Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/8e46f74c2a5204675b48440fdb67f8ca710ba942.roa
File:                     8e46f74c2a5204675b48440fdb67f8ca710ba942.roa (raw, json)
Hash identifier:          4JUN0tK6Qbdruec3/z8Z+GjtDfnFxLxxIpUTES00KUY=
Subject key identifier:   84:E3:86:9C:4D:81:3B:B5:ED:9F:FC:A3:30:CA:01:0A:AD:97:F8:C3
Certificate issuer:       /CN=d87cacea641658717abecb35689ebe8932f40ead
Certificate serial:       0B6388
Authority key identifier: 50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/8e46f74c2a5204675b48440fdb67f8ca710ba942.roa
Signing time:             Sat 29 Jul 2023 18:21:32 +0000
ROA not before:           Fri 28 Jul 2023 18:21:32 +0000
ROA not after:            Tue 29 Jul 2025 18:21:32 +0000
asID:                     267796
IP address blocks:        2803:5fa0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746376 (0xb6388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87cacea641658717abecb35689ebe8932f40ead
        Validity
            Not Before: Jul 28 18:21:32 2023 GMT
            Not After : Jul 29 18:21:32 2025 GMT
        Subject: CN=8e46f74c2a5204675b48440fdb67f8ca710ba942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:0e:c6:e3:93:08:e7:60:28:03:62:df:e6:
                    81:e8:8a:a8:23:34:ff:86:b3:36:64:8f:78:53:95:
                    a0:7f:78:72:77:26:de:c7:ee:f6:e3:69:cb:e9:c1:
                    1d:d0:0f:48:29:95:96:3c:dc:d4:b1:27:26:b6:3c:
                    29:33:1b:71:85:c8:d3:f6:c7:32:e0:68:f2:84:45:
                    ab:d4:64:c9:fb:04:1b:a4:06:28:75:ef:c4:b5:3c:
                    64:d4:4a:2f:5b:e2:eb:7c:6a:56:18:b8:88:d6:c4:
                    31:2f:77:09:42:30:83:fd:20:72:51:28:93:59:f8:
                    01:83:ec:68:2f:dd:d7:d2:5f:ab:15:58:c7:94:c5:
                    0a:a5:b2:eb:8a:86:f6:93:61:a6:ae:9d:17:29:13:
                    f2:5c:dd:15:28:2b:7f:35:2e:b1:63:09:13:44:d7:
                    1d:24:a4:33:4f:66:c4:56:ad:00:32:ea:b0:61:2c:
                    f5:1a:40:09:4c:9f:36:78:f4:84:86:63:ea:74:5d:
                    fc:8b:06:38:22:94:49:0e:88:09:3d:a6:f2:d8:c3:
                    6b:37:b8:22:3a:b1:ca:ed:a1:14:56:d2:f0:a8:c5:
                    54:80:9e:59:3f:1c:51:c4:e3:fd:dd:d7:4d:bf:ee:
                    35:c0:3e:77:ca:64:fc:79:e1:53:af:28:1b:83:29:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:86:9C:4D:81:3B:B5:ED:9F:FC:A3:30:CA:01:0A:AD:97:F8:C3
            X509v3 Authority Key Identifier:
                keyid:50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/8e46f74c2a5204675b48440fdb67f8ca710ba942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:87:72:9e:0b:6b:8d:6a:fe:e6:07:b2:83:ae:24:6a:0d:
