Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/e2e9d7e6957ebca8fe662826471426cdcb0141f4.roa
File:                     e2e9d7e6957ebca8fe662826471426cdcb0141f4.roa (raw, json)
Hash identifier:          QVwuum4lUWryizsm5E/fx4qqlOdyHoE33m9rVAn1luc=
Subject key identifier:   66:92:F8:01:5A:E1:DB:AA:05:AE:9F:05:68:00:5C:43:1A:53:10:52
Certificate issuer:       /CN=22186b09ccdf865006a12efd8444a8fa73b7c154
Certificate serial:       06C5AA
Authority key identifier: B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22186b09ccdf865006a12efd8444a8fa73b7c154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/e2e9d7e6957ebca8fe662826471426cdcb0141f4.roa
Signing time:             Tue 06 Jun 2023 19:21:57 +0000
ROA not before:           Mon 05 Jun 2023 19:21:57 +0000
ROA not after:            Fri 06 Jun 2025 19:21:57 +0000
asID:                     272855
IP address blocks:        2803:2290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443818 (0x6c5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22186b09ccdf865006a12efd8444a8fa73b7c154
        Validity
            Not Before: Jun  5 19:21:57 2023 GMT
            Not After : Jun  6 19:21:57 2025 GMT
        Subject: CN=e2e9d7e6957ebca8fe662826471426cdcb0141f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:09:a7:05:cd:81:09:20:64:c8:87:18:11:
                    91:f4:bd:23:48:ad:40:c6:d2:55:b9:be:1a:2f:d1:
                    80:81:1a:14:74:5b:a7:8f:7f:49:57:e0:4e:42:3d:
                    7a:bf:af:f3:ae:7a:6d:96:ce:fa:8a:0b:86:3c:7e:
                    21:c1:d1:7f:56:58:20:47:8b:7a:79:e1:69:4c:c3:
                    9f:3e:f3:4f:17:03:b2:95:b6:9a:f9:b0:ae:1f:bd:
                    ff:c3:3a:67:04:a6:dc:21:9d:e7:1f:1e:65:fb:ea:
                    28:d1:be:50:b5:7a:ab:3d:ae:a7:8a:8b:15:59:82:
                    c3:53:0a:0d:c9:f0:55:e1:10:b1:5c:7e:c0:12:1e:
                    29:79:82:18:35:bd:37:58:33:b1:c4:64:d1:cd:97:
                    85:f8:94:74:36:7e:77:c6:f8:ff:dc:9e:ad:9a:32:
                    42:d4:60:6f:d0:06:62:a0:ea:5d:62:a2:f1:bd:61:
                    14:2f:5e:bf:98:f3:e5:bb:85:b0:25:a0:40:74:c5:
                    35:64:53:fc:5e:68:b3:dc:91:50:9d:9d:cb:09:7c:
                    01:38:e5:f1:24:33:ae:9c:7b:e2:f0:4d:db:5e:0b:
                    99:88:75:68:ad:5c:00:2f:63:f8:f7:81:80:1a:de:
                    32:c9:64:68:a8:97:91:33:0c:88:ff:f7:ec:ef:b2:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:F8:01:5A:E1:DB:AA:05:AE:9F:05:68:00:5C:43:1A:53:10:52
            X509v3 Authority Key Identifier:
                keyid:B0:3C:3B:73:C9:BE:F4:82:69:CA:4E:F8:7A:47:22:56:79:FB:84:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22186b09ccdf865006a12efd8444a8fa73b7c154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/e2e9d7e6957ebca8fe662826471426cdcb0141f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f52ba922-6593-4be2-a62e-d9123e7efe89/22186b09ccdf865006a12efd8444a8fa73b7c154.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2290::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:23:03:2c:d0:bc:d2:73:31:9e:6a:56:5b:ce:d7:f2:4d:96:
         9c:df:03:99:89:74:4b:1b:e6:32:4f:14:32:1f:8d:83:42:39:
         a8:94:43:18:a8:72:e7:34:ee:01:89:fa:b9:6b:51:a2:35:56:
         77:b0:13:33:ef:13:84:16:11:4a:03:1c:47:2b:86:36:28:84:
         05:ca:ee:c6:02:19:64:06:4e:19:64:14:d7:21:e2:c8:11:d2:
         e0:e6:c5:2f:10:70:46:28:6f:e2:a2:06:d1:71:05:21:13:09:
         75:de:64:87:83:75:4f:2f:99:1b:ed:09:68:00:86:40:6f:1f:
         95:0d:02:3a:59:c2:c4:55:e5:12:3e:1f:bb:08:f8:c4:12:4a:
         4a:19:db:ff:48:4d:98:e4:b1:eb:09:97:8d:17:a2:10:af:b2:
         78:29:40:d6:dc:52:38:0f:2e:c1:fe:9d:7a:a6:93:a7:7a:ca:
         e1:83:3a:09:b2:8e:a1:69:e3:b2:e8:70:ee:b8:e8:ef:e5:a6:
         4e:60:a3:cc:c0:f6:ba:e0:b0:39:31:9a:17:3f:98:17:9e:09:
         56:d4:a4:7d:0d:a2:40:1c:ee:e8:32:7c:e8:de:4e:35:3f:b1:
         01:31:96:d8:6d:95:34:3b:fa:81:18:12:2f:23:bb:3a:5f:ba:
         d8:7b:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----