Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/0eee3cb036a854a6a18ad6b8e68671debef83b92.roa
File:                     0eee3cb036a854a6a18ad6b8e68671debef83b92.roa (raw, json)
Hash identifier:          VKOMrVtwAebCIyLswkGE78q7Ti1Hzm8Ii/v4BGwq9zQ=
Subject key identifier:   09:C6:E8:47:9B:D0:56:EF:67:9B:0A:2F:37:67:D5:79:D7:4E:45:39
Certificate issuer:       /CN=acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799
Certificate serial:       05BE
Authority key identifier: 0B:5A:41:3B:66:F4:AC:69:7A:65:C9:00:82:87:31:9D:C9:6E:91:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/0eee3cb036a854a6a18ad6b8e68671debef83b92.roa
Signing time:             Wed 08 Nov 2023 04:16:25 +0000
ROA not before:           Wed 08 Nov 2023 04:16:24 +0000
ROA not after:            Sat 08 Nov 2025 04:16:24 +0000
asID:                     273120
IP address blocks:        2803:b850::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799
        Validity
            Not Before: Nov  8 04:16:24 2023 GMT
            Not After : Nov  8 04:16:24 2025 GMT
        Subject: CN=0eee3cb036a854a6a18ad6b8e68671debef83b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:64:92:e9:a6:6b:01:b7:ba:13:48:14:61:
                    43:cc:65:28:37:d5:8c:d0:b4:6c:19:3d:ec:56:f4:
                    a4:45:67:09:1d:b8:f7:e2:1c:e9:40:51:33:85:1c:
                    d4:1c:8f:bc:36:f5:92:c8:8b:5f:fc:46:d2:46:0b:
                    f5:ed:4a:50:1c:75:2d:6b:31:4b:8b:8d:a0:9a:bf:
                    ab:0f:d1:d5:27:6a:ef:64:43:4a:db:80:cc:e9:97:
                    c5:83:3d:a1:64:cf:7d:46:cb:07:0e:04:eb:c3:0d:
                    02:92:8a:8e:fc:df:d0:7a:63:76:6a:d8:b7:44:a4:
                    5f:46:c3:dd:8b:88:10:1f:b2:78:e7:3c:bd:83:c9:
                    54:6b:3d:d3:8f:e6:61:27:12:f2:22:fb:99:06:0d:
                    7b:71:0e:78:09:1a:30:53:3c:02:00:8d:e0:ff:54:
                    36:3a:80:99:9d:b3:fd:9f:7a:e8:53:42:d3:e1:5e:
                    16:94:41:59:72:9e:47:13:ef:aa:10:95:05:3d:ce:
                    15:a4:6a:53:6f:9c:f7:b6:4b:ae:8a:8c:22:dc:ae:
                    90:b6:d9:41:f3:5c:53:9a:ca:5b:90:49:fd:6d:16:
                    2c:38:c7:11:aa:6f:69:50:13:53:11:2b:ef:7a:37:
                    e4:8c:62:20:18:8f:38:e7:27:ed:ab:f8:2d:d8:db:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:E8:47:9B:D0:56:EF:67:9B:0A:2F:37:67:D5:79:D7:4E:45:39
            X509v3 Authority Key Identifier:
                keyid:0B:5A:41:3B:66:F4:AC:69:7A:65:C9:00:82:87:31:9D:C9:6E:91:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/0eee3cb036a854a6a18ad6b8e68671debef83b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b850::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:28:c6:45:fb:a1:b0:fb:9a:23:9d:0d:85:97:11:b8:a4:1e:
