Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19edb7775fb86c87ba78f159261ed4809943886a.roa
File:                     19edb7775fb86c87ba78f159261ed4809943886a.roa (raw, json)
Hash identifier:          s5l0gVKazBrZSyQnTbtlkScAi6fGJJFZS499K94OMDc=
Subject key identifier:   16:F4:8C:4E:E8:51:34:59:6A:81:44:A5:B8:A9:22:0D:BE:2A:08:1F
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       25203A
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19edb7775fb86c87ba78f159261ed4809943886a.roa
Signing time:             Fri 21 Jul 2023 20:57:30 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     23031
IP address blocks:        2001:13b0:d002::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433082 (0x25203a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=19edb7775fb86c87ba78f159261ed4809943886a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:4c:b0:65:c4:5d:a8:14:15:14:68:e6:f6:
                    b5:97:08:1b:71:7e:d2:45:9a:ea:06:24:ce:74:84:
                    79:ab:ed:66:81:1a:25:7a:37:a0:1e:ac:f1:13:32:
                    f5:a6:26:18:dd:d2:76:42:d0:f6:37:c0:19:e0:25:
                    03:7f:8d:f9:7a:a8:65:28:74:ea:b5:bc:8d:8c:ff:
                    96:79:a4:78:08:24:c9:83:2e:c7:29:5e:80:06:21:
                    d0:d0:f4:11:c1:25:11:9b:88:b6:d8:1a:03:da:ff:
                    4c:81:88:79:bf:f9:0f:87:4c:74:0a:48:ee:66:79:
                    c2:20:c6:02:6c:95:48:7e:16:80:a7:05:35:a8:ae:
                    05:99:24:44:55:d2:d1:4c:6f:b2:e1:d7:21:8d:7a:
                    59:f3:18:3a:b3:71:ac:31:e4:4e:16:59:7f:68:36:
                    e6:a5:69:e9:50:b0:b5:5c:c9:48:4f:e3:d6:aa:85:
                    82:49:22:62:0f:9e:e8:b3:72:9b:06:61:c4:72:48:
                    12:d7:d7:6d:72:94:9d:c8:1f:de:48:f1:ab:da:07:
                    18:2a:91:55:b0:1e:57:cc:71:79:3b:28:dc:bb:7f:
                    2a:84:af:b1:63:fa:65:e5:e4:3a:0d:a9:ff:7f:9f:
                    6f:e8:e7:a9:cf:6c:37:41:82:54:6a:69:fd:74:77:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:8C:4E:E8:51:34:59:6A:81:44:A5:B8:A9:22:0D:BE:2A:08:1F
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/19edb7775fb86c87ba78f159261ed4809943886a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:d002::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:a4:d6:8b:f7:cb:aa:2f:dc:25:24:fe:73:18:43:4c:6f:
         1d:6c:61:69:38:84:81:66:58:66:7b:f1:14:ea:52:5c:ae:71:
         a4:04:8c:21:1f:d3:7b:a6:51:9d:36:62:d5:31:04:f8:49:78:
         d7:ad:89:3d:14:af:7e:19:0b:b3:42:6f:7d:7c:c0:bc:b4:63:
         c3:b0:07:3f:a2:90:87:5a:6d:1e:77:a2:f2:4e:46:87:07:b6:
         bf:e1:bb:56:0f:9a:02:4b:78:07:50:ab:af:1f:8a:a5:44:e8:
         87:ed:4a:f9:6c:e7:86:3d:87:af:dc:4f:58:5c:bd:5f:db:e8:
         f8:89:49:e1:eb:13:0e:fc:98:78:1e:63:6f:0c:56:0f:24:84:
         03:0e:02:d7:69:e2:58:2a:e2:48:ad:0d:2d:59:1c:f9:0c:7b:
         07:75:1f:b4:01:f4:1d:1a:f1:f7:7a:bc:9a:c1:da:0c:04:ab:
         d9:7d:b7:04:5f:5f:28:70:ab:32:72:63:09:93:55:e2:9e:ee:
         f8:86:e3:92:98:88:28:e1:6f:bf:fb:b0:4c:c5:19:a3:24:cd:
         74:da:c6:30:70:97:da:bf:fe:08:00:d1:e7:3d:38:60:f0:ff:
         2f:4d:0b:a3:ab:dc:8c:c8:53:d0:a4:4a:19:78:82:fd:d0:56:
         d0:d5:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----