Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/bb6e97c5edf5689e03cb31ff793b83815c426499.roa
File:                     bb6e97c5edf5689e03cb31ff793b83815c426499.roa (raw, json)
Hash identifier:          1ihxRJJxVf9i/rZJ3MHaTglkJFkdgP8O05eytK4lDAc=
Subject key identifier:   C6:1F:13:D9:6E:B6:36:ED:85:27:8E:F6:2E:A5:0C:AD:4E:D6:46:F0
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       3CC0
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/bb6e97c5edf5689e03cb31ff793b83815c426499.roa
Signing time:             Tue 12 Sep 2023 16:42:15 +0000
ROA not before:           Mon 11 Sep 2023 16:42:15 +0000
ROA not after:            Fri 12 Sep 2025 16:42:15 +0000
asID:                     273072
IP address blocks:        2803:cf90:3000::/40 maxlen: 48
                          2803:cf90:3100::/40 maxlen: 48
                          2803:cf90:3200::/40 maxlen: 48
                          2803:cf90:3300::/40 maxlen: 48
                          2803:cf90:3400::/40 maxlen: 48
                          2803:cf90:3500::/40 maxlen: 48
                          2803:cf90:3600::/40 maxlen: 48
                          2803:cf90:3700::/40 maxlen: 48
                          2803:cf90:3800::/40 maxlen: 48
                          2803:cf90:3900::/40 maxlen: 48
                          2803:cf90:3a00::/40 maxlen: 48
                          2803:cf90:3b00::/40 maxlen: 48
                          2803:cf90:3c00::/40 maxlen: 48
                          2803:cf90:3d00::/40 maxlen: 48
                          2803:cf90:3e00::/40 maxlen: 48
                          2803:cf90:3f00::/40 maxlen: 48
                          2803:cf90:4000::/40 maxlen: 48
                          2803:cf90:4100::/40 maxlen: 48
                          2803:cf90:4200::/40 maxlen: 48
                          2803:cf90:4300::/40 maxlen: 48
                          2803:cf90:4400::/40 maxlen: 48
                          2803:cf90:4500::/40 maxlen: 48
                          2803:cf90:4600::/40 maxlen: 48
                          2803:cf90:4700::/40 maxlen: 48
                          2803:cf90:4800::/40 maxlen: 48
                          2803:cf90:4900::/40 maxlen: 48
                          2803:cf90:4a00::/40 maxlen: 48
                          2803:cf90:4b00::/40 maxlen: 48
                          2803:cf90:4c00::/40 maxlen: 48
                          2803:cf90:4d00::/40 maxlen: 48
                          2803:cf90:4e00::/40 maxlen: 48
                          2803:cf90:4f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15552 (0x3cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Sep 11 16:42:15 2023 GMT
            Not After : Sep 12 16:42:15 2025 GMT
        Subject: CN=bb6e97c5edf5689e03cb31ff793b83815c426499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:5d:93:3e:76:e9:d6:65:bd:4c:07:6d:9e:
                    7d:40:04:a1:65:ed:b9:8e:e8:d2:c9:12:74:83:a6:
                    cb:13:af:b4:a0:b9:f0:1f:34:f5:3f:f5:cd:05:c1:
                    9a:d4:06:74:98:0f:f1:8c:fb:0f:fa:99:d9:a1:69:
                    78:11:62:34:dc:de:99:07:d5:f7:6b:55:57:65:dd:
                    c1:b0:7b:55:d7:4d:8e:b9:dd:1c:ca:31:b1:67:46:
                    9b:ed:7d:d6:f5:70:3a:e9:be:61:12:27:59:e5:df:
                    c0:39:68:70:44:49:5f:53:30:8b:24:27:47:02:07:
                    37:d3:5d:e2:0c:fa:8e:79:1a:01:24:c4:fe:99:c9:
                    ed:2c:4e:ae:e0:b0:f5:cd:53:dd:68:8a:e2:d7:75:
