Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/a007d21cfc9e3fe174409fb4a72196d80bc32c7a.roa
File:                     a007d21cfc9e3fe174409fb4a72196d80bc32c7a.roa (raw, json)
Hash identifier:          h7B0nWYtSScvdI1Ivu3uVqYBlaYSjX1qwS5cRamkmw4=
Subject key identifier:   41:5A:43:E1:57:B5:7E:50:16:30:6B:4C:35:A0:8D:5C:03:00:D9:88
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       113470
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/a007d21cfc9e3fe174409fb4a72196d80bc32c7a.roa
Signing time:             Tue 09 May 2023 21:01:05 +0000
ROA not before:           Mon 08 May 2023 21:01:04 +0000
ROA not after:            Fri 09 May 2025 21:01:04 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48
                          2803:ea10:2::/48 maxlen: 48
                          2803:ea10:3::/48 maxlen: 48
                          2803:ea10:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127536 (0x113470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: May  8 21:01:04 2023 GMT
            Not After : May  9 21:01:04 2025 GMT
        Subject: CN=a007d21cfc9e3fe174409fb4a72196d80bc32c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:5d:61:cb:d8:95:c9:23:e6:f5:fd:a8:e1:
                    b5:25:ed:e4:c2:99:28:b6:39:a1:62:6d:3e:3a:bf:
                    f9:94:c2:93:8c:8a:2d:3a:bc:b9:b3:91:90:97:77:
                    7b:1e:79:3e:6c:a3:32:43:ef:74:68:f3:57:6d:3c:
                    74:25:a6:27:7e:8c:b8:28:48:a3:4e:41:49:ae:11:
                    a4:87:15:ed:e3:f8:e0:2d:fb:3b:fd:92:6f:f3:9b:
                    87:bf:07:b8:c3:62:a0:39:f1:5b:c4:f7:c7:f6:00:
                    c6:05:4b:a2:79:26:d7:33:b5:6f:53:98:38:56:b3:
                    08:13:80:d9:4d:26:d3:a2:c2:5e:51:31:fc:fb:7c:
                    96:df:c5:f1:d1:83:25:56:cf:88:a0:7e:c5:f7:e8:
                    47:c9:4f:60:4c:b5:26:9e:0e:7c:fa:6d:61:2e:c8:
                    98:43:03:14:69:b3:dc:08:a6:6b:27:6b:21:cb:36:
                    dd:a7:88:d9:64:17:e7:de:1d:e5:66:b3:9e:66:9a:
                    4f:8f:d8:91:10:62:18:35:b3:3c:dc:17:e7:11:76:
                    b5:1d:8c:77:cd:c8:6f:e4:81:a2:db:eb:88:d5:52:
                    72:2d:0e:a3:48:8d:a4:c8:71:b3:fa:09:cb:96:e1:
                    0a:4d:de:43:00:ea:12:21:90:33:6d:f7:3d:51:b7:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:43:E1:57:B5:7E:50:16:30:6B:4C:35:A0:8D:5C:03:00:D9:88
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/a007d21cfc9e3fe174409fb4a72196d80bc32c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:2::-2803:ea10:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:d5:25:4c:15:e8:52:39:40:91:11:4c:f1:57:dc:f0:e5:
         d2:11:6e:61:ef:61:e3:e5:7a:ca:bc:f0:f0:8c:1c:38:8b:56:
         bf:f2:05:c3:94:fa:ec:53:31:0f:3d:b2:82:3b:5d:05:fb:99:
         53:64:d1:22:9f:1e:dc:44:01:18:99:70:63:b8:bf:b3:05:15:
         4c:c9:48:62:6e:45:af:54:a4:22:e2:bc:26:92:46:f6:89:54:
         4f:34:60:f4:ed:30:c1:d6:32:57:fd:13:84:f7:dd:79:99:7b:
         0c:3f:4c:2b:11:14:4e:af:e7:5e:e5:6e:f8:cc:e9:dc:17:c2:
         40:0f:a9:40:9e:e5:2d:4f:67:1d:8b:0d:da:cd:0f:6f:3f:c2:
         f6:7c:ec:0d:84:2a:58:a5:c6:f0:8a:dc:79:20:a7:db:0b:1c:
         af:60:8b:7d:ba:47:2a:b1:5a:79:11:91:82:99:41:c0:81:a3:
         f0:09:cb:6f:4a:54:58:65:d2:93:79:27:c3:e2:ee:e8:ff:37:
         18:28:37:bc:f4:86:dc:60:5f:c1:b3:9d:be:8a:b8:ef:27:2c:
         28:76:ac:f6:8e:98:97:da:21:98:59:97:63:99:df:6e:06:58:
         22:8c:72:c7:17:ad:55:6c:46:0a:74:f8:f8:8e:65:1a:d1:ab:
         85:5e:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----