Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5d5c680ce47a104f042405577816e0e341486f33.roa
File:                     5d5c680ce47a104f042405577816e0e341486f33.roa (raw, json)
Hash identifier:          Wfq9hhcBs9MM/j7Ml2pZNA31SBNlHZbtYc8gaymUapw=
Subject key identifier:   3B:89:94:4D:BD:7D:48:17:10:7C:B1:70:79:F3:C4:D8:8E:78:B0:44
Certificate issuer:       /CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
Certificate serial:       132AF6
Authority key identifier: C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5d5c680ce47a104f042405577816e0e341486f33.roa
Signing time:             Fri 19 May 2023 02:40:23 +0000
ROA not before:           Thu 18 May 2023 02:40:23 +0000
ROA not after:            Mon 19 May 2025 02:40:23 +0000
asID:                     271903
IP address blocks:        2803:5be0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256182 (0x132af6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9358379d5e8a0ab2bac598f60260856dfdc7b034
        Validity
            Not Before: May 18 02:40:23 2023 GMT
            Not After : May 19 02:40:23 2025 GMT
        Subject: CN=5d5c680ce47a104f042405577816e0e341486f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:57:ee:c9:ea:04:76:61:e6:00:d6:86:93:
                    5b:1f:40:81:55:40:15:ee:85:3b:8f:c7:36:96:3f:
                    5f:20:40:ae:ac:f1:25:84:a3:85:94:3c:5d:66:46:
                    7d:23:ff:8a:01:6e:1c:62:e3:66:8c:f1:c2:15:f4:
                    1b:07:b4:2b:b1:d4:03:c8:a3:cd:3b:ad:ac:59:9e:
                    86:c4:99:ec:02:cb:65:51:f4:1a:63:bd:e6:67:5a:
                    dd:81:88:92:3f:89:5f:a0:5a:0b:2c:b7:25:2c:b1:
                    3d:3e:04:89:d8:88:8d:4a:05:85:7b:b0:2b:04:f1:
                    de:82:98:74:e4:fe:f7:28:e6:b1:ad:b4:f4:26:ca:
                    c9:30:4a:2a:95:db:66:ae:d5:fd:71:9a:93:30:5a:
                    e3:a6:e6:0f:79:b7:53:7c:4b:ca:d5:8d:01:e9:0f:
                    c5:df:6e:90:55:a2:3a:e1:98:0a:9e:7d:dd:1c:ac:
                    02:bc:94:9e:af:68:44:53:5b:c7:aa:49:56:23:42:
                    4c:3e:32:3f:df:37:27:79:99:32:5b:cc:c3:40:bf:
                    21:3b:f0:3c:ed:d4:c4:fa:53:7b:af:7b:2c:11:8b:
                    fd:f2:ad:70:76:f0:cd:d1:7e:df:43:64:16:44:57:
                    2a:db:cf:8d:e8:50:17:13:c9:da:d6:5e:16:28:ed:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:94:4D:BD:7D:48:17:10:7C:B1:70:79:F3:C4:D8:8E:78:B0:44
            X509v3 Authority Key Identifier:
                keyid:C6:8A:54:A1:F7:52:47:80:80:50:02:32:23:68:B4:C2:27:CA:53:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9358379d5e8a0ab2bac598f60260856dfdc7b034.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/5d5c680ce47a104f042405577816e0e341486f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbb9fde-9323-49ec-b529-d895a396c9ad/9358379d5e8a0ab2bac598f60260856dfdc7b034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:75:81:c9:d3:16:79:1f:d6:44:5a:14:f7:66:5f:92:3f:
         7d:48:6a:8b:3b:5a:4b:c0:6f:71:9a:9d:ef:29:09:d1:0d:b5:
         52:5a:90:de:60:e9:23:ad:02:0e:68:15:e4:ec:69:65:70:bc:
         46:cb:33:1e:ca:ba:76:ed:fd:8a:13:f0:57:d1:d5:2c:e1:1c:
         85:d7:ff:cd:18:15:96:85:da:ae:80:26:57:c1:b4:32:b3:51:
         06:f9:4f:03:c6:a7:a4:03:ef:2d:04:2d:e1:04:de:4e:36:f1:
         f0:68:bf:cc:4f:2a:75:54:9d:a7:66:23:ee:01:1d:12:95:8a:
         b1:62:02:d7:3c:46:a4:4d:c7:a6:0c:94:2c:2f:e6:8b:db:48:
         2e:dc:49:25:a1:2c:67:74:24:f4:bd:b0:44:2f:b6:cc:24:fe:
         62:22:1b:eb:14:ff:ed:34:a7:44:80:fa:4c:32:35:f7:d1:ca:
         77:5b:c9:c6:a5:e2:cf:8c:50:bf:18:a4:f7:f1:25:4c:f1:12:
         80:75:cc:37:9e:44:15:a8:df:75:f9:8f:2b:34:03:42:7f:7e:
         e5:81:43:1d:4d:12:0b:c0:72:7a:2f:93:26:00:db:bc:48:10:
         1a:e3:97:20:9c:2f:b8:a7:7c:83:fb:ab:5a:54:b0:d0:be:2a:
         bc:ac:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----