Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa
File:                     bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa (raw, json)
Hash identifier:          xTzWhL7dY5dggpj1SbKPwfX10bCPgN+U6MiB87pLRJE=
Subject key identifier:   7E:38:05:4F:91:A7:4E:E4:65:9D:D5:74:7C:D4:A6:FA:F6:53:29:1C
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       242904
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa
Signing time:             Wed 13 Sep 2023 10:59:16 +0000
ROA not before:           Tue 12 Sep 2023 10:59:16 +0000
ROA not after:            Sat 13 Sep 2025 10:59:16 +0000
asID:                     264830
IP address blocks:        2803:2c0:f200::/41 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369796 (0x242904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Sep 12 10:59:16 2023 GMT
            Not After : Sep 13 10:59:16 2025 GMT
        Subject: CN=bf02cb610690a1d325baa3a7d99086b8376b9a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:1e:c8:0e:28:b3:75:04:2e:93:2c:60:2d:
                    1b:58:da:64:d3:02:b2:a2:03:15:9c:58:13:11:36:
                    7a:b1:ef:73:0d:f5:b4:56:83:d7:95:d0:4e:8e:12:
                    de:80:ea:df:54:b4:21:ca:20:a9:1c:59:54:24:54:
                    1a:c8:58:44:cc:55:fd:6b:1c:6f:f4:15:95:10:aa:
                    f9:f9:08:1e:5f:e1:71:bf:93:cb:2e:d1:95:36:b2:
                    84:a9:7c:b4:2c:9c:fc:5e:6a:e9:c2:1a:82:14:9a:
                    0d:aa:df:8a:03:a8:12:d3:d3:21:99:e0:a9:b3:2b:
                    e4:71:e2:ac:30:a7:61:a9:64:1f:57:89:3b:5d:5a:
                    c6:64:dc:bc:27:3c:bc:e5:e0:c7:80:1c:89:e1:29:
                    00:6d:a4:91:94:69:98:17:35:47:10:2e:f2:3c:0d:
                    13:6e:6d:59:37:4c:27:d1:fd:52:1b:07:05:02:b1:
                    b4:11:c9:0e:ca:25:d4:e0:84:25:0e:32:aa:e6:eb:
                    fb:24:c0:9b:a7:20:98:68:22:8e:21:79:a2:30:6d:
                    7c:16:d5:95:bf:f8:24:9e:0a:61:a1:b5:1b:63:b4:
                    9f:8d:16:97:f4:27:3b:f9:70:0c:fe:14:d5:90:58:
                    b7:89:bd:34:4c:aa:9f:5a:6d:ce:5c:c8:e4:65:4a:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:38:05:4F:91:A7:4E:E4:65:9D:D5:74:7C:D4:A6:FA:F6:53:29:1C
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/bf02cb610690a1d325baa3a7d99086b8376b9a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0:f200::/41

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:60:6e:8f:ea:0c:c5:67:a1:68:b2:a5:9a:3b:90:ab:32:
         81:45:ba:41:ce:3d:ac:76:8b:e1:90:df:38:bc:dc:43:ad:15:
         82:71:c0:22:64:fc:49:ef:72:f4:23:f9:61:65:bf:7a:1d:84:
         3a:90:95:d6:c2:65:41:f7:be:39:c4:61:2f:dc:5f:6c:60:b3:
         ba:d9:cf:04:fd:af:bd:0e:d9:e2:37:9a:ae:2f:19:37:86:73:
         d9:be:2d:5c:92:99:66:5f:91:bf:a2:f8:88:31:78:40:7d:77:
         8a:86:9d:3f:d3:00:cf:50:3f:9c:34:53:d9:ee:12:23:16:86:
         04:89:d5:3a:bb:cf:4b:91:0f:36:e6:65:46:5f:4f:29:c1:54:
         5a:2b:75:72:60:5a:17:28:fd:b0:33:4e:68:57:94:1c:21:89:
         ea:53:85:93:d5:c5:74:8f:29:9f:dd:8d:7f:58:91:6d:25:01:
         fb:b0:ec:ff:cb:b8:74:40:ff:7f:fe:a3:9a:c9:82:f3:c1:61:
         f6:36:ee:a9:99:5c:7e:01:55:11:7e:f1:b2:5d:6f:fc:0f:0d:
         c3:4b:e9:1f:87:54:c6:46:82:22:08:8b:f8:5c:21:83:50:2d:
         76:6f:dc:7f:32:2f:4c:b7:cf:f0:08:64:ee:71:a2:a8:4a:1b:
         d2:1f:c2:1d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJCkEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MTk5MWY0MGRhYjI4MWIyOTVjM2NjNWQ2OTE0OTM2NTVmYzdlOGQwHhcNMjMwOTEy
MTA1OTE2WhcNMjUwOTEzMTA1OTE2WjAzMTEwLwYDVQQDEyhiZjAyY2I2MTA2OTBh
MWQzMjViYWEzYTdkOTkwODZiODM3NmI5YTRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq6QeyA4os3UELpMsYC0bWNpk0wKyogMVnFgTETZ6se9zDfW0
VoPXldBOjhLegOrfVLQhyiCpHFlUJFQayFhEzFX9axxv9BWVEKr5+QgeX+Fxv5PL
LtGVNrKEqXy0LJz8XmrpwhqCFJoNqt+KA6gS09MhmeCpsyvkceKsMKdhqWQfV4k7
XVrGZNy8Jzy85eDHgByJ4SkAbaSRlGmYFzVHEC7yPA0Tbm1ZN0wn0f1SGwcFArG0
EckOyiXU4IQlDjKq5uv7JMCbpyCYaCKOIXmiMG18FtWVv/gkngphobUbY7SfjRaX
9Cc7+XAM/hTVkFi3ib00TKqfWm3OXMjkZUqFgwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFH44BU+Rp07kZZ3VdHzUpvr2UykcMB8GA1UdIwQYMBaAFKP5NihuxsziMi3w
JbHIZ3Rjm7eTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkxOTkx
ZjQwZGFiMjgxYjI5NWMzY2M1ZDY5MTQ5MzY1NWZjN2U4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2JhOTc4ZWItOGJiNy00MzI4LWIyOWQtODM5ZWVm
ZWUzNjgzL2JmMDJjYjYxMDY5MGExZDMyNWJhYTNhN2Q5OTA4NmI4Mzc2YjlhNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYmE5NzhlYi04YmI3LTQzMjgtYjI5ZC04Mzll
ZWZlZTM2ODMvNDkxOTkxZjQwZGFiMjgxYjI5NWMzY2M1ZDY5MTQ5MzY1NWZjN2U4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBygDAsDyADANBgkqhkiG9w0BAQsFAAOCAQEAP7xgbo/qDMVn
oWiypZo7kKsygUW6Qc49rHaL4ZDfOLzcQ60VgnHAImT8Se9y9CP5YWW/eh2EOpCV
1sJlQfe+OcRhL9xfbGCzutnPBP2vvQ7Z4jeari8ZN4Zz2b4tXJKZZl+Rv6L4iDF4
QH13ioadP9MAz1A/nDRT2e4SIxaGBInVOrvPS5EPNuZlRl9PKcFUWit1cmBaFyj9
sDNOaFeUHCGJ6lOFk9XFdI8pn92Nf1iRbSUB+7Ds/8u4dED/f/6jmsmC88Fh9jbu
qZlcfgFVEX7xsl1v/A8Nw0vpH4dUxkaCIgiL+Fwhg1Atdm/cfzIvTLfP8Ahk7nGi
qEob0h/CHQ==
-----END CERTIFICATE-----