Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/403cb63a101b031b1c51fd61e5ab4a5036bff257.roa
File:                     403cb63a101b031b1c51fd61e5ab4a5036bff257.roa (raw, json)
Hash identifier:          m5Dbnxus55qCSabzyaTVG/VDngfycaQyMnPfB1P2WSI=
Subject key identifier:   1C:A4:CB:58:E6:F5:60:29:8D:66:8C:13:22:9C:12:70:35:A3:4D:84
Certificate issuer:       /CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
Certificate serial:       13E8EE
Authority key identifier: 68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/403cb63a101b031b1c51fd61e5ab4a5036bff257.roa
Signing time:             Wed 27 Dec 2023 07:30:00 +0000
ROA not before:           Wed 27 Dec 2023 07:30:00 +0000
ROA not after:            Fri 26 Dec 2025 07:30:00 +0000
asID:                     265850
IP address blocks:        2803:2a20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304814 (0x13e8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c356bf43c9220bb625d50596a7ec3c7542fb23
        Validity
            Not Before: Dec 27 07:30:00 2023 GMT
            Not After : Dec 26 07:30:00 2025 GMT
        Subject: CN=403cb63a101b031b1c51fd61e5ab4a5036bff257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:f2:8f:77:11:ff:b9:38:48:d1:f8:91:73:
                    b5:cf:49:f0:8d:8e:ff:5a:e2:c3:b2:00:8e:2a:82:
                    0c:af:ad:c6:e1:59:77:53:d1:b3:bd:80:a3:fb:82:
                    91:33:ae:5c:f8:ea:e3:0b:19:79:ef:28:38:dc:f5:
                    f4:65:68:e1:d9:4b:28:91:31:70:bb:ad:eb:3d:cc:
                    a0:86:0c:40:85:7e:89:de:08:9c:ea:82:00:eb:71:
                    91:6f:fa:5c:12:89:95:88:4a:51:44:8c:3d:22:0f:
                    39:dd:b3:59:64:62:4c:cc:e8:ac:22:23:c4:17:e8:
                    41:74:b1:21:1c:53:98:72:d9:0e:d3:c0:aa:67:e4:
                    86:bf:64:9c:d9:07:81:e0:cc:4f:1f:a9:b8:c4:b6:
                    bb:fb:cb:71:e2:04:12:3d:b9:c7:33:e5:4d:d4:ae:
                    8c:c5:13:e4:03:ce:bb:cf:4e:71:f6:41:f7:cb:c7:
                    17:31:0e:48:1a:7d:b0:2a:f8:2b:7e:76:06:56:6c:
                    d5:5c:ce:79:d8:4c:db:7b:d2:40:84:38:53:42:d1:
                    bd:64:60:a8:6c:9e:67:38:7c:dd:b2:3e:a8:76:53:
                    20:03:c1:62:ec:a5:fc:20:32:11:eb:5a:61:6a:c5:
                    cd:46:9f:4e:23:46:bb:09:3d:09:1f:27:49:ec:42:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:CB:58:E6:F5:60:29:8D:66:8C:13:22:9C:12:70:35:A3:4D:84
            X509v3 Authority Key Identifier:
                keyid:68:D5:F4:5A:FB:FD:05:72:58:30:FA:E5:30:66:98:91:22:81:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c356bf43c9220bb625d50596a7ec3c7542fb23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/403cb63a101b031b1c51fd61e5ab4a5036bff257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2d74705-4f2b-4ce4-be89-2bfdf3604e29/32c356bf43c9220bb625d50596a7ec3c7542fb23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:37:f8:d7:c2:53:39:ce:d1:0a:76:fe:df:1d:a1:b6:a0:c5:
         2c:d2:39:16:91:31:1c:cc:ff:9b:0a:8c:ef:99:63:80:1d:de:
         d8:06:4b:dc:9d:c6:ac:41:77:16:f2:d7:d7:19:b3:81:71:7f:
         ba:b8:80:87:f6:2f:4b:59:8c:78:d2:6c:04:dc:ca:7f:14:d7:
         65:57:3d:a8:2a:60:87:e4:d5:cf:45:08:66:42:73:71:ae:e2:
         0c:4f:ad:2b:4e:f9:e3:ed:e6:90:ec:ce:ca:94:c0:e6:74:1d:
         ef:75:f7:dd:7f:8b:99:0c:0f:c5:ea:fe:18:47:b9:e9:9e:3f:
         54:73:fb:06:5d:c8:d2:91:3e:11:41:78:44:51:0e:09:e8:05:
         2d:e9:2b:39:0a:be:f1:7a:23:2a:4f:5f:a3:ec:30:3c:4a:8c:
         78:96:31:41:d0:59:c7:75:82:99:4a:42:dd:85:42:fb:86:1c:
         9e:58:86:d6:02:38:70:ac:ff:ea:9a:05:43:3a:45:77:7e:43:
         01:52:f5:fd:10:88:44:09:c2:b8:d9:ad:f7:a4:b8:fa:02:11:
         fa:d2:5c:5b:c2:5e:c7:e1:d3:4d:38:27:0d:a6:e6:9a:97:ec:
         a2:86:88:52:e1:38:ff:c7:95:01:1e:eb:b6:be:6f:76:67:e4:
         cf:ad:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----