Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/764bfea3c038d85127617bb500e7ff9b4fc3b86a.roa
File:                     764bfea3c038d85127617bb500e7ff9b4fc3b86a.roa (raw, json)
Hash identifier:          WUol9ctGK0fO+tpTZvpinN1+PHN3Qv3KQq9I/xrAi+M=
Subject key identifier:   19:14:2B:09:A0:3C:78:98:F7:BA:2D:C2:FB:17:12:E8:4F:9C:2C:E2
Certificate issuer:       /CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
Certificate serial:       20D95D
Authority key identifier: 5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/764bfea3c038d85127617bb500e7ff9b4fc3b86a.roa
Signing time:             Mon 07 Aug 2023 15:36:19 +0000
ROA not before:           Sun 06 Aug 2023 15:36:19 +0000
ROA not after:            Thu 07 Aug 2025 15:36:19 +0000
asID:                     264824
IP address blocks:        2803:e360::/40 maxlen: 40
                          2803:e360:100::/40 maxlen: 40
                          2803:e360:200::/40 maxlen: 40
                          2803:e360:300::/40 maxlen: 40
                          2803:e360:400::/40 maxlen: 40
                          2803:e360:500::/40 maxlen: 40
                          2803:e360:600::/40 maxlen: 40
                          2803:e360:700::/40 maxlen: 40
                          2803:e360:800::/40 maxlen: 40
                          2803:e360:900::/40 maxlen: 40
                          2803:e360:a00::/40 maxlen: 40
                          2803:e360:b00::/40 maxlen: 40
                          2803:e360:c00::/40 maxlen: 40
                          2803:e360:d00::/40 maxlen: 40
                          2803:e360:e00::/40 maxlen: 40
                          2803:e360:f00::/40 maxlen: 40
                          2803:e360:1000::/40 maxlen: 40
                          2803:e360:1100::/40 maxlen: 40
                          2803:e360:1200::/40 maxlen: 40
                          2803:e360:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152797 (0x20d95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40e227e41eada75cd2ecb37649e56571e8b69d0
        Validity
            Not Before: Aug  6 15:36:19 2023 GMT
            Not After : Aug  7 15:36:19 2025 GMT
        Subject: CN=764bfea3c038d85127617bb500e7ff9b4fc3b86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:27:39:7f:4c:ae:05:74:ff:2a:41:eb:e1:
                    18:35:31:12:07:75:ba:b3:7d:94:0d:6a:11:58:15:
                    5c:61:2a:37:82:0e:af:52:a6:7d:95:03:bc:88:b1:
                    cd:42:61:31:bf:46:12:27:6b:75:4b:80:0a:48:0c:
                    f1:45:81:84:ba:f3:a4:d2:ee:26:51:fa:39:75:09:
                    d3:c6:2f:34:2d:5a:55:1d:a0:16:93:a2:eb:aa:cb:
                    e4:cb:b8:18:51:be:4c:c6:45:a5:c7:43:e8:86:1f:
                    41:3d:28:e8:0f:52:52:6e:92:38:a0:27:f9:0d:2c:
                    50:6c:77:c5:9c:5e:06:5c:3b:fd:84:92:cf:47:05:
                    8b:36:21:10:54:d6:58:29:c3:dc:b8:76:d0:c3:a0:
                    54:07:a7:f9:8d:d9:65:c2:70:1c:ff:dc:9f:83:4f:
                    f0:43:70:c5:18:77:4d:27:9f:0f:54:85:c7:72:9c:
                    69:b5:85:bf:18:b6:db:35:a7:b7:99:4c:32:da:5e:
                    06:57:3f:91:2a:f9:95:d3:5e:ec:4f:43:30:ae:64:
                    68:b9:f2:66:d8:8d:76:38:1e:a7:99:d4:1d:81:03:
                    2e:f7:14:8c:38:1a:73:c5:03:6f:63:ab:4a:70:70:
                    8e:d9:8d:b1:0a:8e:74:e1:ae:93:88:76:03:21:76:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:2B:09:A0:3C:78:98:F7:BA:2D:C2:FB:17:12:E8:4F:9C:2C:E2
            X509v3 Authority Key Identifier:
                keyid:5D:8F:F3:B4:F9:77:26:7C:21:68:67:BE:D7:80:2A:91:3F:B9:00:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a40e227e41eada75cd2ecb37649e56571e8b69d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/764bfea3c038d85127617bb500e7ff9b4fc3b86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5cdd6a-67a3-4b10-8d9e-5777c3d5c523/a40e227e41eada75cd2ecb37649e56571e8b69d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360::-2803:e360:13ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:7d:9a:83:8f:f3:06:ad:ee:91:30:86:24:81:ea:19:e5:
         23:76:fd:85:a8:cd:08:f5:b5:75:fa:cc:7c:ce:9d:19:a9:b4:
         87:60:97:4b:70:2f:ed:4c:c4:b3:ec:30:04:bb:a6:cd:db:cf:
         79:a7:e4:26:f0:89:93:69:86:9a:34:c6:70:4b:05:cf:3c:3a:
         5b:c5:54:a5:c1:4e:e4:e7:29:8d:37:df:89:ae:b7:a6:2e:bc:
         88:36:40:57:d8:60:e4:2b:f7:b6:21:22:15:89:d4:07:69:7c:
         1c:24:7f:8e:d8:f1:32:d1:bc:7b:cb:c8:ca:64:94:d3:f4:ae:
         d5:23:77:20:29:95:45:9b:8c:bf:23:3d:d0:3e:16:51:18:6f:
         2e:15:b6:e9:e4:ab:88:61:97:2f:46:a0:f4:2c:92:7f:d0:6c:
         d0:27:37:4e:16:bb:73:6f:f5:97:eb:78:fc:c1:4f:fc:17:c5:
         0c:42:d6:2e:5a:b8:8f:d5:b2:36:ee:54:62:14:a4:bb:05:34:
         51:34:3b:67:38:ca:97:ed:b3:cc:81:51:b5:76:2a:8a:bf:81:
         17:0e:98:51:68:c4:04:58:25:4c:79:98:64:85:14:05:f5:d6:
         f9:9d:43:a8:8b:49:e6:13:6f:0b:3e:42:ce:d4:51:6f:62:2a:
         30:32:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----