Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/5cbcd2f76c9ac525ca94ee444951b50157ad57d9.roa
File:                     5cbcd2f76c9ac525ca94ee444951b50157ad57d9.roa (raw, json)
Hash identifier:          JC2Ho39/XSDPVv/F394PoVsUeaOFAPTPGEMbaIsOns4=
Subject key identifier:   88:C7:12:24:A5:E4:7C:F7:87:D5:C5:7B:3C:52:47:01:21:13:FB:ED
Certificate issuer:       /CN=88090651a57205ced971272490d218922a3b3701
Certificate serial:       059C02
Authority key identifier: 5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88090651a57205ced971272490d218922a3b3701.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/5cbcd2f76c9ac525ca94ee444951b50157ad57d9.roa
Signing time:             Thu 30 Nov 2023 06:34:09 +0000
ROA not before:           Thu 30 Nov 2023 06:34:09 +0000
ROA not after:            Sun 30 Nov 2025 06:34:09 +0000
asID:                     272928
IP address blocks:        2803:4190::/32 maxlen: 32
                          2803:4190::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367618 (0x59c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88090651a57205ced971272490d218922a3b3701
        Validity
            Not Before: Nov 30 06:34:09 2023 GMT
            Not After : Nov 30 06:34:09 2025 GMT
        Subject: CN=5cbcd2f76c9ac525ca94ee444951b50157ad57d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:cf:02:5e:4e:d2:74:5e:c2:7d:8d:13:c9:
                    5c:ca:7e:28:9d:a4:10:30:69:f5:82:75:da:ed:28:
                    71:57:d5:e0:69:de:3b:40:62:8d:a3:54:a1:5c:4b:
                    5f:8b:c5:cb:a9:71:8d:08:53:58:0a:ab:11:ad:45:
                    40:cb:87:f6:54:39:17:c8:a4:9c:00:2f:85:5d:60:
                    fb:c8:88:e0:26:4f:23:65:28:da:29:de:20:b5:16:
                    03:b1:76:ec:50:92:58:6f:c4:69:15:c6:3f:0d:14:
                    b5:84:df:ff:81:15:0b:3a:19:ca:10:5a:32:0d:fb:
                    45:bc:5e:ad:cc:26:a6:23:a3:71:d7:4f:b8:66:d9:
                    7e:e7:57:0e:01:b4:5b:0a:e8:ab:08:be:a9:f6:d1:
                    fc:f4:e3:b3:14:95:23:13:db:65:02:f4:fc:bf:c0:
                    71:d2:a9:7a:58:a3:9a:a6:fb:2e:4b:99:58:06:c1:
                    5e:4e:e4:29:70:14:47:05:88:29:90:ae:7c:fb:ee:
                    8a:31:5f:b7:bb:57:65:3b:29:0d:34:25:c5:7f:16:
                    bc:6f:cc:3d:66:e1:a9:36:b9:48:36:f7:a9:9b:14:
                    6e:80:3a:cb:d3:5e:03:dd:d9:bf:47:f6:b4:91:e5:
                    91:47:86:4e:75:62:9f:3e:44:95:d0:87:92:52:77:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:12:24:A5:E4:7C:F7:87:D5:C5:7B:3C:52:47:01:21:13:FB:ED
            X509v3 Authority Key Identifier:
                keyid:5F:D1:85:EF:09:B7:44:9D:F3:C2:B1:14:19:F2:45:51:AA:66:83:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88090651a57205ced971272490d218922a3b3701.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/5cbcd2f76c9ac525ca94ee444951b50157ad57d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1c7f68c-afa2-4943-a6e6-a85b8b31689d/88090651a57205ced971272490d218922a3b3701.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4190::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:cb:19:51:87:08:1d:9d:68:ab:34:df:4e:ce:62:2a:3b:
         0a:bb:98:90:5e:18:d2:15:c3:93:52:5c:eb:e5:be:9c:55:42:
         76:d5:c0:44:54:96:9c:20:ec:e0:c5:b8:c3:10:29:57:21:29:
         ee:f7:ca:36:b2:92:72:77:48:da:80:62:ee:e9:0a:87:a9:5b:
         cd:38:9f:2e:4b:a4:e7:9e:b9:f8:18:ee:e5:35:8e:5d:9b:c6:
         21:dd:a8:3c:73:39:43:b7:d8:3f:ac:60:3f:7d:d7:c2:2f:c1:
         7b:80:af:e2:b1:19:da:d9:98:11:7f:56:df:20:73:57:ea:17:
         33:b0:66:e5:b2:c0:df:91:00:98:be:b3:5b:90:22:60:35:fe:
         9b:91:5d:0a:17:15:2e:98:7d:9a:dc:27:93:f7:e0:9e:17:9f:
         9b:e2:60:40:02:31:7f:e2:6c:ee:38:72:94:24:6c:b0:c7:d1:
         a9:4c:60:c2:3f:93:6e:28:8e:ff:ff:4e:f3:15:41:39:38:68:
         53:08:8c:fa:72:a7:f4:5e:36:57:f2:0a:51:c3:92:1a:03:0b:
         42:d5:1f:15:52:5f:4b:f7:66:8c:6c:e0:33:95:19:0d:54:b1:
         55:3f:c6:77:e3:94:40:f7:85:f5:6b:02:81:6c:c8:01:a6:3a:
         47:37:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----