12OZDHzreLiMi9yEG2QTWs=
Subject key identifier:   D8:EA:67:F6:74:A5:7F:24:77:40:E6:00:54:5D:5F:0B:D1:60:56:96
Certificate issuer:       /CN=d573448457c811688599e168f723018473dc9d89
Certificate serial:       0DE885
Authority key identifier: B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6cb1fee0d4528b08bc394a1e32df2af7aa698a60.roa
Signing time:             Tue 20 Jun 2023 03:14:51 +0000
ROA not before:           Mon 19 Jun 2023 03:14:51 +0000
ROA not after:            Fri 20 Jun 2025 03:14:51 +0000
asID:                     64135
IP address blocks:        2803:9910::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911493 (0xde885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d573448457c811688599e168f723018473dc9d89
        Validity
            Not Before: Jun 19 03:14:51 2023 GMT
            Not After : Jun 20 03:14:51 2025 GMT
        Subject: CN=6cb1fee0d4528b08bc394a1e32df2af7aa698a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:3a:37:84:36:9a:1f:a5:58:fe:0d:f6:89:
                    db:ae:07:e8:41:51:1d:d7:8a:38:71:53:8b:21:56:
                    f2:b1:c7:4d:c8:f6:78:40:a3:b5:3d:5a:e1:0a:f1:
                    d7:e3:62:e0:fe:9e:88:90:dc:f2:b1:6f:e8:28:23:
                    f2:b5:8a:66:4d:f0:da:16:7f:20:fc:fa:95:dd:07:
                    09:3d:4d:36:99:98:94:b1:b8:11:99:e2:b5:65:9e:
                    c9:c0:d2:bc:68:07:16:cc:4a:f4:09:d4:93:e9:22:
                    b5:74:b5:f7:b1:48:c4:c4:ee:2b:07:21:c2:a6:9c:
                    8e:e2:5e:87:4b:61:5b:2e:d9:af:a8:9a:86:1a:e9:
                    4e:21:d3:aa:aa:4d:1c:ac:ba:78:71:67:d7:a4:74:
                    ea:3a:5e:ff:4e:e0:ea:45:e6:e0:27:bb:1e:dc:e9:
                    d4:9c:3b:c2:3a:58:e9:eb:50:8a:52:2b:63:69:39:
                    b2:9a:7e:b4:b8:bf:e6:95:cf:95:9e:4a:c6:aa:6b:
                    5c:f2:3a:7b:f7:74:8b:e2:0f:28:dd:8f:8b:fa:ab:
                    ed:fe:0d:28:29:61:f2:15:02:d2:7f:b9:d8:d4:d5:
                    56:74:3d:0f:2f:1f:95:ff:fa:44:7e:77:8e:df:8e:
                    c9:d4:8f:fd:90:8d:50:d7:a6:5e:04:ec:0d:2c:ff:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:67:F6:74:A5:7F:24:77:40:E6:00:54:5D:5F:0B:D1:60:56:96
            X509v3 Authority Key Identifier:
                keyid:B4:77:57:C1:AD:98:1D:A2:61:59:FB:59:DA:DA:85:E1:DB:AB:3D:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d573448457c811688599e168f723018473dc9d89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/6cb1fee0d4528b08bc394a1e32df2af7aa698a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed375ea9-be92-4d77-a86d-af30bc7d1700/d573448457c811688599e168f723018473dc9d89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9910::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:b3:55:0f:b0:20:ec:92:96:eb:ba:ec:b8:6a:3b:4e:37:93:
         d3:44:e0:5b:75:25:3f:0b:6b:18:0c:fd:46:51:9a:b5:16:18:
         7f:1d:f4:01:8b:85:13:d7:7d:56:33:66:82:19:f5:4a:df:57:
         7e:b6:88:70:4c:86:6d:d3:41:ff:cb:14:1d:49:38:ca:d5:3d:
         21:3e:38:51:60:7b:90:16:2a:91:18:91:2f:09:e9:3b:0e:d2:
         e0:b7:77:ba:ec:fd:cf:f7:4c:db:a0:52:75:f9:f4:e5:14:1a:
         19:de:f0:e6:11:77:bc:99:59:16:66:a6:20:87:84:40:41:dd:
         87:21:b5:d4:ff:33:40:65:a3:ba:2b:da:47:fb:f2:2f:1f:91:
         b3:2f:9e:de:04:65:d1:75:cf:5e:de:2b:9a:fb:35:41:d1:b3:
         65:ee:e0:86:d9:38:da:3e:42:47:ad:0b:4e:d0:a9:80:61:3f:
         80:d3:35:e2:b3:ac:cc:85:6f:b1:f1:10:c9:5d:ab:64:65:a2:
         e3:43:52:9f:15:b6:d0:28:92:a7:1f:9a:ca:a2:1a:28:84:21:
         80:b4:bd:b4:49:a9:29:f3:13:2a:7c:b8:e9:fe:63:14:85:73:
         53:54:14:b0:8b:50:96:a6:eb:6a:6f:8b:f8:14:3a:fc:50:4e:
         1d:24:24:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----