Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/e517db1c7ed4b5eeb4dbed38896cdf9f33635131.roa
File:                     e517db1c7ed4b5eeb4dbed38896cdf9f33635131.roa (raw, json)
Hash identifier:          fThZks8560uejJ5lQMiVaIlgTFZ6hxQV80Ce2ah1R5Y=
Subject key identifier:   2B:B5:A4:9F:A5:5A:E3:B1:25:BE:12:1D:BF:CA:DE:F4:33:B8:AA:6B
Certificate issuer:       /CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
Certificate serial:       13D98B
Authority key identifier: 3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/e517db1c7ed4b5eeb4dbed38896cdf9f33635131.roa
Signing time:             Thu 21 Sep 2023 08:30:02 +0000
ROA not before:           Wed 20 Sep 2023 08:30:02 +0000
ROA not after:            Fri 19 Sep 2025 08:30:02 +0000
asID:                     264778
IP address blocks:        2803:b500::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300875 (0x13d98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbfa45db21e97087d6b1789e849e148e8fceaeb
        Validity
            Not Before: Sep 20 08:30:02 2023 GMT
            Not After : Sep 19 08:30:02 2025 GMT
        Subject: CN=e517db1c7ed4b5eeb4dbed38896cdf9f33635131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:aa:ad:6f:5f:d8:92:65:94:39:6f:29:e0:
                    92:44:20:ec:2d:72:dd:5a:e6:d9:65:0e:d2:71:91:
                    e1:6b:61:db:5c:eb:0c:17:5d:30:14:9f:12:3b:9f:
                    a3:d9:9e:73:ba:18:c6:42:27:c2:e9:12:cb:83:3f:
                    fc:bc:1e:7c:d9:6d:86:2f:c3:b7:a8:b4:aa:d8:8e:
                    b0:5f:c1:1b:2a:91:75:52:f3:29:bf:63:ae:c4:ef:
                    c6:0a:cf:a9:03:cb:45:60:be:21:bc:1b:fc:42:0e:
                    a1:78:e1:7c:1b:62:18:4a:ec:ff:87:b1:f9:a9:cb:
                    4a:e5:ae:6b:c5:30:fb:61:ee:76:f7:f2:30:19:bc:
                    e5:fc:1a:89:9d:2b:97:b2:1f:c1:53:88:b5:f0:81:
                    57:df:66:7d:13:96:75:33:5e:ea:0b:ce:55:52:96:
                    57:c8:91:57:3c:4b:4a:d6:fa:9d:62:6d:1b:36:8d:
                    90:ec:d7:6d:4e:fa:f0:f6:fe:7b:81:62:2e:8d:f8:
                    61:8d:ce:e2:0d:ec:6b:ec:14:77:e8:62:e2:c9:f3:
                    e0:81:d6:b2:5f:a8:4d:cc:79:55:b1:a2:8d:9c:97:
                    a1:77:8f:ba:d1:7d:63:b8:b5:db:93:fb:bb:b7:3c:
                    7f:62:17:25:62:c2:d3:e5:5a:82:f3:42:66:d9:79:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:A4:9F:A5:5A:E3:B1:25:BE:12:1D:BF:CA:DE:F4:33:B8:AA:6B
            X509v3 Authority Key Identifier:
                keyid:3C:5C:5F:66:95:B7:9E:F0:B3:84:69:F4:66:61:8F:DA:5B:D4:A7:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fbfa45db21e97087d6b1789e849e148e8fceaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/e517db1c7ed4b5eeb4dbed38896cdf9f33635131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed050c22-96e5-4534-b503-8793bfbfb1c9/9fbfa45db21e97087d6b1789e849e148e8fceaeb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b500::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:e9:eb:41:db:06:94:a8:5a:05:28:74:ab:2c:77:a9:9a:f8:
         d9:0d:b8:6d:79:18:82:3e:0e:49:78:70:8b:0b:90:73:a5:d4:
         32:ef:3c:fd:fe:8b:b4:80:70:2c:4a:c5:a9:fd:13:9d:57:9e:
         01:8e:11:07:18:16:31:d1:01:91:7c:79:09:91:02:b9:c8:71:
         bd:35:12:7c:1b:92:d3:a1:68:c6:04:69:f0:d0:1e:0e:9f:68:
         4a:12:d5:1c:40:0b:08:bf:25:72:3a:24:2c:37:4c:b2:67:97:
         9e:b7:aa:ef:b1:82:f5:3d:b6:da:c7:2e:e9:a3:e5:f5:78:11:
         24:c4:4c:b4:cc:8d:c2:19:26:e0:88:a5:04:6a:bc:e5:c4:f2:
         10:7f:b3:ff:0a:bd:6f:40:87:bf:ca:b7:5e:b8:db:2f:c9:22:
         61:de:95:e6:e7:dd:b2:56:83:4b:67:4f:8f:0f:76:f7:35:4e:
         8b:d1:59:4e:2f:b8:40:44:8d:fd:b7:17:c1:be:94:e0:0c:c5:
         43:0f:2c:8c:38:2f:2c:60:51:38:ad:2f:42:22:83:04:b5:54:
         53:d8:13:fd:13:dc:c0:8b:a0:5c:de:10:2b:fc:40:b1:13:1f:
         ac:33:4a:07:8e:57:c9:97:4a:27:d7:29:67:3d:ce:17:aa:10:
         be:2e:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----