Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/924e2e553ce2c32d4180f0021c8159ac47435093.roa
File:                     924e2e553ce2c32d4180f0021c8159ac47435093.roa (raw, json)
Hash identifier:          i7/GzSb5Ru65zHfDwTfI854FQg0OolVM5PV6U5ulfrg=
Subject key identifier:   4A:F3:96:97:8B:EC:E5:D6:E0:5F:77:78:7A:68:28:93:8E:9F:E1:90
Certificate issuer:       /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial:       0E0778
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/924e2e553ce2c32d4180f0021c8159ac47435093.roa
Signing time:             Sat 24 Sep 2022 02:23:49 +0000
ROA not before:           Wed 24 Mar 2021 14:34:15 +0000
ROA not after:            Tue 24 Mar 2026 14:34:15 +0000
asID:                     64129
IP address blocks:        2803:3410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919416 (0xe0778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
        Validity
            Not Before: Mar 24 14:34:15 2021 GMT
            Not After : Mar 24 14:34:15 2026 GMT
        Subject: CN=924e2e553ce2c32d4180f0021c8159ac47435093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:14:02:86:d6:96:8e:a6:ed:e9:01:0e:e3:
                    65:94:d9:73:3d:16:f5:9a:50:c5:66:dd:61:99:9c:
                    d7:dd:2f:68:89:84:24:5f:f1:e1:88:30:af:55:61:
                    e0:8d:de:f0:c6:02:51:4d:a7:74:6a:33:b2:51:e8:
                    bb:6d:b9:6e:2f:61:64:54:1d:3d:3d:0c:dd:1e:36:
                    a9:4d:59:87:8e:de:d5:a7:a6:5a:7b:2b:44:7e:e0:
                    4e:dc:e3:c5:c8:52:50:69:ac:d1:39:72:19:49:75:
                    60:67:af:67:46:5d:b8:df:fb:4b:78:1b:69:6c:92:
                    28:4f:72:69:6b:68:40:e1:0e:a4:a1:70:c1:0c:e4:
                    6d:d0:d3:c7:b2:68:be:8a:6b:a0:f8:76:f9:36:e2:
                    bf:89:5b:c4:45:88:9d:24:86:15:0e:64:69:8f:08:
                    85:92:3b:2f:25:e0:07:81:4c:1e:53:87:fa:1c:af:
                    76:26:49:01:24:14:ae:81:5e:12:0e:03:c4:60:e2:
                    a5:32:b4:fe:48:f7:c2:d9:26:9e:17:c0:6f:12:fe:
                    18:34:5f:a5:57:de:01:60:9e:b5:98:99:77:9d:38:
                    f6:c7:f8:fe:83:d5:e9:09:91:91:be:bc:98:9d:cc:
                    21:cd:b4:50:1c:b3:bb:10:ee:17:39:fb:3a:82:c8:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:96:97:8B:EC:E5:D6:E0:5F:77:78:7A:68:28:93:8E:9F:E1:90
            X509v3 Authority Key Identifier:
                keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/924e2e553ce2c32d4180f0021c8159ac47435093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3410::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:44:85:e2:62:c7:0a:6c:28:b2:46:4d:04:86:3c:8c:42:11:
