Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e470a2e67894777ad6e74b4ac30f6c7026041f75.roa
File:                     e470a2e67894777ad6e74b4ac30f6c7026041f75.roa (raw, json)
Hash identifier:          /V4u6a6vRZhSkxyEW+MIYQ00p13KijVMoPhmKt2LvXc=
Subject key identifier:   A3:55:26:7F:44:88:AD:F6:D8:D4:8B:B5:81:23:82:1A:C6:F5:AE:51
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       10DAF4
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e470a2e67894777ad6e74b4ac30f6c7026041f75.roa
Signing time:             Sun 01 Oct 2023 16:39:39 +0000
ROA not before:           Sat 30 Sep 2023 16:39:39 +0000
ROA not after:            Wed 01 Oct 2025 17:39:39 +0000
asID:                     272086
IP address blocks:        2803:21e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104628 (0x10daf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: Sep 30 16:39:39 2023 GMT
            Not After : Oct  1 17:39:39 2025 GMT
        Subject: CN=e470a2e67894777ad6e74b4ac30f6c7026041f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:6e:27:3c:fd:fc:e6:04:26:13:50:d1:ed:
                    b6:0b:1e:ef:81:47:9f:40:dc:9f:3d:61:0f:a4:dd:
                    78:a8:d1:f3:f4:c7:78:67:af:f7:54:4e:37:f4:bc:
                    2a:ec:7b:0c:23:28:68:5d:38:91:1a:fd:b1:60:48:
                    a4:41:9f:8c:05:61:d8:63:e3:96:f5:23:7c:01:da:
                    4d:f7:7c:c9:23:4f:5a:40:7d:af:17:ac:21:10:07:
                    5b:81:61:33:83:e3:19:70:0c:83:0a:06:dc:5f:9e:
                    a1:df:4e:61:b1:2f:dd:52:65:20:1f:53:4c:cd:b8:
                    62:69:98:35:a6:1b:fd:59:e3:cb:48:23:ea:9e:54:
                    6a:95:4a:f9:55:c8:cc:15:a9:e3:64:4c:c1:2b:58:
                    04:70:3e:b9:a8:57:dc:34:e1:e4:9f:cd:ea:a9:3e:
                    19:c5:bf:1e:94:50:5f:cd:03:28:35:23:63:3a:25:
                    b5:26:46:1b:e8:1f:f0:5d:00:87:c4:0f:9a:11:0c:
                    75:1c:a5:a1:97:16:53:02:af:df:9c:a3:23:75:5c:
                    3d:7e:9e:1b:ce:72:8b:f0:9c:88:d9:2f:85:e3:ec:
                    d3:c8:76:b0:93:4d:70:74:c4:5f:67:f7:a7:fb:98:
                    da:c3:0c:44:92:c8:f2:f6:d0:02:6c:50:c3:14:97:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:26:7F:44:88:AD:F6:D8:D4:8B:B5:81:23:82:1A:C6:F5:AE:51
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/e470a2e67894777ad6e74b4ac30f6c7026041f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:21e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:ad:9c:b8:62:33:7a:10:a9:08:83:99:0c:40:83:6e:93:
         03:7b:c1:13:27:b6:79:e8:05:2f:23:fc:6f:bc:31:54:fb:00:
         59:0e:b8:b8:81:f7:87:95:27:ff:fd:02:53:bb:3f:0f:32:91:
         0f:69:ef:ed:07:b0:a6:ae:0c:6e:61:86:92:58:99:f6:07:71:
         3b:d3:33:3c:12:44:03:73:91:01:13:01:45:77:c1:3e:67:71:
         69:94:ec:de:cb:be:22:02:24:4a:5e:f9:53:98:be:cb:1c:bf:
         aa:d6:d6:27:df:5e:c0:e0:36:5a:95:27:e3:28:d2:1d:d8:37:
         43:13:8f:13:26:27:8c:a2:c1:15:3d:ea:8b:7f:64:18:76:7f:
         0c:80:ea:0f:68:38:df:c5:2b:ee:36:15:f3:8c:1a:68:96:58:
         89:ad:c4:67:14:8a:df:64:aa:cd:cb:82:f1:69:e8:c0:59:de:
         96:de:37:97:0d:f2:18:5d:32:4e:72:b2:20:ab:00:3e:a8:74:
         54:1b:35:07:98:c2:82:75:52:09:85:e7:ef:92:0c:85:96:0b:
         36:59:a8:f3:a2:5b:88:ef:ba:1e:1d:5c:68:0e:55:4f:8e:ad:
         19:68:50:30:29:28:09:c9:b5:4e:88:b1:8b:8e:65:f1:26:0b:
         c7:70:fc:13
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDENr0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjMwOTMw
MTYzOTM5WhcNMjUxMDAxMTczOTM5WjAzMTEwLwYDVQQDEyhlNDcwYTJlNjc4OTQ3
NzdhZDZlNzRiNGFjMzBmNmM3MDI2MDQxZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmjNuJzz9/OYEJhNQ0e22Cx7vgUefQNyfPWEPpN14qNHz9Md4
Z6/3VE439Lwq7HsMIyhoXTiRGv2xYEikQZ+MBWHYY+OW9SN8AdpN93zJI09aQH2v
F6whEAdbgWEzg+MZcAyDCgbcX56h305hsS/dUmUgH1NMzbhiaZg1phv9WePLSCPq
nlRqlUr5VcjMFanjZEzBK1gEcD65qFfcNOHkn83qqT4Zxb8elFBfzQMoNSNjOiW1
JkYb6B/wXQCHxA+aEQx1HKWhlxZTAq/fnKMjdVw9fp4bznKL8JyI2S+F4+zTyHaw
k01wdMRfZ/en+5jawwxEksjy9tACbFDDFJfhqwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFKNVJn9EiK322NSLtYEjghrG9a5RMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkL2U0NzBhMmU2Nzg5NDc3N2FkNmU3NGI0YWMzMGY2YzcwMjYwNDFmNzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDIeAwDQYJKoZIhvcNAQELBQADggEBAE7erZy4YjN6EKkI
g5kMQINukwN7wRMntnnoBS8j/G+8MVT7AFkOuLiB94eVJ//9AlO7Pw8ykQ9p7+0H
sKauDG5hhpJYmfYHcTvTMzwSRANzkQETAUV3wT5ncWmU7N7LviICJEpe+VOYvssc
v6rW1iffXsDgNlqVJ+Mo0h3YN0MTjxMmJ4yiwRU96ot/ZBh2fwyA6g9oON/FK+42
FfOMGmiWWImtxGcUit9kqs3LgvFp6MBZ3pbeN5cN8hhdMk5ysiCrAD6odFQbNQeY
woJ1UgmF5++SDIWWCzZZqPOiW4jvuh4dXGgOVU+OrRloUDApKAnJtU6IsYuOZfEm
C8dw/BM=
-----END CERTIFICATE-----