Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/e0e7415c3d87379381a84e5b0654f6ade7cbe0bf.roa
File:                     e0e7415c3d87379381a84e5b0654f6ade7cbe0bf.roa (raw, json)
Hash identifier:          vytreys2kVwprVE4cWfJdIT4WZ74JJUU5rzKmZO+cD8=
Subject key identifier:   03:BC:0E:8C:F8:79:C9:E0:28:61:0D:F0:AB:9D:AE:5E:F7:5E:B4:3E
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       23537D
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/e0e7415c3d87379381a84e5b0654f6ade7cbe0bf.roa
Signing time:             Sat 08 Jul 2023 05:05:50 +0000
ROA not before:           Fri 07 Jul 2023 05:05:50 +0000
ROA not after:            Tue 08 Jul 2025 05:05:50 +0000
asID:                     61461
IP address blocks:        2803:d700:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315133 (0x23537d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:05:50 2023 GMT
            Not After : Jul  8 05:05:50 2025 GMT
        Subject: CN=e0e7415c3d87379381a84e5b0654f6ade7cbe0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:45:7d:a1:49:a7:6a:ee:2c:66:dc:df:2a:
                    5e:65:8e:ec:be:7a:fc:fb:7e:06:ac:78:8c:6b:46:
                    08:a7:91:45:ad:38:1d:c3:43:f4:ac:2a:13:a2:f7:
                    97:d0:bd:2c:07:ee:3b:b9:41:a1:29:b5:f2:e0:44:
                    c0:63:15:85:d0:b4:cf:06:76:5f:93:f9:3e:bc:16:
                    bf:26:ba:18:bc:e2:b1:f8:1e:ab:0a:d7:8b:98:6e:
                    30:0f:da:b5:06:62:32:bc:6a:58:32:03:3a:77:8b:
                    d9:dd:b4:d1:ba:1a:33:28:3d:ae:23:01:b2:e1:72:
                    bc:8d:c3:be:44:9a:ff:fa:50:aa:ab:c3:09:72:38:
                    c6:6c:fe:5b:42:73:4b:e3:de:00:0b:6f:4d:e4:75:
                    5a:f4:e8:d4:6c:6f:31:e8:cb:85:b0:9b:c9:ca:cf:
                    d7:1a:aa:e8:09:30:0f:c8:c5:0d:6a:e7:f5:d2:93:
                    64:63:63:69:7d:84:56:09:19:30:a7:63:12:76:38:
                    88:e7:9f:63:42:ce:85:42:79:cb:19:55:c5:8c:ad:
                    ed:fb:93:cc:9b:11:03:07:4a:04:5b:19:81:5d:26:
                    23:b7:76:4b:76:ee:70:07:a7:31:9b:67:ea:cf:85:
                    38:0a:b0:e0:d8:66:a4:f0:6c:61:7e:78:42:b6:a4:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:0E:8C:F8:79:C9:E0:28:61:0D:F0:AB:9D:AE:5E:F7:5E:B4:3E
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/e0e7415c3d87379381a84e5b0654f6ade7cbe0bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:49:a7:47:5f:e9:24:e5:9f:55:99:ba:1d:d8:bd:90:3d:2c:
         aa:f2:8d:80:be:c5:ff:00:f8:e5:de:47:63:a4:a6:a3:c6:9c:
         17:92:6c:42:63:5e:6d:d1:31:38:06:d4:f6:3d:ae:28:c2:e0:
         f9:35:8a:b4:c7:fa:9f:d2:f6:84:9f:fe:73:39:22:a0:22:f6:
         7e:04:0b:fc:2c:03:3c:62:c8:54:56:f1:5a:b2:d3:16:1a:3e:
         7c:95:9d:77:8b:37:7e:d9:d9:1b:2a:6c:09:c5:d9:1a:64:0b:
         6d:68:fb:69:0c:1c:75:1e:e7:5c:29:df:77:e6:44:42:65:9d:
         f0:75:4a:35:19:ab:17:6e:dd:50:2e:8b:9e:aa:3b:50:b3:97:
         8f:5e:77:e7:32:12:ea:99:81:fa:4d:b1:3b:90:18:cd:07:d8:
         8b:1b:15:23:18:71:df:24:b6:5e:b0:f0:bf:b6:c9:29:a2:c5:
         ba:e0:89:08:46:3d:f9:87:cf:2b:c7:84:58:41:6d:f6:d8:f9:
         dd:d7:f0:a5:93:21:b5:ed:85:6a:d4:b7:cf:a0:62:be:36:bd:
         23:2a:14:5a:71:82:f1:e0:93:f0:2d:25:cd:dc:aa:2a:f4:89:
         4c:59:75:91:53:24:e1:b9:7f:18:8b:40:06:77:99:70:18:83:
         f0:3a:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----