Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/5e87a7500a176f86a062f81275c275c0b5c214e0.roa
File:                     5e87a7500a176f86a062f81275c275c0b5c214e0.roa (raw, json)
Hash identifier:          wR6hvn226F8+Xx5BUfJVJnBsOyRh72JLtIox5//iCrE=
Subject key identifier:   3A:86:2A:8E:28:F9:A6:D3:05:BF:F5:0A:55:76:96:AC:FC:F2:2F:EA
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       070D05
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/5e87a7500a176f86a062f81275c275c0b5c214e0.roa
Signing time:             Sat 27 Jan 2024 02:28:19 +0000
ROA not before:           Sat 27 Jan 2024 02:28:19 +0000
ROA not after:            Tue 27 Jan 2026 02:28:19 +0000
asID:                     273008
IP address blocks:        2803:b590:2::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462085 (0x70d05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Jan 27 02:28:19 2024 GMT
            Not After : Jan 27 02:28:19 2026 GMT
        Subject: CN=5e87a7500a176f86a062f81275c275c0b5c214e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:ae:f1:e7:3e:5c:3b:ea:40:c7:46:a2:b9:
                    19:11:83:fc:8a:af:b9:cd:67:72:e0:e5:23:87:0a:
                    39:5a:bc:14:1b:90:a6:5e:74:6d:5e:28:95:c9:c4:
                    3b:66:9e:c9:92:b0:ed:cd:96:18:12:26:eb:4c:c4:
                    5f:d5:47:03:bb:0b:ef:81:e8:d0:64:73:96:d9:97:
                    52:c3:ea:4c:32:ff:33:c0:a9:5e:42:03:c3:02:fa:
                    d7:cf:f8:82:45:ef:bd:65:3d:cf:c8:af:4a:2f:0d:
                    16:3d:86:95:5f:d7:d1:53:85:f4:55:26:08:13:82:
                    a5:ef:cd:19:76:c6:c4:26:79:36:52:e7:18:ce:32:
                    69:fc:20:b7:f5:0f:ac:7e:11:cc:ea:4f:f1:37:30:
                    ed:b1:14:e0:4b:3a:7c:1b:41:9d:fd:0c:97:0c:d5:
                    b6:e5:bd:42:21:8f:e2:7c:37:2b:2a:f7:9c:16:fc:
                    f9:3c:37:63:3b:88:08:8d:05:3a:72:93:f6:55:17:
                    c6:5c:89:a9:14:ba:8c:e0:17:32:8d:b2:e8:5f:c9:
                    0d:d1:91:bf:cd:21:8a:f2:bb:15:fb:ed:d4:da:eb:
                    d4:a8:ec:87:52:6d:1a:ae:99:6e:24:42:7b:b1:92:
                    ca:1a:51:7f:d6:14:a4:17:91:ed:d4:a6:da:12:16:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:2A:8E:28:F9:A6:D3:05:BF:F5:0A:55:76:96:AC:FC:F2:2F:EA
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/5e87a7500a176f86a062f81275c275c0b5c214e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:e2:2c:ad:af:ba:81:eb:4c:d1:5c:cb:d6:67:68:a0:37:
         49:e5:f8:ad:ce:c6:c6:92:ab:e6:a9:67:09:d6:94:18:df:7b:
         0c:6d:04:19:bf:9d:8c:20:23:7e:96:90:08:09:44:84:3f:a2:
         c8:a0:25:3d:69:d9:f0:72:8d:0a:89:8a:d8:88:c5:b0:01:01:
         e0:56:38:27:5c:7e:ff:37:fe:80:e0:d5:99:cd:d4:4c:d5:e6:
         f7:ef:f4:74:f9:6a:b6:9f:33:62:be:f3:c9:0c:7a:32:31:d6:
         71:44:65:0e:5e:35:c6:25:8d:0d:8f:2d:06:09:10:35:d4:0a:
         15:3e:0b:96:4e:c8:9c:29:c8:af:8f:50:ed:a8:f4:d0:50:fa:
         18:38:31:43:56:43:42:58:a5:5f:b8:22:e9:c4:ab:f3:64:b6:
         c4:9f:c8:80:f0:bc:5e:a2:d7:cb:bf:6a:3f:cc:39:96:52:a6:
         24:0f:a0:ef:98:9d:66:c4:87:f7:84:fa:2a:e0:37:d5:6b:b5:
         4f:42:6f:4c:5a:61:b9:b1:6e:77:52:a6:c3:09:61:98:db:4a:
         ed:76:03:00:7d:09:9e:b5:24:e2:3a:c1:4b:62:3d:2f:c5:bf:
         10:62:28:e1:9a:d5:29:ea:4b:19:d4:05:6b:d1:18:9a:2c:d9:
         11:8d:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----