                    b4:fe:f5:67:94:f9:00:81:c5:59:be:50:79:e2:d6:
                    34:8a:64:8f:3d:34:9f:aa:cf:01:ea:ae:23:60:36:
                    a2:01:d5:71:f6:92:93:cb:22:fa:f5:c5:97:f7:42:
                    e7:e3:0d:f9:0f:b1:de:16:2d:32:d4:24:33:05:98:
                    6d:ec:a5:58:06:eb:74:1e:5f:16:37:90:9d:31:4f:
                    ad:10:e1:93:0f:43:7e:dd:93:89:23:01:05:80:f2:
                    44:e4:98:91:f7:9a:d8:f1:02:9f:6f:a8:84:2f:40:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1F:13:D9:6E:B6:36:ED:85:27:8E:F6:2E:A5:0C:AD:4E:D6:46:F0
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/bb6e97c5edf5689e03cb31ff793b83815c426499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:3000::-2803:cf90:4fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:d9:ea:b8:03:19:be:8b:b8:0c:34:bb:df:5a:0e:77:56:
         64:5a:77:8d:de:55:10:7d:7c:63:36:37:94:6c:d7:fb:f2:6d:
         de:7c:35:5a:4c:4b:b2:7d:1f:ef:75:04:dc:c6:43:88:29:27:
         23:3b:b8:22:67:a0:ae:0f:6f:f6:11:f2:67:e3:4e:84:3c:b6:
         b3:a4:64:64:e7:22:f4:83:fa:02:8d:f1:85:53:71:9b:57:27:
         de:43:9c:e6:6b:bf:ed:73:63:7e:60:08:8f:28:4a:df:b9:e7:
         c9:a4:e8:7b:7b:e4:c2:de:b6:7e:25:aa:89:e1:25:94:e0:51:
         fc:11:d2:2e:e6:eb:bd:97:bc:29:97:bc:fe:cf:5d:66:83:22:
         46:0e:de:6c:7e:d5:ab:b9:2d:ef:05:50:47:98:8d:79:6c:61:
         79:2c:e3:52:0f:5e:fd:6f:57:ba:60:d2:f3:d6:d3:c5:58:1b:
         e0:f9:f4:f5:df:18:02:6d:1c:6d:5f:44:36:3d:41:77:f0:be:
         8c:e1:ab:5c:75:ec:a5:b8:ce:77:38:5b:d3:a9:46:44:c5:bf:
         cd:e1:dc:f5:44:95:80:d5:ac:be:93:35:56:a4:06:aa:6c:aa:
         89:b8:d8:e4:59:02:6e:84:21:3a:a5:5f:8d:ae:9a:c8:31:c6:
         e9:db:a0:67
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICPMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDcx
YjA2YTkzZmYyMzg4MDFjZTZjOGI0MTg2OTc3Y2VkNDlmMDlmMDAeFw0yMzA5MTEx
NjQyMTVaFw0yNTA5MTIxNjQyMTVaMDMxMTAvBgNVBAMTKGJiNmU5N2M1ZWRmNTY4
OWUwM2NiMzFmZjc5M2I4MzgxNWM0MjY0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFcF2TPnbp1mW9TAdtnn1ABKFl7bmO6NLJEnSDpssTr7SgufAf
NPU/9c0FwZrUBnSYD/GM+w/6mdmhaXgRYjTc3pkH1fdrVVdl3cGwe1XXTY653RzK
MbFnRpvtfdb1cDrpvmESJ1nl38A5aHBESV9TMIskJ0cCBzfTXeIM+o55GgEkxP6Z
ye0sTq7gsPXNU91oiuLXdbT+9WeU+QCBxVm+UHni1jSKZI89NJ+qzwHqriNgNqIB
1XH2kpPLIvr1xZf3QufjDfkPsd4WLTLUJDMFmG3spVgG63QeXxY3kJ0xT60Q4ZMP
Q37dk4kjAQWA8kTkmJH3mtjxAp9vqIQvQD4bAgMBAAGjggJnMIICYzAdBgNVHQ4E
FgQUxh8T2W62Nu2FJ472LqUMrU7WRvAwHwYDVR0jBBgwFoAUfiOZC8BIOjpOjvGS
BA9+CMEnaGQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80NzFiMDZh
OTNmZjIzODgwMWNlNmM4YjQxODY5NzdjZWQ0OWYwOWYwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wNzYzYmRmYi1hYzE5LTQwZWYtOGZiNC0wZTRmNDQ1
NmEwOWUvYmI2ZTk3YzVlZGY1Njg5ZTAzY2IzMWZmNzkzYjgzODE1YzQyNjQ5OS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzA3NjNiZGZiLWFjMTktNDBlZi04ZmI0LTBlNGY0
NDU2YTA5ZS80NzFiMDZhOTNmZjIzODgwMWNlNmM4YjQxODY5NzdjZWQ0OWYwOWYw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBww
GjAYBAIAAjASMBADBgQoA8+QMAMGBCgDz5BAMA0GCSqGSIb3DQEBCwUAA4IBAQB+
tdnquAMZvou4DDS731oOd1ZkWneN3lUQfXxjNjeUbNf78m3efDVaTEuyfR/vdQTc
xkOIKScjO7giZ6CuD2/2EfJn406EPLazpGRk5yL0g/oCjfGFU3GbVyfeQ5zma7/t
c2N+YAiPKErfuefJpOh7e+TC3rZ+JaqJ4SWU4FH8EdIu5uu9l7wpl7z+z11mgyJG
Dt5sftWruS3vBVBHmI15bGF5LONSD179b1e6YNLz1tPFWBvg+fT13xgCbRxtX0Q2
PUF38L6M4atcdeyluM53OFvTqUZExb/N4dz1RJWA1ay+kzVWpAaqbKqJuNjkWQJu
hCE6pV+NrprIMcbp26Bn
-----END CERTIFICATE-----