Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/39b3e70bdd690e98b49d010c19f0c0ad510c5568.roa
File:                     39b3e70bdd690e98b49d010c19f0c0ad510c5568.roa (raw, json)
Hash identifier:          n7cpHVgiP5nRO/z+qsQHvkEO9diYIhG/xq0bJLS7Mgw=
Subject key identifier:   38:A6:72:40:AF:AD:23:B5:40:14:66:36:32:37:6C:B9:A5:80:0B:43
Certificate issuer:       /CN=3467d0cdec2b9dd04215297fcdde668300dd3ccc
Certificate serial:       0262
Authority key identifier: AF:D3:2E:EC:AB:D5:DB:7A:88:0D:68:A0:A4:1A:13:0A:C8:D5:5D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3467d0cdec2b9dd04215297fcdde668300dd3ccc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/39b3e70bdd690e98b49d010c19f0c0ad510c5568.roa
Signing time:             Mon 06 Mar 2023 14:48:29 +0000
ROA not before:           Sun 05 Mar 2023 14:48:12 +0000
ROA not after:            Thu 06 Mar 2025 14:48:12 +0000
asID:                     272891
IP address blocks:        2803:c690::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3467d0cdec2b9dd04215297fcdde668300dd3ccc
        Validity
            Not Before: Mar  5 14:48:12 2023 GMT
            Not After : Mar  6 14:48:12 2025 GMT
        Subject: CN=39b3e70bdd690e98b49d010c19f0c0ad510c5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d5:61:18:82:9c:35:6b:41:2a:54:0b:4c:95:
                    1f:eb:0b:4f:e7:65:be:7d:fc:97:a4:54:73:d2:56:
                    62:09:39:41:1c:61:d2:7f:12:30:72:9c:4e:dd:ef:
                    5a:63:dd:5c:89:a0:31:87:5a:21:30:ac:eb:a2:d1:
                    7e:3d:10:4c:41:56:39:b7:f2:b2:7f:07:17:91:c7:
                    5a:ca:20:af:ec:25:5e:46:c0:68:95:ca:8c:43:d2:
                    3a:fc:4c:86:ff:7d:d3:c4:3e:c3:d6:a6:fe:8d:a7:
                    4e:48:e9:b6:f7:d9:b4:2c:da:e3:47:33:28:07:bb:
                    d2:e8:d7:44:c7:6f:5f:9a:72:f0:a9:7a:32:fa:27:
                    4d:d5:b0:e6:22:42:9d:e8:1e:aa:11:e5:ee:8a:57:
                    05:93:d5:80:17:61:4f:1b:28:50:6d:dc:7f:27:c7:
                    33:83:fe:a2:77:5b:dd:b7:f4:57:0e:e4:1a:cd:af:
                    00:7b:b7:b9:8e:36:0e:6b:6a:87:c4:6b:12:55:47:
                    40:c6:c9:85:31:fc:e7:4f:02:55:cb:5a:62:8e:20:
                    c1:a1:4d:6f:67:54:5b:1e:ee:6d:9f:28:1d:a3:a0:
                    f8:91:12:dc:55:28:6d:b0:d4:d6:b2:a1:b3:92:00:
                    a1:09:72:bf:7e:24:2a:a3:c6:17:42:5b:dd:8a:e0:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:72:40:AF:AD:23:B5:40:14:66:36:32:37:6C:B9:A5:80:0B:43
            X509v3 Authority Key Identifier:
