Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/5b85426bb5df415c21edcd01791e5e31325efda4.roa
File:                     5b85426bb5df415c21edcd01791e5e31325efda4.roa (raw, json)
Hash identifier:          JpTvDAgnCeSKVsbfW8cIzFWDQlM1EdLXfBRF+Ms40cc=
Subject key identifier:   1E:62:1D:A1:8F:2B:66:9E:58:9D:91:A3:5D:E4:44:F7:6E:CF:53:0E
Certificate issuer:       /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial:       2501E5
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/5b85426bb5df415c21edcd01791e5e31325efda4.roa
Signing time:             Mon 16 Oct 2023 16:02:44 +0000
ROA not before:           Sun 15 Oct 2023 16:02:44 +0000
ROA not after:            Thu 16 Oct 2025 16:02:44 +0000
asID:                     27947
IP address blocks:        2803:c420:2e00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425317 (0x2501e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
        Validity
            Not Before: Oct 15 16:02:44 2023 GMT
            Not After : Oct 16 16:02:44 2025 GMT
        Subject: CN=5b85426bb5df415c21edcd01791e5e31325efda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:1d:26:ab:10:5d:83:d3:11:0f:d7:a0:a3:
                    e1:52:b3:c4:a7:db:1f:ca:fc:cf:e8:e9:7e:b3:d0:
                    b8:df:b6:ab:6e:69:cf:cd:48:6f:2d:52:17:8c:b5:
                    52:23:bf:26:ba:27:9d:75:38:58:20:c1:62:87:30:
                    02:de:d9:21:70:5a:eb:84:6d:01:5a:6d:f0:de:ed:
                    48:b0:81:a7:0e:54:06:5a:dc:32:8a:ba:00:db:48:
                    b5:66:18:85:2d:7e:14:63:65:da:14:eb:3a:65:57:
                    92:a0:0e:de:12:42:39:12:69:2d:32:81:67:d0:53:
                    1e:91:bf:46:8a:99:aa:0d:d2:bd:b2:76:3b:12:e6:
                    c3:a4:54:b4:fb:45:7a:b9:a3:b1:99:cb:b0:e6:bc:
                    30:af:0a:e3:0b:d2:b4:21:21:38:d6:bb:d3:f6:f1:
                    89:5c:62:ff:97:e3:40:2a:7e:f4:38:44:f0:bf:11:
                    b4:f9:ac:82:46:68:fa:c9:ca:0a:60:ef:d7:a7:28:
                    87:86:b7:0a:18:23:be:08:64:ca:2b:13:fe:24:ff:
                    a0:21:ed:0e:11:db:6b:22:45:27:65:9c:f2:2f:41:
                    16:14:d6:d0:5c:f2:09:78:33:0f:eb:18:58:6f:7c:
                    b7:06:95:57:db:20:8d:16:c0:b6:1f:96:c1:eb:0c:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:1D:A1:8F:2B:66:9E:58:9D:91:A3:5D:E4:44:F7:6E:CF:53:0E
            X509v3 Authority Key Identifier:
                keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/5b85426bb5df415c21edcd01791e5e31325efda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c420:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:9a:10:ae:e2:56:19:f8:52:af:92:5d:6d:6c:f3:a1:d7:25:
         86:d5:0e:04:27:bf:f9:47:2b:5a:c5:29:1e:36:12:f1:bf:22:
         f8:d9:ed:e2:7c:c3:7c:10:67:82:32:53:92:57:2b:66:b9:ba:
         32:7a:89:ef:da:ac:7d:23:7e:41:c7:dd:5e:f2:52:f7:2d:f2:
         8f:56:cb:d2:85:b8:ee:4f:46:6a:12:40:be:aa:ab:22:01:dc:
         43:ef:0d:68:cc:f0:00:c5:98:e7:0b:95:b4:d2:07:d0:95:e4:
         5c:cd:aa:77:56:ca:61:84:ca:b2:d5:d9:da:18:09:fd:ea:a4:
         7b:26:3d:e6:32:2e:e3:55:8b:b4:2a:2f:13:89:ed:e8:22:40:
         f4:d2:63:0c:61:b4:48:e8:42:0a:5d:78:8c:5e:db:3b:28:9c:
         a0:ec:b9:50:8d:f6:fc:4c:0d:7f:bc:08:71:26:11:6b:9b:a1:
         cc:73:46:fb:9a:1a:a4:23:d9:61:a0:45:7a:da:6d:e9:c4:c4:
         df:f0:a4:3e:99:d5:8f:eb:d4:ba:28:9b:1c:16:a3:c3:91:fb:
         fc:01:c3:14:8b:86:5a:aa:3b:12:53:88:d9:05:5e:72:52:87:
         e3:4a:25:ed:6d:cc:22:ed:f9:56:47:5e:70:c6:86:eb:6f:54:
         f0:dc:76:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----