Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/4cf83af96a20bec7a0f4a0e6d36e22c752962cfa.roa
File:                     4cf83af96a20bec7a0f4a0e6d36e22c752962cfa.roa (raw, json)
Hash identifier:          jV0/zlGuXz9WpItDvm7VmepnZHnBTOWoeYr8b9f+YEs=
Subject key identifier:   18:85:7F:91:57:DC:66:FC:BF:55:82:FC:BE:DF:92:43:0E:32:31:E4
Certificate issuer:       /CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
Certificate serial:       23C072
Authority key identifier: FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/4cf83af96a20bec7a0f4a0e6d36e22c752962cfa.roa
Signing time:             Fri 20 Oct 2023 16:08:14 +0000
ROA not before:           Fri 20 Oct 2023 16:08:14 +0000
ROA not after:            Mon 20 Oct 2025 16:08:14 +0000
asID:                     269838
IP address blocks:        2803:3920::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343026 (0x23c072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
        Validity
            Not Before: Oct 20 16:08:14 2023 GMT
            Not After : Oct 20 16:08:14 2025 GMT
        Subject: CN=4cf83af96a20bec7a0f4a0e6d36e22c752962cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:6f:d3:d6:c2:49:39:78:37:d7:2c:4b:ee:
                    4e:58:35:d6:7e:ab:b2:0b:25:ed:80:90:b7:51:73:
                    be:21:fd:da:90:db:4e:c2:55:3c:cb:82:d1:5b:5e:
                    46:6f:52:e9:2a:2d:30:f6:4c:00:42:b0:f8:e0:ce:
                    4b:71:89:81:c1:de:47:bd:75:8b:ca:e3:b1:36:3c:
                    cc:f1:98:b9:d3:65:79:bd:e6:92:48:8d:5f:2e:f4:
                    8f:91:80:45:45:56:68:ad:4d:23:3b:d0:4c:33:81:
                    fc:be:7c:d7:95:63:1a:e5:26:4f:95:f8:9a:ed:b4:
                    32:22:8b:0c:1d:4f:da:ac:33:2c:d2:d8:07:57:f0:
                    68:d3:2c:11:da:8d:79:22:58:79:43:e1:2f:e1:2a:
                    36:06:87:65:62:66:86:ee:01:a4:1b:2c:02:52:0c:
                    c9:bd:56:05:52:f4:7c:88:46:c8:7b:76:c5:09:cf:
                    a5:a6:86:3e:60:fb:b7:4e:d1:7e:29:74:00:0b:90:
                    c5:ca:4a:77:95:28:f4:f3:d8:e0:f5:a7:a5:35:1d:
                    2b:cc:9a:53:7b:46:e6:12:6d:25:7e:3f:25:f8:f3:
                    9d:9d:f4:3a:08:b9:98:5c:03:08:75:e6:6f:7c:3f:
                    d8:41:23:8f:87:3b:ab:60:5b:5e:2d:f8:c0:b5:ad:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:85:7F:91:57:DC:66:FC:BF:55:82:FC:BE:DF:92:43:0E:32:31:E4
            X509v3 Authority Key Identifier:
                keyid:FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/4cf83af96a20bec7a0f4a0e6d36e22c752962cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3920::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:d5:6b:09:90:79:74:2e:b0:75:66:c4:d8:b3:a2:23:64:
         f7:87:dc:1f:7d:b1:50:42:3f:ea:7b:c3:8d:19:6f:67:a7:4b:
         f1:59:8c:51:97:52:5f:ee:7e:0c:3f:1b:c3:96:18:34:77:56:
         1b:e2:15:91:bc:fa:5f:7f:07:6f:f3:58:bc:0a:ac:cf:42:ff:
         cd:6d:6c:cb:e1:a0:9c:e0:18:32:63:24:4f:af:35:72:c6:70:
         b9:00:25:56:a6:d4:31:62:43:4e:68:44:f5:ad:fb:52:a8:5b:
         a4:4c:fc:1b:6b:be:72:92:40:6a:bb:50:15:50:30:a5:92:59:
         b5:17:88:12:ea:a8:8f:ff:9a:7c:8b:79:92:d4:6c:5a:10:c7:
         53:cc:12:ae:b9:9d:bb:f7:e1:85:48:54:d3:74:f8:a3:60:3b:
         ed:b6:44:3a:b9:62:7c:fb:61:60:b4:92:71:c5:4a:c8:b9:90:
         3e:e4:10:48:56:24:2d:f7:48:3a:c1:9f:36:12:2b:5b:55:bb:
         1a:1b:40:d5:b9:83:6b:ab:a3:45:06:19:72:65:24:cc:43:96:
         9e:73:b6:bd:84:db:00:2b:30:c1:b8:5c:d9:38:b7:89:50:77:
         7c:8e:43:33:45:11:2b:aa:13:4a:b7:80:23:9b:7c:fc:86:4f:
         e2:7b:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----