Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/57e1a26619cc2622baf40db066aa6fe8c3cd989d.roa
File:                     57e1a26619cc2622baf40db066aa6fe8c3cd989d.roa (raw, json)
Hash identifier:          RFrN+pCxcvUKF4x8K5wLXnaQ/0nh+oVRJ1DsPr2yP2w=
Subject key identifier:   22:B2:66:C8:AD:72:9B:B1:DF:CC:84:3C:42:EF:2E:13:75:33:39:32
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       133709
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/57e1a26619cc2622baf40db066aa6fe8c3cd989d.roa
Signing time:             Fri 19 May 2023 02:43:08 +0000
ROA not before:           Thu 18 May 2023 02:43:08 +0000
ROA not after:            Mon 19 May 2025 02:43:08 +0000
asID:                     271903
IP address blocks:        2803:5be0:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259273 (0x133709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 02:43:08 2023 GMT
            Not After : May 19 02:43:08 2025 GMT
        Subject: CN=57e1a26619cc2622baf40db066aa6fe8c3cd989d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:b6:42:89:ec:5d:73:4a:42:5a:9d:f1:6a:
                    c1:26:25:77:d4:e8:0f:f6:27:8d:dc:13:c1:99:13:
                    0a:e9:2b:b9:1c:d0:f7:bf:e7:02:98:7e:e4:07:a6:
                    7e:8f:72:e3:fd:97:18:19:ed:c6:c0:61:b5:e7:87:
                    72:43:9a:01:c2:1a:0f:d4:8f:69:e7:95:78:07:b5:
                    5d:d4:74:7a:a9:d6:df:fa:17:fd:8e:f9:82:a0:d7:
                    25:e5:60:88:8e:ab:69:16:43:d0:ea:19:26:34:27:
                    1a:1d:f1:ed:a4:e1:5c:51:06:0a:93:3d:3f:b5:a3:
                    b6:8e:d6:c4:9a:98:66:a3:46:ba:68:93:ef:d6:c2:
                    36:2c:69:0e:76:aa:10:7b:af:ad:eb:05:d2:7b:32:
                    77:91:9b:73:15:9d:84:70:85:34:dd:e0:36:0b:c3:
                    32:93:54:99:20:92:4c:28:8c:79:22:44:7a:47:38:
                    94:53:3b:4e:d6:7f:55:4d:ba:0a:a1:e9:82:3f:5f:
                    af:ce:76:dd:35:bc:a1:c4:67:83:90:26:68:48:f9:
                    dc:45:72:09:75:c5:8b:d4:81:5e:c2:0e:c2:c3:41:
                    b6:23:d7:2c:01:0d:49:f4:13:78:62:41:52:b0:21:
                    ea:f8:b7:10:0f:44:62:35:67:2b:a4:a4:c9:01:63:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B2:66:C8:AD:72:9B:B1:DF:CC:84:3C:42:EF:2E:13:75:33:39:32
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/57e1a26619cc2622baf40db066aa6fe8c3cd989d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:15:df:99:25:c6:4f:5b:98:28:be:d8:8d:55:a6:b2:6b:da:
         ae:77:4c:0c:e1:5c:05:19:e6:b5:0c:fd:06:4d:2c:76:1a:2f:
         89:30:04:ae:6a:7e:30:cc:99:e9:7a:2e:84:e4:54:ee:e2:85:
         3e:52:ac:9f:1d:f3:cc:fd:4f:de:a4:60:49:e3:d4:e6:12:9a:
         9f:cf:a9:e6:b5:b1:cb:c8:e5:3d:df:9c:a1:85:d2:68:04:3d:
         63:e5:68:94:65:c0:c0:07:c3:8e:dd:6e:07:81:d7:b1:8f:c4:
         65:4a:23:b5:15:d8:c3:fe:cc:74:e9:da:fc:a5:bc:27:c0:e7:
         66:1c:6c:44:27:0d:48:b8:18:a4:c1:0a:87:1d:89:71:69:74:
         84:ec:69:d0:5f:5f:f3:c2:bc:45:7a:3c:75:5e:ed:91:24:57:
         f7:9f:46:be:12:1b:69:47:03:22:0b:59:29:79:32:bb:10:49:
         f2:7c:21:48:1b:35:6f:10:60:91:4e:1b:77:7b:84:ea:40:71:
         36:a6:ba:a0:39:25:42:d9:08:a3:62:b1:84:27:3f:24:15:a8:
         25:01:66:0d:74:2c:85:b0:d3:60:76:81:18:c6:ec:00:8d:83:
         3a:f4:f0:dd:3b:d4:51:94:de:9f:dd:94:88:78:a8:7a:c7:22:
         1c:61:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----