Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/59ea9c73e0da04b4a093d8fddb521024444942b2.roa
File:                     59ea9c73e0da04b4a093d8fddb521024444942b2.roa (raw, json)
Hash identifier:          7/ZwGJtyew1fiQHq2cuNmjqAaoy8MLmwUR0fKKMx52I=
Subject key identifier:   07:55:CE:65:30:57:52:24:18:3A:D5:03:85:6B:8F:7A:EE:A1:8C:DC
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       24F2EE
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/59ea9c73e0da04b4a093d8fddb521024444942b2.roa
Signing time:             Fri 21 Jul 2023 20:56:32 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     23031
IP address blocks:        2001:13b0:d002::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421486 (0x24f2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=59ea9c73e0da04b4a093d8fddb521024444942b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:47:ec:7e:cf:ad:ba:5d:27:f9:65:ec:e5:
                    ad:f6:13:16:77:27:d1:c2:a5:73:89:f1:34:33:c4:
                    af:fb:63:63:ef:ae:b7:00:c7:bc:5e:b8:9e:01:6f:
                    25:13:d9:8a:e7:67:2c:2a:ec:aa:a3:19:0b:af:e0:
                    1f:e6:e0:32:c3:2a:e6:97:9a:f9:50:4f:51:77:ee:
                    f4:f8:b6:53:fa:46:25:f0:20:01:53:c6:47:5a:d8:
                    e5:bf:85:f2:bc:e6:6d:55:d6:5b:02:ed:2f:e2:e3:
                    80:5d:84:44:da:b5:f5:e2:17:08:d2:01:47:19:95:
                    2c:b3:5c:90:a1:83:9c:f0:82:08:9e:8d:c2:9c:d0:
                    5c:11:04:88:46:f9:88:b8:e5:45:22:fc:bc:52:a9:
                    eb:2a:4b:33:4e:76:23:8f:65:26:31:27:22:5e:c3:
                    02:14:1e:39:08:4f:da:47:7b:96:85:df:fc:16:b2:
                    cf:07:1d:c5:fc:de:e8:89:ab:bb:19:5e:c1:94:1a:
                    74:30:f3:61:25:a4:d9:46:dc:e0:3d:32:8e:b0:eb:
                    3b:b6:7b:09:5d:8d:a4:18:a0:20:05:ee:a5:63:e0:
                    08:72:3a:7c:aa:df:94:77:5b:b4:f5:fc:36:82:b9:
                    50:51:2b:ac:0b:2b:bf:c2:c0:23:87:11:65:d9:22:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:CE:65:30:57:52:24:18:3A:D5:03:85:6B:8F:7A:EE:A1:8C:DC
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/59ea9c73e0da04b4a093d8fddb521024444942b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:d002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:fb:54:67:9e:07:46:6e:a5:d1:60:59:40:c0:39:4d:9f:14:
         3a:6f:64:57:c5:8b:cc:d1:bd:ac:a0:9e:81:00:d2:9a:0a:e0:
         42:26:ce:f9:69:44:b9:9d:16:7b:f8:e1:72:96:40:5e:0e:0f:
         c4:16:fc:23:ea:ec:a4:33:bb:0c:07:5b:3d:62:e5:c4:8d:66:
         ab:b8:c9:db:ed:3e:e9:5e:0b:9b:ce:60:ea:1f:0a:d9:d2:59:
         67:5a:56:81:40:93:7c:94:15:9e:0c:fb:4f:e6:fb:8a:4d:3a:
         ee:df:e6:b3:18:88:cb:af:49:ad:5b:80:9c:7c:27:06:6d:62:
         79:25:80:14:4f:df:af:8b:d3:50:10:83:aa:67:8d:32:d0:96:
         a9:3e:ad:9d:45:36:f5:08:36:9c:da:7d:87:32:b1:51:f5:77:
         fe:bb:62:d8:ed:f8:49:f6:82:2f:bc:57:4c:3a:72:61:c1:1b:
         6b:6b:4e:f0:59:ec:9c:d2:38:48:0e:a1:55:f8:90:21:bd:cf:
         1d:9d:1c:96:6c:74:a2:86:55:23:31:c8:5a:eb:dc:1e:55:6c:
         36:a5:ed:83:81:bb:e7:1f:a9:b2:11:8f:b7:27:72:8f:77:a1:
         3b:49:4e:0c:6c:46:c6:f7:6c:d4:8e:60:c5:57:c9:cf:62:8e:
         df:5f:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----