Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/f40a319953e0f18907810cef3e12622180014f72.roa
File:                     f40a319953e0f18907810cef3e12622180014f72.roa (raw, json)
Hash identifier:          9FMR2WAGA8Cpn6HCmPixKlJUBS7I6H9UYDXI+8SW5wg=
Subject key identifier:   18:E9:BD:F1:F1:90:AC:2A:D7:C8:91:1A:3A:C9:22:EB:EA:81:6F:97
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       383C
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/f40a319953e0f18907810cef3e12622180014f72.roa
Signing time:             Tue 12 Sep 2023 16:40:42 +0000
ROA not before:           Mon 11 Sep 2023 16:40:42 +0000
ROA not after:            Fri 12 Sep 2025 16:40:42 +0000
asID:                     273072
IP address blocks:        2803:cf90:400::/40 maxlen: 48
                          2803:cf90:500::/40 maxlen: 48
                          2803:cf90:600::/40 maxlen: 48
                          2803:cf90:700::/40 maxlen: 48
                          2803:cf90:800::/40 maxlen: 48
                          2803:cf90:900::/40 maxlen: 48
                          2803:cf90:a00::/40 maxlen: 48
                          2803:cf90:b00::/40 maxlen: 48
                          2803:cf90:c00::/40 maxlen: 48
                          2803:cf90:d00::/40 maxlen: 48
                          2803:cf90:e00::/40 maxlen: 48
                          2803:cf90:f00::/40 maxlen: 48
                          2803:cf90:1000::/40 maxlen: 48
                          2803:cf90:1100::/40 maxlen: 48
                          2803:cf90:1200::/40 maxlen: 48
                          2803:cf90:1300::/40 maxlen: 48
                          2803:cf90:1400::/40 maxlen: 48
                          2803:cf90:1500::/40 maxlen: 48
                          2803:cf90:1600::/40 maxlen: 48
                          2803:cf90:1700::/40 maxlen: 48
                          2803:cf90:1800::/40 maxlen: 48
                          2803:cf90:1900::/40 maxlen: 48
                          2803:cf90:1a00::/40 maxlen: 48
                          2803:cf90:1b00::/40 maxlen: 48
                          2803:cf90:1c00::/40 maxlen: 48
                          2803:cf90:1d00::/40 maxlen: 48
                          2803:cf90:1e00::/40 maxlen: 48
                          2803:cf90:1f00::/40 maxlen: 48
                          2803:cf90:2000::/40 maxlen: 48
                          2803:cf90:2100::/40 maxlen: 48
                          2803:cf90:2200::/40 maxlen: 48
                          2803:cf90:2300::/40 maxlen: 48
                          2803:cf90:2400::/40 maxlen: 48
                          2803:cf90:2500::/40 maxlen: 48
                          2803:cf90:2600::/40 maxlen: 48
                          2803:cf90:2700::/40 maxlen: 48
                          2803:cf90:2800::/40 maxlen: 48
                          2803:cf90:2900::/40 maxlen: 48
                          2803:cf90:2a00::/40 maxlen: 48
                          2803:cf90:2b00::/40 maxlen: 48
                          2803:cf90:2c00::/40 maxlen: 48
                          2803:cf90:2d00::/40 maxlen: 48
                          2803:cf90:2e00::/40 maxlen: 48
                          2803:cf90:2f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14396 (0x383c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Sep 11 16:40:42 2023 GMT
            Not After : Sep 12 16:40:42 2025 GMT
        Subject: CN=f40a319953e0f18907810cef3e12622180014f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:85:05:72:65:60:00:ea:4c:ce:d1:5f:9a:
                    d5:b6:7c:1d:23:f3:7d:5d:9d:7d:de:fb:10:0e:ba:
                    fe:2a:49:e8:54:b1:19:ff:15:f4:f5:d2:15:33:5c:
                    a1:50:9e:90:df:4e:fd:85:ae:c8:90:09:9b:e8:d9:
                    d4:c0:02:e5:66:00:a8:25:8f:f2:be:58:87:a2:b0:
                    c6:44:5e:6e:f4:d2:3f:fb:02:80:49:3a:43:fd:d3:
                    d2:94:a3:13:9d:fe:a0:2e:b0:7f:73:b8:c7:9e:74:
                    e9:07:a8:1a:db:28:83:42:c7:98:56:a3:13:17:e8:
                    f2:9a:fc:a1:94:c0:0f:6a:f2:a8:3f:e0:f1:59:4b:
                    5c:81:88:a6:76:e0:0f:2f:2e:20:a7:90:ce:af:fc:
                    b5:cf:d3:33:d3:bb:2e:b6:29:8d:4f:57:60:9a:96:
                    ba:3f:d9:17:df:64:2c:57:84:79:5d:a4:8a:38:4c:
                    12:9c:34:ce:31:a5:ca:d7:e2:46:4d:8c:4f:9c:86:
                    1e:f7:96:bd:7d:4b:6a:c4:cc:d4:dc:92:8b:10:0f:
                    8c:cd:7c:69:e1:5d:4a:43:44:75:81:2b:27:6f:01:
                    8a:26:ef:fc:c6:04:de:61:b3:b9:ae:e9:75:ed:65:
                    6a:df:65:b0:ae:72:b9:6a:aa:83:22:92:db:58:58:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:BD:F1:F1:90:AC:2A:D7:C8:91:1A:3A:C9:22:EB:EA:81:6F:97
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/f40a319953e0f18907810cef3e12622180014f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:400::-2803:cf90:2fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         65:2d:50:84:15:2f:e3:1a:87:6b:12:a8:0f:70:5e:bb:ec:4f:
         52:89:f7:3d:94:9a:e8:9b:26:fc:cd:2b:f8:3e:f0:2b:a2:c4:
         42:37:9e:75:83:c4:8b:44:7b:e5:2b:65:85:36:31:51:e5:85:
         2d:38:2d:69:f3:d7:48:5f:a8:c4:4c:5e:2a:7c:b3:8a:19:14:
         dd:b5:21:ee:85:a6:aa:59:14:a8:fe:3e:bc:6e:1d:ab:f4:23:
         2e:0a:e2:c7:e8:d8:5f:f5:1f:22:15:8b:6c:b1:cf:c8:68:28:
         93:a3:d1:a8:d6:68:61:2e:44:16:f2:ce:a1:3e:63:d1:73:a6:
         6e:86:b8:48:ea:77:a0:a5:e6:20:79:dd:ec:24:d2:4c:2f:d4:
         c0:e1:24:1e:a5:8c:48:e2:bf:91:51:cb:06:06:63:83:5d:ae:
         2b:b1:36:8c:6a:19:14:8b:65:f6:46:b6:ad:68:7a:53:da:6e:
         a6:da:28:5f:2a:93:b5:3f:d3:ae:65:a4:48:bd:7b:ac:08:c2:
         bf:bf:8f:9a:4e:7b:61:69:90:ab:1c:fc:d8:97:cf:2b:33:5c:
         d9:54:d0:17:de:5c:51:99:47:d9:ea:c6:42:ad:33:37:4f:83:
         6c:4e:3d:c6:df:48:55:04:61:09:5a:03:b6:53:39:9a:c3:26:
         9c:74:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----