Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/513d9f715599ee2b12f095dc0cfa9ab35e8a716c.roa
File:                     513d9f715599ee2b12f095dc0cfa9ab35e8a716c.roa (raw, json)
Hash identifier:          d9ezwa64qlVhx1eu3Mry9XfYmwrC1HfzE+15mX+f9qM=
Subject key identifier:   3E:9A:14:33:9D:4A:27:8A:1C:91:E8:96:90:F0:9B:54:C5:9E:C5:EB
Certificate issuer:       /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial:       23299D
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/513d9f715599ee2b12f095dc0cfa9ab35e8a716c.roa
Signing time:             Mon 28 Aug 2023 13:02:36 +0000
ROA not before:           Sun 27 Aug 2023 13:02:36 +0000
ROA not after:            Thu 28 Aug 2025 13:02:36 +0000
asID:                     27818
IP address blocks:        2803:3380:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304413 (0x23299d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
        Validity
            Not Before: Aug 27 13:02:36 2023 GMT
            Not After : Aug 28 13:02:36 2025 GMT
        Subject: CN=513d9f715599ee2b12f095dc0cfa9ab35e8a716c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:27:de:a8:b3:5a:53:5d:3e:af:42:e4:ba:
                    51:16:b9:e6:18:6b:d2:ec:68:a1:84:f4:e1:40:aa:
                    3c:70:28:8a:92:45:6a:ab:12:8c:f8:38:5a:ae:44:
                    22:08:95:d2:79:d0:aa:cf:23:5a:5a:2a:6d:d2:4f:
                    c3:74:12:8e:e7:12:d0:b2:b1:6e:54:84:c9:ee:e4:
                    e5:2a:4c:6b:96:29:cf:25:59:9c:c2:67:66:56:66:
                    75:3c:ba:40:dd:d9:c9:63:86:19:32:bb:14:b6:cb:
                    f5:e1:83:bf:02:ab:48:85:c1:12:b8:4d:69:11:53:
                    cb:22:ab:e6:4e:97:a2:1e:d8:62:e1:e2:aa:20:95:
                    bf:bd:07:cf:5b:d2:d5:1f:fe:a4:4a:1b:f9:d0:7d:
                    08:84:d5:09:cd:a7:ed:56:6c:0e:d4:21:32:e2:27:
                    c4:2f:f1:be:b2:a6:75:af:b6:a6:96:11:c0:e9:41:
                    04:64:ec:c1:3f:ea:de:c2:df:9e:fc:a9:63:86:6d:
                    cc:49:ab:e2:66:9f:39:9b:1f:ac:ad:30:8c:ec:84:
                    bb:30:a9:01:d1:43:4a:2a:40:c0:09:fd:be:43:88:
                    92:28:02:00:34:0a:08:80:88:54:c6:d7:25:42:12:
                    8d:00:ce:8e:d3:52:e9:2f:e5:f7:3a:3a:a9:bb:f1:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:14:33:9D:4A:27:8A:1C:91:E8:96:90:F0:9B:54:C5:9E:C5:EB
            X509v3 Authority Key Identifier:
                keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/513d9f715599ee2b12f095dc0cfa9ab35e8a716c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:c8:8d:8a:71:90:17:cd:9f:c9:e6:c8:3b:9b:b5:2f:0d:
         61:a0:9c:e9:6c:83:89:16:ff:09:95:06:7e:2d:a9:70:62:a4:
         53:4a:aa:42:39:04:9b:1b:ad:b6:1f:c0:f9:22:a8:2b:02:eb:
         3d:51:74:aa:e6:18:36:6c:cb:6b:05:9b:75:33:5c:ca:8d:34:
         0c:af:a6:28:b9:8d:8f:f4:56:44:b0:31:72:59:db:5e:a5:34:
         9f:88:4f:63:53:32:77:2d:d7:b6:6e:c8:c1:b7:d0:cb:5c:c2:
         be:22:e1:e7:9d:49:1e:3c:0c:d3:ae:0e:1b:c0:11:ff:b6:5d:
         03:9d:6e:33:54:60:fa:10:af:2b:24:fb:1e:09:23:9d:7d:d1:
         87:e6:d9:2b:68:c7:c9:d2:da:55:42:91:67:16:86:0d:55:d4:
         ad:5c:1c:eb:60:2b:ac:8c:6c:90:09:e8:49:5c:58:fe:49:7a:
         98:9a:9e:6c:57:1b:76:8c:dc:60:5a:1b:0d:09:ac:7c:3e:57:
         31:d1:7a:0f:98:f9:7f:4e:aa:5b:5c:4f:49:78:80:b6:49:a8:
         52:14:1f:d2:0c:09:5e:bd:a5:b1:e4:3a:21:1d:0a:18:c9:09:
         38:2e:e2:3e:3f:7b:e3:fe:4a:63:01:da:d0:6d:e6:9e:54:7e:
         d5:b8:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----