Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/31c51c9178bb523bc17d01fbfad1b20659d4fc75.roa
File:                     31c51c9178bb523bc17d01fbfad1b20659d4fc75.roa (raw, json)
Hash identifier:          5ms0pCaXCL3rNf6LajTvf4jcdj6bAEP6QK/axHafZzQ=
Subject key identifier:   A7:57:9A:64:3B:0A:EE:EA:D6:2B:BC:11:EF:9C:44:43:98:74:21:D4
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       122636
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/31c51c9178bb523bc17d01fbfad1b20659d4fc75.roa
Signing time:             Mon 25 Mar 2024 08:30:03 +0000
ROA not before:           Mon 25 Mar 2024 08:30:03 +0000
ROA not after:            Wed 25 Mar 2026 08:30:03 +0000
asID:                     264776
IP address blocks:        2803:c8c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189430 (0x122636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 25 08:30:03 2024 GMT
            Not After : Mar 25 08:30:03 2026 GMT
        Subject: CN=31c51c9178bb523bc17d01fbfad1b20659d4fc75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:6a:56:b1:91:c4:4d:c3:1b:cc:93:41:2c:
                    67:b8:7e:62:f9:2c:06:74:b5:b0:05:cb:71:8e:8c:
                    95:4d:00:f6:92:2d:23:7f:56:06:48:e5:b9:d1:04:
                    24:14:ce:d6:d4:56:97:f3:19:5d:6a:61:fa:34:c4:
                    2f:71:53:79:13:2a:94:dc:f0:e0:95:ed:28:c6:95:
                    14:25:f1:92:bc:e1:91:a2:46:7b:3c:ff:c8:ec:ba:
                    e4:34:00:0d:8b:73:25:f1:db:3e:ee:85:56:75:13:
                    9c:94:13:6a:1d:47:39:5b:47:27:1b:05:70:b7:4e:
                    3e:32:86:f1:fe:76:f8:0d:c8:a4:ad:47:92:34:a1:
                    8b:99:20:b4:71:38:ca:7e:c6:ac:91:0a:34:bd:cb:
                    76:19:79:b5:a6:2d:0a:c8:84:ea:c3:98:38:bb:b2:
                    ef:82:43:4b:6f:48:b3:44:3c:5c:33:d4:07:41:29:
                    e8:28:5a:25:05:41:db:fd:34:72:3c:32:16:e7:87:
                    33:b9:c9:9b:cc:52:84:a4:66:e8:02:23:25:89:fe:
                    78:bd:60:89:d7:b9:ab:0e:08:0d:97:1a:10:86:3f:
                    7d:65:2c:b2:81:af:18:ec:7a:d9:7f:28:41:4a:17:
                    63:3c:51:bc:75:ed:0d:8b:14:94:67:bb:2d:35:20:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:9A:64:3B:0A:EE:EA:D6:2B:BC:11:EF:9C:44:43:98:74:21:D4
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/31c51c9178bb523bc17d01fbfad1b20659d4fc75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:e3:04:56:f0:78:d5:8b:ee:7f:80:62:fd:71:fa:04:a7:
         08:f5:45:28:89:65:29:dd:89:d2:8c:da:b7:58:da:05:7b:dc:
         82:44:86:a3:f5:93:83:1f:59:3e:10:e7:0e:d5:e3:c0:66:3c:
         43:62:fa:6f:47:43:3f:a2:a9:47:b2:79:1c:af:5d:ff:e9:12:
         25:c3:d1:23:de:68:d0:4d:ea:31:d2:ec:c5:c2:13:79:88:d1:
         5c:86:28:d2:90:6d:fb:2b:63:ef:e6:4f:12:c9:ff:de:ce:ad:
         8e:78:73:ba:45:97:e0:1a:00:2f:f6:34:1f:de:a2:94:24:44:
         e8:59:42:fc:45:f8:9b:60:bd:e2:3b:f9:e6:7f:1e:03:01:a4:
         66:ef:98:a5:7f:b1:9d:6c:91:ee:28:91:bd:ad:15:c1:35:35:
         14:ff:52:96:d6:e7:88:11:74:29:b2:81:d8:74:84:7b:6a:50:
         f8:bd:59:2a:e5:1c:ff:19:78:37:b2:cc:1f:1a:7a:8f:d9:ab:
         e1:3f:82:0e:b6:c4:a1:01:5b:65:37:52:9d:2f:07:d5:31:35:
         df:6c:c6:4f:92:91:63:cc:ca:89:f2:0c:6f:c6:94:d8:07:42:
         38:97:43:f0:2f:cf:56:e0:e0:0c:63:e3:1d:d8:fb:ef:d4:1e:
         e1:68:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----