Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa
File:                     6da439b24a90087d03688392418af6920257d571.roa (raw, json)
Hash identifier:          NZSyRqIJ1Uu8h389LNvTN9NTJNH8fTqmHVTSPsuMiCQ=
Subject key identifier:   EB:B8:61:D2:23:0C:0B:42:C9:B7:CC:DF:13:78:77:87:AC:7E:63:53
Certificate issuer:       /CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
Certificate serial:       123232
Authority key identifier: 99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa
Signing time:             Thu 01 Feb 2024 07:30:00 +0000
ROA not before:           Thu 01 Feb 2024 07:30:00 +0000
ROA not after:            Sat 31 Jan 2026 07:30:00 +0000
asID:                     271949
IP address blocks:        2803:5610::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192498 (0x123232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f
        Validity
            Not Before: Feb  1 07:30:00 2024 GMT
            Not After : Jan 31 07:30:00 2026 GMT
        Subject: CN=6da439b24a90087d03688392418af6920257d571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:57:29:1e:37:f8:6c:f3:3b:4e:a4:7e:cf:
                    0d:62:5b:2c:17:35:a5:3c:72:98:2b:f3:cf:3e:97:
                    3c:ba:6d:f6:b8:b6:11:fc:8d:62:66:96:ac:b6:f7:
                    3d:b6:9c:3a:a6:0c:ff:44:d7:a3:aa:43:b4:17:cb:
                    9e:37:5e:d4:a8:b1:73:d9:9b:ac:9c:82:db:f5:9a:
                    de:b4:9b:21:42:0f:9e:e0:00:fe:9a:7b:ec:4c:f1:
                    cf:6a:4a:20:5b:9c:46:d2:4b:55:0c:53:14:e5:da:
                    3c:d6:c0:e8:ad:12:ac:31:fd:ec:e4:66:86:ad:24:
                    db:fe:f3:04:03:8c:97:59:ad:ef:7f:38:a5:5f:8b:
                    8a:c6:19:98:ee:82:a9:44:ff:fe:03:c8:57:a4:34:
                    58:9b:ba:76:03:53:a8:42:8c:aa:55:43:a9:86:1f:
                    80:2e:40:bf:9d:71:9f:bd:a1:bd:62:24:3a:b9:4e:
                    95:94:4e:db:48:1d:3f:0b:51:08:52:5f:43:4b:a7:
                    76:ea:a2:0c:ac:23:3c:53:e3:be:49:6e:2d:f0:98:
                    80:ff:10:37:7a:91:27:a5:13:f5:38:95:73:df:80:
                    64:fc:d5:ae:e8:b1:9f:ac:67:91:60:f6:9b:f8:c3:
                    15:4c:d2:29:33:82:30:c9:82:43:bf:21:dd:a3:d6:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:61:D2:23:0C:0B:42:C9:B7:CC:DF:13:78:77:87:AC:7E:63:53
            X509v3 Authority Key Identifier:
                keyid:99:BA:C3:9B:79:C8:13:E3:DB:CA:F9:A1:B1:9A:FF:29:F7:20:A4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/6da439b24a90087d03688392418af6920257d571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43077b1f-1531-42bf-940e-ef9030ca0b9c/bb78a32cd0c8e991679cf83ccc68eaf3bb3aef5f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5610::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:59:e9:1e:a3:fa:4d:21:10:b2:02:f2:7b:2f:4d:da:45:
