Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/547680241ba7b8fb7e9b6a0a1cdc082473f800e5.roa
File:                     547680241ba7b8fb7e9b6a0a1cdc082473f800e5.roa (raw, json)
Hash identifier:          Gc0ZlmMh2At0mjqrY4gQGUgv2tViPUt9e/DrJV6lROs=
Subject key identifier:   01:B9:01:E7:68:00:7F:77:AC:1F:E2:9D:E8:8A:B5:06:D6:B1:0F:6C
Certificate issuer:       /CN=4bf89334b78a089c6040858ad23f31ea607244b6
Certificate serial:       01A55F
Authority key identifier: F5:DF:E3:05:4B:FC:54:60:2B:DE:7A:0C:58:AF:A7:F5:78:F9:A9:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bf89334b78a089c6040858ad23f31ea607244b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/547680241ba7b8fb7e9b6a0a1cdc082473f800e5.roa
Signing time:             Tue 03 Oct 2023 14:49:59 +0000
ROA not before:           Mon 02 Oct 2023 14:49:59 +0000
ROA not after:            Fri 03 Oct 2025 15:49:59 +0000
asID:                     271990
IP address blocks:        2803:e110::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107871 (0x1a55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf89334b78a089c6040858ad23f31ea607244b6
        Validity
            Not Before: Oct  2 14:49:59 2023 GMT
            Not After : Oct  3 15:49:59 2025 GMT
        Subject: CN=547680241ba7b8fb7e9b6a0a1cdc082473f800e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:cc:6c:27:94:d0:d7:7f:be:99:05:f3:c3:
                    ce:6f:88:05:27:6d:4b:8d:9f:2e:44:30:5e:10:fa:
                    be:8c:64:fe:c0:7d:f5:d1:c6:28:1d:06:9f:13:50:
                    88:6b:2e:e2:07:68:6b:fd:4f:53:12:28:a2:f2:53:
                    65:5b:83:8f:2c:fc:11:a7:b4:a1:0c:e5:72:7f:5b:
                    ae:91:c7:f1:b4:e6:f8:a0:c6:73:8a:43:53:50:e0:
                    2e:f1:54:ee:7d:ba:90:82:8e:9b:66:6f:b0:96:7d:
                    d6:2d:2d:2e:ad:ea:08:18:38:a0:d5:dd:00:f6:30:
                    cd:7b:c9:ba:81:86:7e:d1:0e:cc:12:89:3e:54:85:
                    04:3e:7d:53:83:9d:98:ec:55:69:16:62:2b:97:b6:
                    77:b3:9b:81:c2:bb:a3:ec:3b:a4:0d:39:a2:7c:c6:
                    4a:af:c0:a6:4b:c7:2b:23:5a:6d:36:c0:16:ce:e1:
                    a4:e7:32:6a:85:79:23:3c:83:dd:4e:3c:7d:18:0e:
                    41:27:c0:5b:a4:08:69:8f:54:54:be:d7:ee:94:da:
                    ff:d6:10:2f:7c:ea:7c:65:d5:9c:7f:26:a6:c3:e3:
                    6f:c7:8f:c3:97:7c:a3:3f:71:f5:ff:b6:2f:8c:d4:
                    80:26:a5:15:22:42:4c:ab:f2:ad:61:1d:e5:03:50:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:01:E7:68:00:7F:77:AC:1F:E2:9D:E8:8A:B5:06:D6:B1:0F:6C
            X509v3 Authority Key Identifier:
                keyid:F5:DF:E3:05:4B:FC:54:60:2B:DE:7A:0C:58:AF:A7:F5:78:F9:A9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bf89334b78a089c6040858ad23f31ea607244b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/547680241ba7b8fb7e9b6a0a1cdc082473f800e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/4bf89334b78a089c6040858ad23f31ea607244b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e110::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:c7:3c:cd:2d:54:cf:9b:d8:c6:ed:39:a4:8b:f8:d8:28:
         46:b6:37:21:f0:1b:f6:11:4c:88:b7:8c:db:e0:c1:2f:88:2c:
         fe:51:f3:49:67:03:89:27:65:77:8d:14:28:8d:a4:43:06:70:
         51:2b:60:24:ef:b6:d6:ed:74:99:56:43:e8:04:b0:28:32:50:
         92:55:4c:cf:b0:7b:7d:11:62:22:e7:04:8d:fc:c3:c1:09:62:
         d0:f0:c7:6c:02:77:9a:46:70:93:70:6f:73:4a:84:ab:76:4a:
         e6:06:27:66:f9:44:12:e0:45:07:f1:c0:32:e2:e9:4a:db:90:
         7e:76:d0:c3:9a:07:56:ad:ca:fd:2a:18:aa:16:9c:94:42:5b:
         e2:fc:82:26:11:16:e2:a1:d5:0e:05:38:ee:f7:5a:dc:99:6e:
         05:74:d0:94:c8:bf:94:e1:40:00:97:4a:c3:a2:ec:04:9b:d8:
         70:64:ea:a4:68:91:e0:9d:cb:79:9d:9b:ce:61:70:56:2b:0d:
         ae:1a:d1:f4:41:38:48:74:89:7f:72:52:81:8b:de:17:a0:71:
         87:1f:ed:57:d0:e0:97:72:0e:aa:c4:bd:d4:f6:e7:f5:a2:8a:
         94:3e:2c:fa:0c:ca:49:ca:60:3f:e0:ae:88:7d:49:f9:0d:86:
         0b:1e:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----