Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/b73dcda2fc9645ae44c00351ab2fd6d7866d359d.roa
File:                     b73dcda2fc9645ae44c00351ab2fd6d7866d359d.roa (raw, json)
Hash identifier:          14xMgBjFKr9mfY8BpRwIHivb4wTOz/OqW2glDE+ZS9M=
Subject key identifier:   BD:58:28:C7:97:A4:5C:9F:55:E2:23:DC:14:E4:73:F3:C1:EB:42:E4
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       139B72
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/b73dcda2fc9645ae44c00351ab2fd6d7866d359d.roa
Signing time:             Wed 13 Mar 2024 11:11:44 +0000
ROA not before:           Wed 13 Mar 2024 11:11:44 +0000
ROA not after:            Fri 13 Mar 2026 11:11:44 +0000
asID:                     3816
IP address blocks:        2801:1b:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284978 (0x139b72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Mar 13 11:11:44 2024 GMT
            Not After : Mar 13 11:11:44 2026 GMT
        Subject: CN=b73dcda2fc9645ae44c00351ab2fd6d7866d359d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:3f:6d:a7:dc:37:c4:de:b8:e5:e4:15:84:
                    de:b8:63:e7:3c:20:d7:ab:e1:21:a2:4e:b6:c0:7c:
                    bd:70:9f:a1:14:41:21:ae:c7:6a:4b:c0:ec:bb:14:
                    8b:1b:6a:b9:44:9f:6e:ac:4f:05:44:10:22:27:a0:
                    b4:03:26:49:b1:66:e9:83:f3:d9:6b:22:6c:49:a9:
                    6b:2d:95:46:bb:7c:51:f3:ff:40:88:f5:fc:9a:bb:
                    d0:cc:29:ec:bf:f5:b5:54:1b:d2:ea:1e:86:8a:63:
                    4f:83:b7:6f:87:d3:fe:11:48:91:13:0b:de:1b:e9:
                    5b:1e:bd:d1:75:e3:29:2a:14:09:3f:10:82:4b:0f:
                    04:49:eb:3a:06:db:38:cc:ae:cc:1c:4f:62:8c:1d:
                    df:8b:ca:cb:aa:68:ae:a7:9f:ea:f4:2a:70:83:b4:
                    89:9a:fa:74:e3:6e:9c:0b:f5:a3:f2:e1:a3:0b:52:
                    62:1c:33:5f:e3:dd:79:20:21:6a:af:b2:6f:8f:16:
                    b1:58:2a:d2:0e:d6:85:c8:21:24:c3:8f:5d:7a:25:
                    88:57:86:55:84:9c:88:4a:af:73:c5:a4:39:97:b6:
                    3c:90:d7:7d:e3:03:43:44:1e:c8:a6:a9:af:0b:3a:
                    a2:4f:11:e4:8a:46:7a:46:c2:e4:86:aa:31:63:ad:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:28:C7:97:A4:5C:9F:55:E2:23:DC:14:E4:73:F3:C1:EB:42:E4
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/b73dcda2fc9645ae44c00351ab2fd6d7866d359d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:f2:90:dc:90:f8:5a:55:42:76:a3:e8:ec:c5:6a:86:39:
         0d:9a:b1:ba:ae:f8:47:fb:09:18:b8:71:99:b7:ab:30:7f:3d:
