Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/053bd6d2d491408736f523edd6ed2e626617143a.roa
File:                     053bd6d2d491408736f523edd6ed2e626617143a.roa (raw, json)
Hash identifier:          j07q1xU2rwisHKsoUKIjDZX5hXe902k8TJkY/rv3tgw=
Subject key identifier:   7B:12:BA:CD:C4:BD:B5:9F:B3:49:41:50:4D:4C:69:2C:17:4F:D2:3C
Certificate issuer:       /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial:       214AE2
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/053bd6d2d491408736f523edd6ed2e626617143a.roa
Signing time:             Tue 05 Mar 2024 22:56:18 +0000
ROA not before:           Tue 05 Mar 2024 22:56:18 +0000
ROA not after:            Thu 05 Mar 2026 22:56:18 +0000
asID:                     272978
IP address blocks:        2803:b0e0:801a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181858 (0x214ae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
        Validity
            Not Before: Mar  5 22:56:18 2024 GMT
            Not After : Mar  5 22:56:18 2026 GMT
        Subject: CN=053bd6d2d491408736f523edd6ed2e626617143a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:d2:93:33:a5:13:46:c2:02:7a:a0:60:4b:
                    d1:37:13:ad:0e:a6:95:e1:d5:f2:93:5e:12:b2:be:
                    6e:fe:75:eb:d5:90:ad:d8:db:41:6a:85:88:76:c5:
                    eb:32:68:0a:f5:7c:3a:22:52:69:07:d5:cc:de:77:
                    21:f6:fe:41:26:da:9b:bd:af:cc:08:79:ed:db:6c:
                    89:38:47:84:ae:48:1c:87:69:fb:8b:d6:10:da:b9:
                    28:2a:24:5c:ec:97:49:06:0b:2b:ed:99:2d:b0:0e:
                    76:de:4c:a1:03:b1:a8:b9:7f:13:f1:08:43:f3:6d:
                    ac:4e:cb:31:15:63:94:76:01:98:61:a3:f5:d3:27:
                    18:dc:b6:80:8a:61:3e:6f:df:32:f0:67:c8:cb:59:
                    a0:6f:d9:2a:74:57:53:ef:3b:b8:d6:05:6e:66:7f:
                    93:07:61:75:73:71:86:98:dd:40:7d:16:a2:48:3b:
                    aa:7e:a7:5a:b9:7a:1b:33:31:7e:87:ae:1b:ab:23:
                    e2:48:61:af:4f:71:dd:ea:71:47:82:d0:a4:e0:4f:
                    0f:05:b4:a6:b2:fe:9e:2f:df:fd:4a:64:4f:35:dd:
                    95:9e:b3:21:94:01:d5:6b:f6:77:a9:d5:28:90:a5:
                    fc:d5:1a:46:94:af:90:02:61:6f:e8:63:0c:c6:87:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:BA:CD:C4:BD:B5:9F:B3:49:41:50:4D:4C:69:2C:17:4F:D2:3C
            X509v3 Authority Key Identifier:
                keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/053bd6d2d491408736f523edd6ed2e626617143a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:801a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:df:e0:a8:35:88:14:35:bc:aa:fa:8b:27:87:38:7d:cf:75:
         5d:ab:0e:5c:e5:86:16:cc:5a:56:02:7b:cd:ca:fa:2b:6e:82:
         b7:88:e4:c5:20:ca:d2:ba:f3:de:f5:6f:9a:4b:bb:64:31:9c:
         d8:e4:79:16:8d:ac:1c:35:22:09:d5:8d:65:25:72:16:56:d4:
         e1:06:7b:cb:a8:c0:36:12:46:0d:b3:81:2b:8b:fe:9e:21:be:
         42:ec:76:2f:e2:9a:ca:47:36:71:de:69:67:e7:5b:1f:58:35:
         68:2b:37:12:8c:78:88:58:b0:de:d5:51:27:d0:84:b6:b9:6a:
         12:e8:b2:66:d8:15:da:f9:12:17:5b:2f:46:dc:ef:b5:12:2f:
         14:ba:55:43:b1:ed:0f:fe:98:ce:41:50:cf:8d:28:d2:2e:4e:
         f1:5d:66:7b:cf:d1:94:bd:6a:09:5d:99:5b:a4:97:66:9b:6f:
         9f:67:ed:26:93:48:a9:52:41:18:4d:3a:e0:6b:eb:68:1c:c9:
         c1:5a:22:e0:4f:11:0d:3d:2c:57:f6:7d:a4:87:e0:dc:c7:f2:
         00:6f:64:23:4f:02:45:a8:84:2f:82:a9:6d:73:98:f3:92:a4:
         37:e4:aa:61:f7:ef:5e:12:58:fa:5a:70:4e:89:d1:ea:61:22:
         b8:2c:78:71
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDIUriMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OTVlZDczM2JmNTRmNDMwZDE3NGJiMWYwYmY4OTVkNmJjNzBiNjQwHhcNMjQwMzA1
MjI1NjE4WhcNMjYwMzA1MjI1NjE4WjAzMTEwLwYDVQQDEygwNTNiZDZkMmQ0OTE0
MDg3MzZmNTIzZWRkNmVkMmU2MjY2MTcxNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlyXSkzOlE0bCAnqgYEvRNxOtDqaV4dXyk14Ssr5u/nXr1ZCt
2NtBaoWIdsXrMmgK9Xw6IlJpB9XM3nch9v5BJtqbva/MCHnt22yJOEeErkgch2n7
i9YQ2rkoKiRc7JdJBgsr7ZktsA523kyhA7GouX8T8QhD822sTssxFWOUdgGYYaP1
0ycY3LaAimE+b98y8GfIy1mgb9kqdFdT7zu41gVuZn+TB2F1c3GGmN1AfRaiSDuq
fqdauXobMzF+h64bqyPiSGGvT3Hd6nFHgtCk4E8PBbSmsv6eL9/9SmRPNd2VnrMh
lAHVa/Z3qdUokKX81RpGlK+QAmFv6GMMxoffpQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHsSus3EvbWfs0lBUE1MaSwXT9I8MB8GA1UdIwQYMBaAFDTRdQ2EHmBaoLgJ
i5fx9hw2EA6XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU5NWVk
NzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWIxZTE1MmYtZmM1MC00MzViLWJlZWItOGIzODY2
ZTFiMGZlLzA1M2JkNmQyZDQ5MTQwODczNmY1MjNlZGQ2ZWQyZTYyNjYxNzE0M2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YjFlMTUyZi1mYzUwLTQzNWItYmVlYi04YjM4
NjZlMWIwZmUvZjU5NWVkNzMzYmY1NGY0MzBkMTc0YmIxZjBiZjg5NWQ2YmM3MGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDsOCAGjANBgkqhkiG9w0BAQsFAAOCAQEAqN/gqDWIFDW8
qvqLJ4c4fc91XasOXOWGFsxaVgJ7zcr6K26Ct4jkxSDK0rrz3vVvmku7ZDGc2OR5
Fo2sHDUiCdWNZSVyFlbU4QZ7y6jANhJGDbOBK4v+niG+Qux2L+Kaykc2cd5pZ+db
H1g1aCs3Eox4iFiw3tVRJ9CEtrlqEuiyZtgV2vkSF1svRtzvtRIvFLpVQ7HtD/6Y
zkFQz40o0i5O8V1me8/RlL1qCV2ZW6SXZptvn2ftJpNIqVJBGE064GvraBzJwVoi
4E8RDT0sV/Z9pIfg3MfyAG9kI08CRaiEL4KpbXOY85KkN+SqYffvXhJY+lpwTonR
6mEiuCx4cQ==
-----END CERTIFICATE-----