         da:18:97:18:2e:e8:48:bb:76:48:ae:ba:62:22:fa:39:e9:3b:
         04:89:87:21:2a:43:e5:5e:a2:ed:2f:fa:ba:a6:3c:cb:24:9f:
         2e:c2:1b:e1:ff:db:4d:a7:e1:be:83:8f:50:93:9e:f5:70:24:
         76:ec:0c:1c:42:3f:71:4d:3f:82:60:60:d2:64:f5:2f:15:80:
         8b:d4:b8:71:cd:18:00:2b:36:51:77:bc:6d:16:3b:62:b2:25:
         7e:59:ae:d6:c4:60:7c:84:1a:fd:ae:4d:b2:f5:92:6d:16:b2:
         fc:a4:cd:55:d9:58:f6:b1:ff:62:c2:2e:3f:22:1b:2b:ce:6c:
         d7:17:c2:5d:31:56:a5:26:74:c0:cb:ab:b1:e0:43:f8:2c:f4:
         c4:63:6f:84:f4:71:13:53:a3:ad:31:c4:d2:d3:4d:26:6d:10:
         32:1b:82:c0:19:70:c5:ac:f3:1a:ec:1c:79:8e:f6:bd:13:a6:
         a2:a7:bd:53:3f:6e:d1:66:90:38:5b:1a:55:48:80:e1:da:70:
         1a:13:4b:9f:dd:b9:72:1e:0f:98:b4:a0:fa:a7:35:93:b5:af:
         1c:36:f6:85:bc:f8:de:6a:ac:5a:69:7f:26:6c:78:14:94:ae:
         8c:eb:84:e5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDgd4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MjBkYzQ4MmU3YjEzY2M2N2RkZGYxYTkyZGU3Y2MyMDE2NmQ0YTUwHhcNMjEwMzI0
MTQzNDE1WhcNMjYwMzI0MTQzNDE1WjAzMTEwLwYDVQQDEyg5MjRlMmU1NTNjZTJj
MzJkNDE4MGYwMDIxYzgxNTlhYzQ3NDM1MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsOsUAobWlo6m7ekBDuNllNlzPRb1mlDFZt1hmZzX3S9oiYQk
X/HhiDCvVWHgjd7wxgJRTad0ajOyUei7bbluL2FkVB09PQzdHjapTVmHjt7Vp6Za
eytEfuBO3OPFyFJQaazROXIZSXVgZ69nRl243/tLeBtpbJIoT3Jpa2hA4Q6koXDB
DORt0NPHsmi+imug+Hb5NuK/iVvERYidJIYVDmRpjwiFkjsvJeAHgUweU4f6HK92
JkkBJBSugV4SDgPEYOKlMrT+SPfC2SaeF8BvEv4YNF+lV94BYJ61mJl3nTj2x/j+
g9XpCZGRvryYncwhzbRQHLO7EO4XOfs6gsifJQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFErzlpeL7OXW4F93eHpoKJOOn+GQMB8GA1UdIwQYMBaAFLegMbarlromNkjW
4RmT6SwnwIPiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmIyMGRj
NDgyZTdiMTNjYzY3ZGRkZjFhOTJkZTdjYzIwMTY2ZDRhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjZhODljMDItZTkwZi00MWNmLWJjZWEtM2ZkNWY4
NTU5OGJmLzkyNGUyZTU1M2NlMmMzMmQ0MTgwZjAwMjFjODE1OWFjNDc0MzUwOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNmE4OWMwMi1lOTBmLTQxY2YtYmNlYS0zZmQ1
Zjg1NTk4YmYvYmIyMGRjNDgyZTdiMTNjYzY3ZGRkZjFhOTJkZTdjYzIwMTY2ZDRh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDNBAwDQYJKoZIhvcNAQELBQADggEBAAFEheJixwpsKLJG
TQSGPIxCEdoYlxgu6Ei7dkiuumIi+jnpOwSJhyEqQ+Veou0v+rqmPMskny7CG+H/
202n4b6Dj1CTnvVwJHbsDBxCP3FNP4JgYNJk9S8VgIvUuHHNGAArNlF3vG0WO2Ky
JX5ZrtbEYHyEGv2uTbL1km0WsvykzVXZWPax/2LCLj8iGyvObNcXwl0xVqUmdMDL
q7HgQ/gs9MRjb4T0cRNTo60xxNLTTSZtEDIbgsAZcMWs8xrsHHmO9r0TpqKnvVM/
btFmkDhbGlVIgOHacBoTS5/duXIeD5i0oPqnNZO1rxw29oW8+N5qrFppfyZseBSU
rozrhOU=
-----END CERTIFICATE-----