Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5116f19430372e4273c31022def5ae7fbd61aed7.roa
File:                     5116f19430372e4273c31022def5ae7fbd61aed7.roa (raw, json)
Hash identifier:          cA59hF3FJCbspF9WMnsVxjkyBUK5A9S7G1hZnuz/YUc=
Subject key identifier:   DF:33:76:25:56:92:19:DF:B0:58:B3:D8:99:9D:F0:36:48:1F:42:46
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       132CB3
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5116f19430372e4273c31022def5ae7fbd61aed7.roa
Signing time:             Fri 19 May 2023 02:41:39 +0000
ROA not before:           Thu 18 May 2023 02:41:39 +0000
ROA not after:            Mon 19 May 2025 02:41:39 +0000
asID:                     271903
IP address blocks:        2803:5be0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256627 (0x132cb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 02:41:39 2023 GMT
            Not After : May 19 02:41:39 2025 GMT
        Subject: CN=5116f19430372e4273c31022def5ae7fbd61aed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:8f:68:01:0b:db:78:f0:77:96:6d:bc:f0:
                    06:7a:2a:63:b6:71:50:85:3b:31:c9:44:9c:59:e1:
                    bb:0e:10:ff:e7:a4:ba:67:6e:8b:bc:b2:e1:ec:9f:
                    af:11:c5:ed:db:42:12:2d:92:01:45:6b:92:be:b5:
                    d7:72:a1:f9:99:ac:5a:0a:b1:5b:c0:33:eb:de:b4:
                    ad:86:27:50:22:30:dc:0d:80:4f:25:9e:20:d5:da:
                    b9:c4:94:8b:ca:65:bd:bd:f9:3f:7d:5c:c5:af:24:
                    55:e9:7f:88:d3:6a:cd:fd:86:07:09:41:43:83:bf:
                    c7:4f:5b:f7:58:61:6e:8d:f6:21:f6:a6:84:e7:a3:
                    e0:59:67:9d:55:11:c6:9f:b3:29:23:7a:d7:17:0a:
                    26:57:4b:68:12:09:69:8b:eb:a9:b3:ee:37:41:a6:
                    0d:5a:b6:40:db:dc:5a:a5:c6:33:98:b2:00:7b:a7:
                    e5:53:63:70:8d:06:f3:ac:a3:bd:bc:be:3e:a0:98:
                    0c:22:5e:db:fa:ca:bd:d9:a4:61:bb:5f:ca:35:96:
                    55:a5:e5:3e:3b:ad:1b:e9:25:de:cf:c4:ae:97:ee:
                    ad:f7:48:5a:1b:8e:ea:0e:07:93:ee:c2:38:a3:7c:
                    19:7e:c9:32:49:d9:dd:a2:fc:c2:19:f9:c0:99:50:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:33:76:25:56:92:19:DF:B0:58:B3:D8:99:9D:F0:36:48:1F:42:46
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5116f19430372e4273c31022def5ae7fbd61aed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:b7:0b:b7:a7:de:30:ad:23:d6:75:21:b7:8e:92:97:aa:
         0e:1f:82:64:de:c9:9d:03:75:18:d6:18:9e:0c:dd:c1:f7:8e:
         e4:67:00:01:bc:4d:92:c6:61:05:7a:47:03:24:e7:1d:4a:f3:
         3d:c3:ee:c8:2b:2a:59:88:a9:15:a7:91:25:84:f9:d6:8f:08:
         7a:27:85:01:3e:61:93:90:db:3b:e4:93:dd:8e:a2:d1:85:b0:
         09:90:e7:0c:57:fb:65:18:68:ee:67:ee:5a:df:e8:ce:8f:36:
         7d:a5:af:5d:2c:33:18:5e:71:d1:29:b7:81:2d:e1:8d:de:0d:
         6a:d2:aa:ee:37:d4:ac:3e:fc:36:17:72:21:c4:3b:c8:43:87:
         0a:c8:3b:d6:fb:d3:9f:0c:f6:b9:b0:45:63:5d:32:52:70:bc:
         3c:1a:d0:8e:0b:f1:1f:13:57:9a:7a:13:82:ad:e8:1d:a1:8c:
         c6:df:da:8d:35:ad:3b:20:c3:bf:bd:e3:4c:f2:64:c8:c5:d6:
         61:57:43:25:e8:27:e2:eb:7a:f3:f3:05:18:c8:94:b9:6f:e2:
         01:36:62:f7:97:07:6e:bd:66:d3:2d:cf:86:92:36:17:50:e9:
         8e:f3:4c:e8:d6:e3:fd:75:3b:01:0c:e1:f5:77:3e:61:c2:38:
         26:91:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----