Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/3de79428068e619736811c58eb74f1fe4bd51239.roa
File:                     3de79428068e619736811c58eb74f1fe4bd51239.roa (raw, json)
Hash identifier:          ymanYRtP0JgeCUisU70HLxGrDn24KUSYtRSXJv2LLlo=
Subject key identifier:   E3:AF:77:4A:13:0D:AD:CF:DA:43:B4:E1:33:BA:9D:27:FA:CA:68:75
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       124903
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/3de79428068e619736811c58eb74f1fe4bd51239.roa
Signing time:             Tue 16 Jan 2024 07:31:30 +0000
ROA not before:           Tue 16 Jan 2024 07:31:30 +0000
ROA not after:            Thu 15 Jan 2026 07:31:30 +0000
asID:                     269735
IP address blocks:        2803:960::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198339 (0x124903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 16 07:31:30 2024 GMT
            Not After : Jan 15 07:31:30 2026 GMT
        Subject: CN=3de79428068e619736811c58eb74f1fe4bd51239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:e9:66:dc:f5:f3:97:11:ef:82:61:24:a5:
                    27:b0:ea:2c:34:9d:77:6b:7a:75:f2:67:67:5e:5f:
                    b7:f8:88:ce:c0:0e:b7:16:1d:c7:5a:fa:36:dc:dd:
                    29:e0:f7:7a:e6:23:05:00:62:f4:25:54:4b:30:23:
                    70:0c:8d:85:d0:c6:ba:7d:bf:76:88:9c:17:e1:87:
                    a0:a1:b5:f3:13:a3:ca:0f:79:ff:bd:2b:9b:af:d8:
                    55:fa:27:8b:45:e1:9f:7f:fb:aa:5d:8d:b0:54:85:
                    3b:6b:3b:b5:0c:b2:be:35:71:13:96:79:ff:0c:eb:
                    81:64:99:55:d9:f8:e6:60:2d:8c:fe:2f:eb:72:ed:
                    7a:c0:b0:38:2e:28:b9:14:c8:c4:39:55:e6:43:ed:
                    83:21:14:67:de:1f:bf:ee:42:ec:d7:5a:7c:6c:c6:
                    19:da:5b:b7:21:a8:f1:86:1f:a6:89:4f:d1:01:77:
                    0d:51:b9:9d:24:7a:22:dc:8f:cd:57:c6:06:22:47:
                    93:d0:77:b4:8f:8f:7a:ed:7f:e6:a8:fe:eb:3e:26:
                    64:06:a4:0d:aa:be:06:3b:0f:06:85:65:79:a9:00:
                    3e:90:1b:47:61:8d:10:51:77:30:1e:7a:94:40:0b:
                    96:cb:5b:e0:20:f3:fd:12:91:e4:69:50:b0:c8:b7:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AF:77:4A:13:0D:AD:CF:DA:43:B4:E1:33:BA:9D:27:FA:CA:68:75
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/3de79428068e619736811c58eb74f1fe4bd51239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:960::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:a6:be:20:ee:8f:d0:02:3e:35:3d:95:37:f7:cf:67:fb:
         83:32:11:6c:cb:41:63:d4:b4:25:96:25:29:ca:55:f1:ae:3a:
         3f:bb:4d:02:eb:66:68:b4:8f:0c:85:85:51:a8:d4:20:f5:ba:
         14:f9:fb:ff:69:d5:34:9d:15:00:c5:98:e3:6e:76:73:10:5e:
         dd:94:31:39:f8:97:61:bf:e9:89:e9:9d:2e:88:0f:d8:59:5e:
         2b:a4:81:ff:2d:c7:09:4a:d4:3f:e4:8f:37:df:34:43:9e:38:
         37:c1:50:61:d6:89:e1:41:ab:22:ca:33:cb:7a:f0:4c:24:c6:
         b0:d0:56:7e:9f:c5:59:c8:07:7d:d1:16:aa:d7:fc:0c:ea:0f:
         94:6a:80:0c:76:60:0d:2b:e5:67:ba:5f:96:e4:c1:44:d4:03:
         fc:1c:89:ab:07:52:16:cc:52:3c:1e:9d:6d:13:55:b9:f9:5f:
         56:3c:55:c7:33:bc:11:5e:62:b4:51:eb:8b:ad:6d:53:57:82:
         c2:0b:69:1e:6f:24:61:5e:99:08:18:e2:49:35:77:59:32:65:
         9f:c9:8e:8a:ed:6d:7d:58:9f:54:47:85:ef:5a:21:75:aa:9f:
         84:56:3b:a2:93:7d:af:44:69:b7:7e:db:59:68:0f:2c:83:4a:
         f4:40:09:62
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEkkDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
YTI1OWY3NDU3ZjRjNWVhY2E2NGI1MDM4NDdlODVkOTZiNGYzM2YwHhcNMjQwMTE2
MDczMTMwWhcNMjYwMTE1MDczMTMwWjAzMTEwLwYDVQQDEygzZGU3OTQyODA2OGU2
MTk3MzY4MTFjNThlYjc0ZjFmZTRiZDUxMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvE3pZtz185cR74JhJKUnsOosNJ13a3p18mdnXl+3+IjOwA63
Fh3HWvo23N0p4Pd65iMFAGL0JVRLMCNwDI2F0Ma6fb92iJwX4YegobXzE6PKD3n/
vSubr9hV+ieLReGff/uqXY2wVIU7azu1DLK+NXETlnn/DOuBZJlV2fjmYC2M/i/r
cu16wLA4Lii5FMjEOVXmQ+2DIRRn3h+/7kLs11p8bMYZ2lu3Iajxhh+miU/RAXcN
UbmdJHoi3I/NV8YGIkeT0He0j4967X/mqP7rPiZkBqQNqr4GOw8GhWV5qQA+kBtH
YY0QUXcwHnqUQAuWy1vgIPP9EpHkaVCwyLeD1wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOOvd0oTDa3P2kO04TO6nSf6ymh1MB8GA1UdIwQYMBaAFG1c5D2rqQReI0iw
tWZmNMn7wIV7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjJhMjU5
Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMzZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMThjOWViOTEtODc0MC00YjFiLTgxMzUtNWNlZDEz
YjNmMTEzLzNkZTc5NDI4MDY4ZTYxOTczNjgxMWM1OGViNzRmMWZlNGJkNTEyMzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOGM5ZWI5MS04NzQwLTRiMWItODEzNS01Y2Vk
MTNiM2YxMTMvMjJhMjU5Zjc0NTdmNGM1ZWFjYTY0YjUwMzg0N2U4NWQ5NmI0ZjMz
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDCWAwDQYJKoZIhvcNAQELBQADggEBADrlpr4g7o/QAj41
PZU3989n+4MyEWzLQWPUtCWWJSnKVfGuOj+7TQLrZmi0jwyFhVGo1CD1uhT5+/9p
1TSdFQDFmONudnMQXt2UMTn4l2G/6YnpnS6ID9hZXiukgf8txwlK1D/kjzffNEOe
ODfBUGHWieFBqyLKM8t68EwkxrDQVn6fxVnIB33RFqrX/AzqD5RqgAx2YA0r5We6
X5bkwUTUA/wciasHUhbMUjwenW0TVbn5X1Y8VcczvBFeYrRR64utbVNXgsILaR5v
JGFemQgY4kk1d1kyZZ/JjortbX1Yn1RHhe9aIXWqn4RWO6KTfa9Eabd+21loDyyD
SvRACWI=
-----END CERTIFICATE-----