         58:d6:b5:b6:25:81:6b:33:9b:ea:93:e7:23:bc:0f:31:3d:72:
         a0:75:ca:33:62:a5:3e:23:3d:3b:09:d4:42:bd:65:46:e4:ab:
         1f:6e:a6:19:8b:92:70:1a:0e:69:c8:86:c5:66:3e:6a:34:b7:
         b3:d3:d2:18:df:66:59:a8:44:3d:c2:27:45:7a:4a:1c:33:d8:
         3f:0a:6f:85:5d:fb:35:30:e9:eb:b1:64:fe:9a:96:8f:04:c3:
         9f:f4:67:75:0f:9b:19:75:1e:e6:c9:fe:11:dc:bc:03:b5:a7:
         cb:ee:7c:51:86:54:1b:a3:89:8c:ca:e3:9e:94:4c:16:01:45:
         fe:e3:dd:1e:33:81:35:4e:74:8e:d1:a0:c0:ca:bf:97:1d:38:
         cb:dd:72:a4:d2:9a:9e:dd:48:e0:66:48:75:2d:a9:2f:22:d8:
         89:ec:ae:22:11:aa:0a:0f:9c:c9:ad:03:00:cc:78:25:70:26:
         c4:66:36:e7:2b:66:c5:20:3e:e1:82:63:fc:ef:16:b3:ff:e8:
         c6:61:f4:2d:32:2f:10:e8:44:22:c7:14:46:c5:0a:77:68:8c:
         58:bb:69:76:3f:2d:3e:cd:0a:1c:06:7b:80:5f:a2:1c:14:ca:
         21:2a:23:ef
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEjIyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
NzhhMzJjZDBjOGU5OTE2NzljZjgzY2NjNjhlYWYzYmIzYWVmNWYwHhcNMjQwMjAx
MDczMDAwWhcNMjYwMTMxMDczMDAwWjAzMTEwLwYDVQQDEyg2ZGE0MzliMjRhOTAw
ODdkMDM2ODgzOTI0MThhZjY5MjAyNTdkNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApbBXKR43+GzzO06kfs8NYlssFzWlPHKYK/PPPpc8um32uLYR
/I1iZpastvc9tpw6pgz/RNejqkO0F8ueN17UqLFz2ZusnILb9ZretJshQg+e4AD+
mnvsTPHPakogW5xG0ktVDFMU5do81sDorRKsMf3s5GaGrSTb/vMEA4yXWa3vfzil
X4uKxhmY7oKpRP/+A8hXpDRYm7p2A1OoQoyqVUOphh+ALkC/nXGfvaG9YiQ6uU6V
lE7bSB0/C1EIUl9DS6d26qIMrCM8U+O+SW4t8JiA/xA3epEnpRP1OJVz34Bk/NWu
6LGfrGeRYPab+MMVTNIpM4IwyYJDvyHdo9YQuQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOu4YdIjDAtCybfM3xN4d4esfmNTMB8GA1UdIwQYMBaAFJm6w5t5yBPj28r5
obGa/yn3IKRZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmI3OGEz
MmNkMGM4ZTk5MTY3OWNmODNjY2M2OGVhZjNiYjNhZWY1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDMwNzdiMWYtMTUzMS00MmJmLTk0MGUtZWY5MDMw
Y2EwYjljLzZkYTQzOWIyNGE5MDA4N2QwMzY4ODM5MjQxOGFmNjkyMDI1N2Q1NzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MzA3N2IxZi0xNTMxLTQyYmYtOTQwZS1lZjkw
MzBjYTBiOWMvYmI3OGEzMmNkMGM4ZTk5MTY3OWNmODNjY2M2OGVhZjNiYjNhZWY1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDVhAwDQYJKoZIhvcNAQELBQADggEBAF+TWekeo/pNIRCy
AvJ7L03aRVjWtbYlgWszm+qT5yO8DzE9cqB1yjNipT4jPTsJ1EK9ZUbkqx9uphmL
knAaDmnIhsVmPmo0t7PT0hjfZlmoRD3CJ0V6Shwz2D8Kb4Vd+zUw6euxZP6alo8E
w5/0Z3UPmxl1HubJ/hHcvAO1p8vufFGGVBujiYzK456UTBYBRf7j3R4zgTVOdI7R
oMDKv5cdOMvdcqTSmp7dSOBmSHUtqS8i2InsriIRqgoPnMmtAwDMeCVwJsRmNucr
ZsUgPuGCY/zvFrP/6MZh9C0yLxDoRCLHFEbFCndojFi7aXY/LT7NChwGe4BfohwU
yiEqI+8=
-----END CERTIFICATE-----