         ee:57:97:96:76:ba:ab:f0:1f:8c:c6:63:bd:08:ed:53:7e:d2:
         c6:69:82:1f:75:59:e5:70:e9:ea:81:d5:f7:39:ee:94:80:ba:
         59:85:b7:4f:c5:5e:c1:d4:1e:45:d4:c6:4f:f4:12:8c:75:be:
         16:c9:96:11:e8:45:41:6a:58:23:97:28:0c:b1:53:1c:6f:17:
         59:5c:08:49:6e:00:59:99:27:c4:1e:5b:cd:42:6a:c0:f6:21:
         cb:e5:19:3d:2b:32:2d:0c:71:e9:22:08:24:7e:a6:06:63:73:
         f0:8b:cd:02:61:3f:ad:75:ae:12:fd:a0:37:56:92:e3:d3:a0:
         a1:e3:e2:06:5e:6f:f6:39:d5:56:07:31:f3:88:87:ed:59:17:
         3c:6f:26:b7:b8:da:14:70:eb:79:45:57:f6:f9:73:62:04:08:
         f9:87:a2:de:25:c0:a8:92:76:76:94:01:b6:ac:62:a9:f7:01:
         89:27:27:29:5e:b6:67:21:e9:42:9a:24:31:1d:9f:22:69:f4:
         36:46:7c:28:f4:ba:eb:e2:af:b9:ed:50:1c:7a:33:15:8e:77:
         cc:c2:a5:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDE5tyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
YzQ1N2I5ZTRjNGZiMmNhZWViZTVkNzg0NjUzY2FlYzMzOWY1NTYwHhcNMjQwMzEz
MTExMTQ0WhcNMjYwMzEzMTExMTQ0WjAzMTEwLwYDVQQDEyhiNzNkY2RhMmZjOTY0
NWFlNDRjMDAzNTFhYjJmZDZkNzg2NmQzNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlCg/bafcN8TeuOXkFYTeuGPnPCDXq+Ehok62wHy9cJ+hFEEh
rsdqS8DsuxSLG2q5RJ9urE8FRBAiJ6C0AyZJsWbpg/PZayJsSalrLZVGu3xR8/9A
iPX8mrvQzCnsv/W1VBvS6h6GimNPg7dvh9P+EUiREwveG+lbHr3RdeMpKhQJPxCC
Sw8ESes6Bts4zK7MHE9ijB3fi8rLqmiup5/q9Cpwg7SJmvp0426cC/Wj8uGjC1Ji
HDNf4915ICFqr7JvjxaxWCrSDtaFyCEkw49deiWIV4ZVhJyISq9zxaQ5l7Y8kNd9
4wNDRB7IpqmvCzqiTxHkikZ6RsLkhqoxY62QSQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFL1YKMeXpFyfVeIj3BTkc/PB60LkMB8GA1UdIwQYMBaAFAn/ItE+KkIxQG0h
uU4oBkChgQwNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjNDU3
YjllNGM0ZmIyY2FlZWJlNWQ3ODQ2NTNjYWVjMzM5ZjU1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmM1NzE0NmEtNDk5Mi00MmJlLTkxZDktOWJkOGY3
NDZmM2JmL2I3M2RjZGEyZmM5NjQ1YWU0NGMwMDM1MWFiMmZkNmQ3ODY2ZDM1OWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YzU3MTQ2YS00OTkyLTQyYmUtOTFkOS05YmQ4
Zjc0NmYzYmYvMTVjNDU3YjllNGM0ZmIyY2FlZWJlNWQ3ODQ2NTNjYWVjMzM5ZjU1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABsYATANBgkqhkiG9w0BAQsFAAOCAQEAnL/ykNyQ+FpV
Qnaj6OzFaoY5DZqxuq74R/sJGLhxmberMH897leXlna6q/AfjMZjvQjtU37SxmmC
H3VZ5XDp6oHV9znulIC6WYW3T8VewdQeRdTGT/QSjHW+FsmWEehFQWpYI5coDLFT
HG8XWVwISW4AWZknxB5bzUJqwPYhy+UZPSsyLQxx6SIIJH6mBmNz8IvNAmE/rXWu
Ev2gN1aS49OgoePiBl5v9jnVVgcx84iH7VkXPG8mt7jaFHDreUVX9vlzYgQI+Yei
3iXAqJJ2dpQBtqxiqfcBiScnKV62ZyHpQpokMR2fImn0NkZ8KPS66+Kvue1QHHoz
FY53zMKl+Q==
-----END CERTIFICATE-----