Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/0425d756c6e8cc199c529452ca4c5f37175c64aa.roa
File:                     0425d756c6e8cc199c529452ca4c5f37175c64aa.roa (raw, json)
Hash identifier:          j8g0cP2+9hiujUbjT8Kyaz8kvwYf7BTmmPE/uf1BWcw=
Subject key identifier:   41:A0:BB:F3:F9:05:D9:4A:98:10:F7:12:8F:CD:67:A5:5D:F1:48:31
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       089A
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/0425d756c6e8cc199c529452ca4c5f37175c64aa.roa
Signing time:             Tue 27 Jun 2023 19:13:56 +0000
ROA not before:           Mon 26 Jun 2023 19:13:56 +0000
ROA not after:            Fri 27 Jun 2025 19:13:56 +0000
asID:                     28067
IP address blocks:        2801:0:40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:13:56 2023 GMT
            Not After : Jun 27 19:13:56 2025 GMT
        Subject: CN=0425d756c6e8cc199c529452ca4c5f37175c64aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:74:bb:e8:51:20:8a:d0:65:37:af:f1:de:
                    70:21:de:18:f1:4c:66:9f:d7:e8:69:25:1c:a4:32:
                    3f:9f:23:08:ac:bf:15:01:18:07:c4:04:6f:b7:4a:
                    79:c7:7a:f3:c1:7c:21:7b:c0:5b:a4:4b:31:d5:2d:
                    3c:ec:00:d5:38:a9:83:ff:3f:3b:dd:c3:9e:06:a6:
                    91:9d:55:8b:ed:b3:7a:2e:b2:3c:ee:83:85:81:19:
                    ff:11:3d:db:67:3a:a6:77:19:be:e9:3b:90:91:21:
                    f6:04:ed:c1:a8:8d:d7:05:6e:a0:d3:16:a1:10:89:
                    09:c6:a6:29:17:c4:ae:07:a8:2a:63:b0:4e:35:07:
                    28:88:f2:7d:29:9b:81:86:16:79:02:5d:dc:a5:72:
                    d9:e3:2c:77:d1:e2:5a:9e:fb:24:fc:d2:d7:13:1e:
                    87:53:12:7e:82:49:3d:2b:ba:73:9f:48:d9:f5:a7:
                    3f:25:e1:42:73:9c:3e:01:9e:c5:7f:ec:a1:58:c6:
                    bb:2d:fc:4f:82:62:02:dc:f7:0e:60:6a:69:88:fc:
                    6d:fd:17:f7:bc:10:db:5a:56:3a:d3:f2:4a:63:4f:
                    59:c6:26:c1:ef:37:2e:6e:d4:68:fe:bc:ff:fe:e0:
                    41:e3:ee:6b:51:8c:34:ef:b6:29:3f:d2:3b:be:48:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A0:BB:F3:F9:05:D9:4A:98:10:F7:12:8F:CD:67:A5:5D:F1:48:31
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/0425d756c6e8cc199c529452ca4c5f37175c64aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:3d:cb:b3:3b:23:0b:7d:c4:f1:11:1e:f4:ff:b0:57:57:
         13:c0:53:92:ca:ca:a5:3d:87:b4:e9:f4:3d:a8:7e:76:2b:e5:
         0c:79:f3:57:a5:ee:73:1c:ab:30:36:64:a1:66:52:41:d4:45:
         ef:5f:80:ce:b2:cd:b8:2e:54:34:17:77:d0:5d:2f:ac:45:85:
         c8:61:39:f4:b1:92:de:c7:b8:d5:36:06:f0:26:4f:09:2b:75:
         46:9d:61:83:3f:f0:29:79:9f:32:bd:54:b5:40:4c:97:89:f7:
         39:03:f9:e5:e1:b3:ee:8e:99:15:7e:9c:8e:55:ad:37:a6:f9:
         6c:7f:38:5f:80:d7:5c:71:ae:96:84:aa:de:d5:7f:f1:26:a5:
         73:0d:a5:b2:12:37:c0:f3:df:db:40:6d:4b:73:7e:a4:a1:c0:
         6f:15:ba:2d:ce:37:2c:db:9f:09:a5:cb:99:c1:84:32:56:5b:
         c2:e3:cc:fe:fb:6b:8f:66:e5:1e:46:9f:7a:e8:c7:13:68:61:
         48:71:9f:4d:62:1a:1d:ae:b3:31:97:1d:fa:d3:b0:9e:69:ee:
         d2:42:1d:e2:c0:ee:ea:75:35:67:a1:f8:1b:cf:c1:85:85:72:
         87:3f:66:4d:88:8e:9d:21:21:a7:cd:0b:2e:81:a0:34:90:75:
         e5:bd:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----