Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/41fa25ba4601a228fc1f676457937f91852799d0.roa
File:                     41fa25ba4601a228fc1f676457937f91852799d0.roa (raw, json)
Hash identifier:          vEjadfZyeSssGwXCgV+0TERDQdfU+ApOghNqW+rEKFM=
Subject key identifier:   2F:B5:59:D0:96:0D:4F:0B:95:B7:3D:C2:F5:1D:F0:1B:0A:10:C9:CC
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       0D7D17
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/41fa25ba4601a228fc1f676457937f91852799d0.roa
Signing time:             Wed 24 Mar 2021 14:40:20 +0000
ROA not before:           Wed 24 Mar 2021 14:40:20 +0000
ROA not after:            Tue 24 Mar 2026 14:40:20 +0000
asID:                     264668
IP address blocks:        2803:2540::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883991 (0xd7d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Mar 24 14:40:20 2021 GMT
            Not After : Mar 24 14:40:20 2026 GMT
        Subject: CN=41fa25ba4601a228fc1f676457937f91852799d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:de:f0:f5:77:6b:f7:72:0b:2d:7d:96:e0:
                    7d:88:f6:82:2a:7b:b4:3e:90:c9:8b:c2:6e:7a:c9:
                    af:dc:f6:cb:52:9d:f7:f2:8d:a8:aa:1e:9e:fa:78:
                    7c:07:6e:55:87:ab:05:8d:9a:ea:27:9c:04:4c:eb:
                    2a:e2:30:95:03:e1:6a:19:71:66:a5:62:03:74:4a:
                    4d:56:a7:cb:3d:a5:1b:29:8b:6d:a2:6e:04:b3:4f:
                    6b:9a:8d:69:60:0a:63:2a:b3:1a:ab:8a:93:14:05:
                    8f:c4:1c:1a:13:50:ba:b2:cc:85:5f:cc:3d:11:7d:
                    29:d0:70:5b:ef:3b:98:96:b9:48:f8:cc:d7:00:52:
                    c1:f3:2d:a6:c0:d4:ab:25:68:66:1d:05:24:9d:24:
                    85:05:91:58:b9:f1:9a:a0:93:e6:1c:0e:4a:e7:e6:
                    c1:c8:3e:55:47:50:6e:91:e6:af:29:3e:ed:3f:42:
                    df:70:9d:a7:5f:c3:01:40:8d:1a:42:a3:c1:24:04:
                    7d:c3:8a:78:e2:f5:b9:eb:81:c6:ae:03:c5:15:e2:
                    0f:dd:d4:64:5f:5a:dc:3d:52:d9:38:fb:81:19:23:
                    08:a4:7d:a6:f9:31:5e:72:32:8d:aa:a2:0a:32:80:
                    9d:03:6d:f1:75:fb:4f:87:ac:26:ff:58:f3:28:02:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B5:59:D0:96:0D:4F:0B:95:B7:3D:C2:F5:1D:F0:1B:0A:10:C9:CC
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/41fa25ba4601a228fc1f676457937f91852799d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:20:4c:ec:22:6c:af:79:b8:c1:fe:27:71:e1:21:ea:03:
         28:25:42:4e:50:a5:fb:1d:5d:e3:b5:11:1a:1d:a6:70:4c:c8:
         61:7a:4d:a9:90:ca:95:83:a6:b0:6f:f4:bf:f3:7f:b9:71:03:
         3d:38:f9:a9:e1:77:50:a4:fe:ce:8c:5f:29:a8:2c:ff:7b:e9:
         e4:a1:65:11:ab:41:c7:5c:60:ff:f9:cd:04:0e:37:72:57:29:
         1f:f8:27:63:e9:15:4e:25:c9:b6:39:9b:49:e1:ab:9f:9e:9b:
         d0:d3:67:f2:27:6b:5c:03:a9:9a:77:be:9e:63:1e:4d:d4:c1:
         c6:05:3d:4a:69:64:4f:89:91:45:f4:66:42:7a:95:f9:6a:bb:
         7b:db:60:34:53:eb:b4:8c:b6:31:6d:a1:ce:53:66:73:2e:f4:
         2a:79:85:cd:76:17:ef:ff:4f:59:17:9b:c7:93:83:de:ad:d6:
         61:b0:13:9b:2a:20:7c:df:a7:e0:72:9b:f2:7e:be:16:1a:37:
         6d:95:ca:c1:e2:6d:80:1d:8b:c3:15:e8:c3:e5:d0:72:b2:84:
         b3:29:63:2f:6b:12:54:62:02:8a:77:1e:4e:72:2b:50:03:48:
         75:2a:53:f8:cd:81:9f:dc:94:bb:e4:11:1f:a8:64:ac:a6:56:
         f5:11:d0:5b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDX0XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjEwMzI0
MTQ0MDIwWhcNMjYwMzI0MTQ0MDIwWjAzMTEwLwYDVQQDEyg0MWZhMjViYTQ2MDFh
MjI4ZmMxZjY3NjQ1NzkzN2Y5MTg1Mjc5OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgEXe8PV3a/dyCy19luB9iPaCKnu0PpDJi8Juesmv3PbLUp33
8o2oqh6e+nh8B25Vh6sFjZrqJ5wETOsq4jCVA+FqGXFmpWIDdEpNVqfLPaUbKYtt
om4Es09rmo1pYApjKrMaq4qTFAWPxBwaE1C6ssyFX8w9EX0p0HBb7zuYlrlI+MzX
AFLB8y2mwNSrJWhmHQUknSSFBZFYufGaoJPmHA5K5+bByD5VR1BukeavKT7tP0Lf
cJ2nX8MBQI0aQqPBJAR9w4p44vW564HGrgPFFeIP3dRkX1rcPVLZOPuBGSMIpH2m
+TFecjKNqqIKMoCdA23xdftPh6wm/1jzKAIvYwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFC+1WdCWDU8Llbc9wvUd8BsKEMnMMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjLzQxZmEyNWJhNDYwMWEyMjhmYzFmNjc2NDU3OTM3ZjkxODUyNzk5ZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDJUAwDQYJKoZIhvcNAQELBQADggEBABlMIEzsImyvebjB
/idx4SHqAyglQk5QpfsdXeO1ERodpnBMyGF6TamQypWDprBv9L/zf7lxAz04+anh
d1Ck/s6MXymoLP976eShZRGrQcdcYP/5zQQON3JXKR/4J2PpFU4lybY5m0nhq5+e
m9DTZ/Ina1wDqZp3vp5jHk3UwcYFPUppZE+JkUX0ZkJ6lflqu3vbYDRT67SMtjFt
oc5TZnMu9Cp5hc12F+//T1kXm8eTg96t1mGwE5sqIHzfp+Bym/J+vhYaN22VysHi
bYAdi8MV6MPl0HKyhLMpYy9rElRiAop3Hk5yK1ADSHUqU/jNgZ/clLvkER+oZKym
VvUR0Fs=
-----END CERTIFICATE-----