Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/5d210dbc6147f45e6832349b5c3de0ba10e94888.roa
File:                     5d210dbc6147f45e6832349b5c3de0ba10e94888.roa (raw, json)
Hash identifier:          FuaZ9g5pB+gDOxIfFybfnhSOnWJLHzqhvp85Dc7B9Yg=
Subject key identifier:   3E:2F:CB:A4:AA:E5:84:6E:89:F5:42:A2:D1:6A:D6:A2:98:86:6A:6A
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       28B00A
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/5d210dbc6147f45e6832349b5c3de0ba10e94888.roa
Signing time:             Tue 09 Apr 2024 16:52:56 +0000
ROA not before:           Tue 09 Apr 2024 16:52:56 +0000
ROA not after:            Thu 09 Apr 2026 16:52:56 +0000
asID:                     269799
IP address blocks:        2803:8420:ff00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666506 (0x28b00a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Apr  9 16:52:56 2024 GMT
            Not After : Apr  9 16:52:56 2026 GMT
        Subject: CN=5d210dbc6147f45e6832349b5c3de0ba10e94888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:7f:fc:8d:10:75:55:07:65:f9:c3:4e:5e:
                    b3:d2:37:dd:4f:f3:45:c0:f3:ec:2a:24:6a:64:d9:
                    74:33:a1:7e:be:08:a9:6b:d9:96:91:d9:57:32:c4:
                    da:ca:c4:65:59:5b:32:fa:0e:92:e9:eb:34:b1:74:
                    d8:df:ff:67:1b:8d:48:85:20:8c:fb:23:ea:f3:83:
                    46:35:c7:68:7c:6b:49:56:9c:6d:03:30:4b:71:46:
                    4c:f9:09:f2:a8:14:0b:c1:46:7f:05:17:50:31:25:
                    81:12:ca:66:c6:d6:ee:40:6b:8e:db:fb:e0:c2:46:
                    cd:a4:67:c3:2e:5a:78:3b:8f:38:ce:37:cd:23:f2:
                    91:6d:00:a3:1c:35:49:ad:3e:75:17:6e:3f:49:a4:
                    98:b0:9a:c6:7a:45:a9:ef:75:dd:31:28:c4:3a:19:
                    c5:31:b0:ce:a9:a0:d4:32:a4:45:9c:be:18:fb:04:
                    7b:f0:97:2f:c2:8e:7b:3b:54:e2:8f:61:12:d0:b8:
                    4e:db:e1:a8:a8:a9:71:6e:dd:cb:67:50:b8:ec:1c:
                    62:4b:0c:84:93:bd:b2:0a:6f:5c:b7:0c:7c:f1:97:
                    0b:10:f1:d9:61:c5:58:ba:b8:db:af:d9:5a:7c:cb:
                    df:8b:7b:0c:05:5b:bb:e6:d1:57:cf:ae:a1:da:3c:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:CB:A4:AA:E5:84:6E:89:F5:42:A2:D1:6A:D6:A2:98:86:6A:6A
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/5d210dbc6147f45e6832349b5c3de0ba10e94888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:c1:5c:6a:40:4d:90:87:30:43:9a:e9:d5:9d:d7:e1:cc:
         41:a7:d5:e9:75:3e:0f:d1:5b:96:15:77:ef:90:bc:98:4a:66:
         22:c1:8d:d5:79:de:c1:09:06:2d:5d:af:27:f8:ff:79:83:3e:
         81:99:f5:b6:d9:46:a2:d6:4d:ff:aa:6b:52:10:08:6e:0a:73:
         ca:22:a4:91:13:21:01:b8:09:dc:0b:65:71:e8:23:e1:2f:0b:
         2c:3f:2f:77:44:c8:e4:c0:fc:33:ea:b5:dd:52:ba:ef:3f:c5:
         30:a5:34:91:09:ce:4b:8f:5a:5e:5d:64:d1:33:a7:ea:4f:17:
         14:f8:9d:55:52:82:aa:6a:23:ff:b5:df:1d:23:5f:90:03:02:
         9f:31:da:0d:63:2a:90:b6:a0:6d:d8:d6:a0:ce:dc:ed:4d:c5:
         71:5e:96:db:13:21:7f:6f:47:1e:b1:1e:f6:08:77:b2:dc:52:
         43:9c:f0:23:89:e3:66:ec:4b:a8:9a:8d:e1:48:36:ae:cf:c6:
         5b:e4:9e:af:19:b2:01:ff:24:45:68:44:a9:18:40:cd:a1:2b:
         ea:8b:b2:19:7d:8f:2f:21:1c:0d:f0:f6:bf:0e:cf:94:b4:9e:
         c0:73:26:65:dd:b0:22:84:1c:ed:a4:3b:55:00:07:43:1e:9f:
         fa:91:27:a1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDKLAKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
NmNhNDEwZTlkNGQ2NjA5YTk2NjgwOTc2MzEzM2QzNmE5MjJiODIwHhcNMjQwNDA5
MTY1MjU2WhcNMjYwNDA5MTY1MjU2WjAzMTEwLwYDVQQDEyg1ZDIxMGRiYzYxNDdm
NDVlNjgzMjM0OWI1YzNkZTBiYTEwZTk0ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl0B//I0QdVUHZfnDTl6z0jfdT/NFwPPsKiRqZNl0M6F+vgip
a9mWkdlXMsTaysRlWVsy+g6S6es0sXTY3/9nG41IhSCM+yPq84NGNcdofGtJVpxt
AzBLcUZM+QnyqBQLwUZ/BRdQMSWBEspmxtbuQGuO2/vgwkbNpGfDLlp4O484zjfN
I/KRbQCjHDVJrT51F24/SaSYsJrGekWp73XdMSjEOhnFMbDOqaDUMqRFnL4Y+wR7
8Jcvwo57O1Tij2ES0LhO2+GoqKlxbt3LZ1C47BxiSwyEk72yCm9ctwx88ZcLEPHZ
YcVYurjbr9lafMvfi3sMBVu75tFXz66h2jx3xwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFD4vy6Sq5YRuifVCotFq1qKYhmpqMB8GA1UdIwQYMBaAFGHJZcaafzMxVG7p
0Egpgt9FnHY5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE2Y2E0
MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI4YmU2ODItZWE1Ni00NzQ3LWExMzItOGI1MDUw
OWY4MDhhLzVkMjEwZGJjNjE0N2Y0NWU2ODMyMzQ5YjVjM2RlMGJhMTBlOTQ4ODgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjhiZTY4Mi1lYTU2LTQ3NDctYTEzMi04YjUw
NTA5ZjgwOGEvMGE2Y2E0MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgDhCD/MA0GCSqGSIb3DQEBCwUAA4IBAQBjmsFcakBNkIcw
Q5rp1Z3X4cxBp9XpdT4P0VuWFXfvkLyYSmYiwY3Ved7BCQYtXa8n+P95gz6BmfW2
2Uai1k3/qmtSEAhuCnPKIqSREyEBuAncC2Vx6CPhLwssPy93RMjkwPwz6rXdUrrv
P8UwpTSRCc5Lj1peXWTRM6fqTxcU+J1VUoKqaiP/td8dI1+QAwKfMdoNYyqQtqBt
2NagztztTcVxXpbbEyF/b0cesR72CHey3FJDnPAjieNm7Euomo3hSDauz8Zb5J6v
GbIB/yRFaESpGEDNoSvqi7IZfY8vIRwN8Pa/Ds+UtJ7AcyZl3bAihBztpDtVAAdD
Hp/6kSeh
-----END CERTIFICATE-----