Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/036f2c69033f0b58c1d99d0c8d3298e73fa8d7d1.roa
File:                     036f2c69033f0b58c1d99d0c8d3298e73fa8d7d1.roa (raw, json)
Hash identifier:          50T0oKrPG0e0+mmbijtBgtxaHDYTpheeSBO3NerfKzk=
Subject key identifier:   B4:1D:D8:CF:C5:D9:34:7C:D0:26:B6:60:19:7C:01:4B:78:05:75:0A
Certificate issuer:       /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial:       0A83FE
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/036f2c69033f0b58c1d99d0c8d3298e73fa8d7d1.roa
Signing time:             Mon 18 Mar 2024 19:07:35 +0000
ROA not before:           Mon 18 Mar 2024 19:07:35 +0000
ROA not after:            Wed 18 Mar 2026 19:07:35 +0000
asID:                     272854
IP address blocks:        2803:c290:200::/40 maxlen: 40
                          2803:c290:300::/40 maxlen: 40
                          2803:c290:400::/40 maxlen: 40
                          2803:c290:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689150 (0xa83fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Validity
            Not Before: Mar 18 19:07:35 2024 GMT
            Not After : Mar 18 19:07:35 2026 GMT
        Subject: CN=036f2c69033f0b58c1d99d0c8d3298e73fa8d7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:2d:20:5c:9a:5f:50:cb:24:85:9b:0d:ac:
                    49:c5:ef:1a:23:ec:47:b3:0e:cb:8f:ea:33:eb:dc:
                    ee:1f:5d:03:24:a2:a4:ba:01:a2:0a:2b:78:3c:04:
                    c5:95:6a:3b:b6:e0:9d:ad:cd:71:2e:84:97:8d:7f:
                    4c:77:03:11:24:a9:2b:bd:eb:50:c4:5a:50:15:12:
                    1e:f4:39:95:10:90:1b:27:97:20:52:78:42:35:22:
                    ad:08:05:5f:92:dc:35:bf:e8:0c:f4:e8:65:f1:56:
                    4d:c7:f1:b4:15:99:02:f8:f8:e4:f2:40:50:6c:97:
                    a4:9b:c8:4a:8a:e6:5f:e2:bf:75:ad:f8:c2:e7:33:
                    d2:b1:68:3c:2f:37:ef:72:77:0f:00:c4:12:c2:91:
                    31:0c:9a:da:11:31:93:22:68:c7:9a:dd:b6:ab:56:
                    6b:6e:32:95:d4:87:54:80:d4:53:27:88:ca:ac:c3:
                    c3:3b:a0:24:6a:cb:b5:60:57:d0:6d:70:cf:27:99:
                    b3:cc:6a:0c:4c:04:a4:74:ac:35:3f:8e:78:f3:c1:
                    a3:3e:d8:6e:0c:d2:c7:05:52:8f:f7:ff:6a:72:9b:
                    73:5c:f3:67:09:c9:b8:2f:4d:9a:97:54:d6:7a:e7:
                    a7:ae:46:12:79:12:21:5d:01:83:38:a5:19:dd:33:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1D:D8:CF:C5:D9:34:7C:D0:26:B6:60:19:7C:01:4B:78:05:75:0A
            X509v3 Authority Key Identifier:
                keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/036f2c69033f0b58c1d99d0c8d3298e73fa8d7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:200::-2803:c290:5ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:03:78:d4:bc:65:f0:6f:0d:11:ec:26:8c:69:34:ea:d0:
         25:13:e7:6a:5d:13:28:8f:d7:08:99:76:c9:e9:98:73:3b:54:
         2f:07:b5:40:ff:31:14:a4:7f:1c:90:d2:bf:70:b9:4c:bd:84:
         72:77:ae:36:46:5a:f6:54:97:a8:50:16:d3:c3:a3:38:2e:83:
         c0:63:53:e5:29:da:92:26:40:a9:b4:bb:c5:c4:30:d7:72:fb:
         33:a0:78:6f:67:aa:22:16:9f:02:21:b4:13:b1:79:22:14:30:
         b2:ea:1d:34:82:4e:93:62:59:80:da:37:42:b2:ee:d6:a8:ee:
         f6:64:64:86:49:b7:3a:25:46:c7:6c:db:e1:1e:cb:c6:bd:4d:
         c9:24:f7:cd:4e:12:82:e7:46:a6:d9:f8:83:96:2c:cb:7f:4d:
         d5:3e:7c:b0:c0:75:ea:74:7e:5a:99:b0:4d:f4:ff:78:65:2d:
         b5:13:4c:42:e9:e5:aa:1a:37:ac:97:54:74:31:e1:d6:9c:61:
         9b:e9:9f:77:d6:ee:6c:a7:78:10:06:45:c6:29:eb:02:9b:93:
         41:7a:68:a5:65:97:37:b6:f9:a6:f7:e0:5a:a6:77:1e:4d:f8:
         b3:38:b7:44:7f:5b:0e:76:c3:20:7e:be:be:fe:65:ec:e6:d7:
         71:87:19:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----