Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/528d0db549f074fe84fa8acc30db9beb5cae74de.roa
File:                     528d0db549f074fe84fa8acc30db9beb5cae74de.roa (raw, json)
Hash identifier:          yF3Qvwwf5qr+6j54GOMBeMxBQTPM5mxoJm18y4YbimU=
Subject key identifier:   29:34:35:D9:2B:52:86:B2:C5:39:B7:A9:A5:25:F7:B3:08:50:7C:64
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       132725
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/528d0db549f074fe84fa8acc30db9beb5cae74de.roa
Signing time:             Fri 19 May 2023 02:39:35 +0000
ROA not before:           Thu 18 May 2023 02:39:35 +0000
ROA not after:            Mon 19 May 2025 02:39:35 +0000
asID:                     271903
IP address blocks:        2803:5be0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255205 (0x132725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 02:39:35 2023 GMT
            Not After : May 19 02:39:35 2025 GMT
        Subject: CN=528d0db549f074fe84fa8acc30db9beb5cae74de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:db:12:32:9d:d4:cf:3b:d8:b9:b3:b4:8e:
                    f2:ae:8c:56:2f:35:53:20:a7:c1:a7:98:e1:a8:02:
                    65:c4:e5:1a:f7:fc:70:1a:ba:9c:e8:2d:88:b3:13:
                    80:8c:54:a7:87:8e:20:9f:d0:d3:6b:84:24:df:89:
                    da:a3:87:f3:44:11:d6:6c:d2:3c:fe:89:57:ad:e4:
                    b7:9a:9c:05:aa:42:1f:e5:bb:93:02:02:f1:2a:e4:
                    42:c4:37:03:b8:98:1b:66:f9:a3:5e:f0:08:46:12:
                    23:42:24:9b:eb:e9:dd:4e:b0:2b:b9:38:23:a0:c4:
                    ba:ea:21:be:b9:f6:41:20:24:85:6f:d0:00:52:02:
                    78:d6:43:b0:57:94:da:3f:cb:6a:df:17:70:93:69:
                    7c:56:e3:a3:96:5a:0f:10:64:3c:bd:6f:92:f2:dd:
                    73:a4:50:0b:5d:e7:d1:8c:8f:2b:de:d3:c7:96:f0:
                    52:cb:11:1f:33:e5:4e:fe:22:7f:b5:3e:2d:8d:f9:
                    2e:8d:a9:3d:7c:72:ce:e7:43:68:ee:83:f5:4e:62:
                    8f:da:d3:75:3d:f9:e0:27:0a:09:c1:7f:6f:a5:0a:
                    37:7a:cc:1e:47:55:af:a6:6b:8e:d5:b8:f5:fc:fb:
                    f4:7b:09:2e:c8:e3:e8:96:b0:26:1b:cb:a6:8d:93:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:35:D9:2B:52:86:B2:C5:39:B7:A9:A5:25:F7:B3:08:50:7C:64
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/528d0db549f074fe84fa8acc30db9beb5cae74de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:62:c9:f9:70:66:e4:f3:e8:51:e6:d3:e2:31:1e:f8:cf:7b:
         e9:8c:dc:90:ad:e9:d0:9f:83:36:a2:31:6a:fb:25:f7:d3:05:
         cb:c7:ee:c0:99:51:f4:c9:b5:80:21:e9:d7:96:1d:a5:09:da:
         ab:b3:35:67:9c:fe:fb:2e:4e:be:6a:35:66:10:97:af:52:8e:
         3f:07:39:8a:0c:71:9a:2a:ed:b0:0c:77:87:68:4a:23:9c:a7:
         ee:c6:99:6b:ec:e2:7f:9c:05:1d:10:a5:2c:2f:73:36:3d:2b:
         c8:ac:4e:76:80:8e:7f:d2:4a:c1:d1:b5:82:ab:c4:d5:59:09:
         db:c1:9e:8d:f2:72:b0:fc:2f:dd:7d:86:04:a4:8c:57:a9:c4:
         8b:43:29:df:33:90:55:24:1c:05:ba:35:1f:a4:8c:f7:b5:1f:
         3d:c5:33:a2:4e:70:d5:b1:2e:b9:06:e1:3b:65:d3:4b:20:6e:
         2b:93:f2:dc:da:d6:7a:a8:98:69:e9:48:28:7d:9c:be:01:86:
         51:e8:63:63:41:93:71:8d:45:7d:d1:5b:54:e0:dc:1d:60:82:
         d6:95:06:3a:58:b2:b4:6e:aa:0d:6a:53:cf:40:03:23:2d:6a:
         83:49:c7:b4:ef:41:a5:97:16:95:51:be:f2:7b:79:ac:dc:42:
         10:31:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----