         f3:73:21:95:0a:29:32:5d:be:94:90:0d:ee:80:40:63:73:96:
         db:22:ab:01:63:cf:96:fc:06:62:d9:33:cb:57:66:8a:90:a6:
         ad:6e:6a:1d:97:49:ad:b7:4d:69:70:47:fd:ec:46:74:a3:5d:
         0c:8e:eb:af:d8:2f:2e:5e:d1:ad:91:12:31:2f:78:d5:a4:06:
         a7:f4:9e:c6:7a:88:3c:d7:dc:dc:85:ee:ad:5c:e2:f9:e8:a9:
         3d:fd:67:9d:1d:89:21:16:76:60:c6:b2:e1:d6:57:7f:de:9d:
         55:2e:59:b2:a3:cd:3c:2e:b1:0f:b6:c9:d6:d4:89:68:35:d0:
         0d:c8:3c:db:cd:fd:3f:6a:ba:33:e5:a5:fa:6c:fa:e6:f8:78:
         4c:a7:d3:9e:ac:7e:dc:ad:74:7c:5d:8d:1b:a9:71:cd:57:74:
         fb:df:6c:51:8e:f7:97:b8:a4:0e:05:4e:25:3a:59:92:73:b3:
         c2:23:8d:ae:83:7e:67:af:73:d4:74:bb:24:72:50:91:a5:38:
         3b:46:f3:cd:8b:15:4c:0b:b6:a4:d7:fe:41:9b:05:f7:fb:a3:
         77:2f:9c:82:4e:39:be:44:5e:0c:30:d8:8f:e0:c5:90:27:03:
         f4:6d:98:ea
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDC2OIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
N2NhY2VhNjQxNjU4NzE3YWJlY2IzNTY4OWViZTg5MzJmNDBlYWQwHhcNMjMwNzI4
MTgyMTMyWhcNMjUwNzI5MTgyMTMyWjAzMTEwLwYDVQQDEyg4ZTQ2Zjc0YzJhNTIw
NDY3NWI0ODQ0MGZkYjY3ZjhjYTcxMGJhOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhDcOxuOTCOdgKANi3+aB6IqoIzT/hrM2ZI94U5Wgf3hydybe
x+7242nL6cEd0A9IKZWWPNzUsScmtjwpMxtxhcjT9scy4GjyhEWr1GTJ+wQbpAYo
de/EtTxk1EovW+LrfGpWGLiI1sQxL3cJQjCD/SByUSiTWfgBg+xoL93X0l+rFVjH
lMUKpbLriob2k2Gmrp0XKRPyXN0VKCt/NS6xYwkTRNcdJKQzT2bEVq0AMuqwYSz1
GkAJTJ82ePSEhmPqdF38iwY4IpRJDogJPaby2MNrN7giOrHK7aEUVtLwqMVUgJ5Z
PxxRxOP93ddNv+41wD53ymT8eeFTrygbgymAowIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFITjhpxNgTu17Z/8ozDKAQqtl/jDMB8GA1UdIwQYMBaAFFAbmg6oNU8c2LU9
NufcsA+09G3tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg3Y2Fj
ZWE2NDE2NTg3MTdhYmVjYjM1Njg5ZWJlODkzMmY0MGVhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmYmZhMWMtNGVhOS00ZDFiLWFkOTUtNWJmNzQ5
ZTg2YmJjLzhlNDZmNzRjMmE1MjA0Njc1YjQ4NDQwZmRiNjdmOGNhNzEwYmE5NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWZiZmExYy00ZWE5LTRkMWItYWQ5NS01YmY3
NDllODZiYmMvZDg3Y2FjZWE2NDE2NTg3MTdhYmVjYjM1Njg5ZWJlODkzMmY0MGVh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDX6AwDQYJKoZIhvcNAQELBQADggEBAKIFh3KeC2uNav7m
B7KDriRqDfNzIZUKKTJdvpSQDe6AQGNzltsiqwFjz5b8BmLZM8tXZoqQpq1uah2X
Sa23TWlwR/3sRnSjXQyO66/YLy5e0a2REjEveNWkBqf0nsZ6iDzX3NyF7q1c4vno
qT39Z50diSEWdmDGsuHWV3/enVUuWbKjzTwusQ+2ydbUiWg10A3IPNvN/T9qujPl
pfps+ub4eEyn056sftytdHxdjRupcc1XdPvfbFGO95e4pA4FTiU6WZJzs8Ijja6D
fmevc9R0uyRyUJGlODtG882LFUwLtqTX/kGbBff7o3cvnIJOOb5EXgww2I/gxZAn
A/RtmOo=
-----END CERTIFICATE-----