                keyid:AF:D3:2E:EC:AB:D5:DB:7A:88:0D:68:A0:A4:1A:13:0A:C8:D5:5D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3467d0cdec2b9dd04215297fcdde668300dd3ccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/39b3e70bdd690e98b49d010c19f0c0ad510c5568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8907ba53-08d4-499c-b52b-0f7ea31ed023/3467d0cdec2b9dd04215297fcdde668300dd3ccc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c690::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:c8:c3:1b:43:cf:fd:04:a1:c9:50:02:95:16:cd:a8:54:
         b0:59:4c:b9:6b:a3:d3:cb:d0:46:82:03:da:0e:13:34:db:c9:
         ac:7d:bf:51:05:a7:03:c2:44:6d:f1:db:17:72:1e:20:e8:63:
         3f:2d:a5:db:d9:8c:77:eb:69:35:cc:d1:2a:96:a2:72:35:7d:
         2c:ff:e8:ff:02:a4:aa:11:f7:52:37:08:ca:13:60:d6:03:1c:
         80:84:37:80:e1:e7:79:b5:03:db:4a:41:0c:b6:08:dc:db:34:
         9c:d7:a7:ed:5a:45:5d:32:50:a9:43:2e:0c:ff:d1:c6:8a:1b:
         71:81:6b:1c:09:d3:54:ad:99:b4:0a:46:2a:36:2e:3e:15:ef:
         3b:ef:26:15:67:53:2a:ad:7d:b7:11:af:cd:53:db:b0:80:74:
         32:43:dd:f1:da:79:a3:cc:ed:f5:92:bb:95:14:2c:ff:04:e7:
         26:46:03:a1:1a:a7:a4:06:a6:3e:c5:a5:17:ac:e0:07:ce:fa:
         1f:5b:f4:ef:a9:db:2a:96:e5:f6:a3:61:1d:c3:c3:0a:c3:81:
         95:cb:5c:a8:87:bb:be:c1:38:5a:d2:79:8f:02:7d:9f:38:bf:
         8e:40:cb:65:4f:d1:cf:f5:50:e4:9c:b0:db:3b:d3:11:6a:36:
         56:76:d8:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ2
N2QwY2RlYzJiOWRkMDQyMTUyOTdmY2RkZTY2ODMwMGRkM2NjYzAeFw0yMzAzMDUx
NDQ4MTJaFw0yNTAzMDYxNDQ4MTJaMDMxMTAvBgNVBAMTKDM5YjNlNzBiZGQ2OTBl
OThiNDlkMDEwYzE5ZjBjMGFkNTEwYzU1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCB1WEYgpw1a0EqVAtMlR/rC0/nZb59/JekVHPSVmIJOUEcYdJ/
EjBynE7d71pj3VyJoDGHWiEwrOui0X49EExBVjm38rJ/BxeRx1rKIK/sJV5GwGiV
yoxD0jr8TIb/fdPEPsPWpv6Np05I6bb32bQs2uNHMygHu9Lo10THb1+acvCpejL6
J03VsOYiQp3oHqoR5e6KVwWT1YAXYU8bKFBt3H8nxzOD/qJ3W9239FcO5BrNrwB7
t7mONg5raofEaxJVR0DGyYUx/OdPAlXLWmKOIMGhTW9nVFse7m2fKB2joPiREtxV
KG2w1NayobOSAKEJcr9+JCqjxhdCW92K4BnJAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUOKZyQK+tI7VAFGY2MjdsuaWAC0MwHwYDVR0jBBgwFoAUr9Mu7KvV23qIDWig
pBoTCsjVXQIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zNDY3ZDBj
ZGVjMmI5ZGQwNDIxNTI5N2ZjZGRlNjY4MzAwZGQzY2NjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84OTA3YmE1My0wOGQ0LTQ5OWMtYjUyYi0wZjdlYTMx
ZWQwMjMvMzliM2U3MGJkZDY5MGU5OGI0OWQwMTBjMTlmMGMwYWQ1MTBjNTU2OC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzg5MDdiYTUzLTA4ZDQtNDk5Yy1iNTJiLTBmN2Vh
MzFlZDAyMy8zNDY3ZDBjZGVjMmI5ZGQwNDIxNTI5N2ZjZGRlNjY4MzAwZGQzY2Nj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAPGkDANBgkqhkiG9w0BAQsFAAOCAQEAHzzIwxtDz/0EoclQ
ApUWzahUsFlMuWuj08vQRoID2g4TNNvJrH2/UQWnA8JEbfHbF3IeIOhjPy2l29mM
d+tpNczRKpaicjV9LP/o/wKkqhH3UjcIyhNg1gMcgIQ3gOHnebUD20pBDLYI3Ns0
nNen7VpFXTJQqUMuDP/RxoobcYFrHAnTVK2ZtApGKjYuPhXvO+8mFWdTKq19txGv
zVPbsIB0MkPd8dp5o8zt9ZK7lRQs/wTnJkYDoRqnpAamPsWlF6zgB876H1v076nb
Kpbl9qNhHcPDCsOBlctcqIe7vsE4WtJ5jwJ9nzi/jkDLZU/Rz/VQ5Jyw2zvTEWo2
VnbYIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org