         83:f8:52:0e:dd:91:7d:da:f2:07:1e:37:55:af:d1:a2:09:c5:
         20:4c:33:09:2c:4b:81:76:80:4e:4b:a2:8c:fc:53:3a:3b:5f:
         77:c8:72:e5:e2:ee:c5:4b:20:d1:01:d0:49:3a:ea:f8:14:07:
         4b:51:eb:32:ac:d5:2a:15:0a:0e:28:6b:60:01:bb:17:a3:e7:
         3d:4d:97:18:24:25:72:10:4d:5d:a8:93:c3:89:98:0c:23:0a:
         e0:5a:6d:56:00:c7:6f:2c:b0:fe:df:c6:f4:5b:4f:0e:c1:d5:
         45:69:ad:79:f8:c3:dc:91:f3:db:b6:26:94:b2:1d:c0:d8:53:
         9c:03:4e:98:d6:9a:a2:a1:27:d6:80:ae:df:17:a6:ba:71:15:
         89:89:6d:b0:4f:b1:2d:f4:b2:f2:1d:ea:7a:65:a5:99:7d:be:
         1c:52:ee:77:37:5d:c1:7b:ef:05:cd:e4:f7:65:9e:9c:d6:ee:
         13:49:2e:0a:dc:8d:4e:63:cc:a7:e7:ab:4f:fd:dc:ef:eb:07:
         02:4f:5d:10:ec:6c:9a:d9:6e:79:6c:11:e6:56:b4:b9:22:e9:
         54:1d:36:57:96:5d:e0:de:7d:3a:54:4b:89:de:c8:f1:9a:78:
         e8:7a:f7:01
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWNk
MWM4NmZjOGY2ZmI4NThjZjI4ZjA3Y2RiOTE2NGM0ZDJhNzc5OTAeFw0yMzExMDgw
NDE2MjRaFw0yNTExMDgwNDE2MjRaMDMxMTAvBgNVBAMTKDBlZWUzY2IwMzZhODU0
YTZhMThhZDZiOGU2ODY3MWRlYmVmODNiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0xmSS6aZrAbe6E0gUYUPMZSg31YzQtGwZPexW9KRFZwkduPfi
HOlAUTOFHNQcj7w29ZLIi1/8RtJGC/XtSlAcdS1rMUuLjaCav6sP0dUnau9kQ0rb
gMzpl8WDPaFkz31GywcOBOvDDQKSio7839B6Y3Zq2LdEpF9Gw92LiBAfsnjnPL2D
yVRrPdOP5mEnEvIi+5kGDXtxDngJGjBTPAIAjeD/VDY6gJmds/2feuhTQtPhXhaU
QVlynkcT76oQlQU9zhWkalNvnPe2S66KjCLcrpC22UHzXFOayluQSf1tFiw4xxGq
b2lQE1MRK+96N+SMYiAYjzjnJ+2r+C3Y28W3AgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUCcboR5vQVu9nmwovN2fVeddORTkwHwYDVR0jBBgwFoAUC1pBO2b0rGl6ZckA
gocxnclukbswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hY2QxYzg2
ZmM4ZjZmYjg1OGNmMjhmMDdjZGI5MTY0YzRkMmE3Nzk5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84M2NmNzViNi1mNjVjLTQ5ZjUtYWE3MS1kYmUzNTk3
ZjljYTUvMGVlZTNjYjAzNmE4NTRhNmExOGFkNmI4ZTY4NjcxZGViZWY4M2I5Mi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzgzY2Y3NWI2LWY2NWMtNDlmNS1hYTcxLWRiZTM1
OTdmOWNhNS9hY2QxYzg2ZmM4ZjZmYjg1OGNmMjhmMDdjZGI5MTY0YzRkMmE3Nzk5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAO4UDANBgkqhkiG9w0BAQsFAAOCAQEAcCjGRfuhsPuaI50N
hZcRuKQeg/hSDt2RfdryBx43Va/RognFIEwzCSxLgXaATkuijPxTOjtfd8hy5eLu
xUsg0QHQSTrq+BQHS1HrMqzVKhUKDihrYAG7F6PnPU2XGCQlchBNXaiTw4mYDCMK
4FptVgDHbyyw/t/G9FtPDsHVRWmtefjD3JHz27YmlLIdwNhTnANOmNaaoqEn1oCu
3xemunEViYltsE+xLfSy8h3qemWlmX2+HFLudzddwXvvBc3k92WenNbuE0kuCtyN
TmPMp+erT/3c7+sHAk9dEOxsmtlueWwR5la0uSLpVB02V5Zd4N59OlRLid7I8Zp4
6Hr3AQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org