Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/8411ecf5405ad060cbad2598c27ac0c24212e265.roa
File:                     8411ecf5405ad060cbad2598c27ac0c24212e265.roa (raw, json)
Hash identifier:          REl0j+li5A9yArOE/TyNJeGKV0mFvj/e1AwEYsRxkts=
Subject key identifier:   B5:44:DB:02:02:B5:BD:46:55:19:31:65:BE:B1:40:7F:BE:0F:EB:0E
Certificate issuer:       /CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
Certificate serial:       287AC2
Authority key identifier: 42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/8411ecf5405ad060cbad2598c27ac0c24212e265.roa
Signing time:             Mon 18 Mar 2024 19:05:39 +0000
ROA not before:           Mon 18 Mar 2024 19:05:39 +0000
ROA not after:            Wed 18 Mar 2026 19:05:39 +0000
asID:                     265722
IP address blocks:        2803:adc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2652866 (0x287ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992fc30e4ae72d0bf9ff0f801bf4718ce1867356
        Validity
            Not Before: Mar 18 19:05:39 2024 GMT
            Not After : Mar 18 19:05:39 2026 GMT
        Subject: CN=8411ecf5405ad060cbad2598c27ac0c24212e265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:dd:0a:7c:b1:7f:cc:a4:3c:d9:96:e3:e4:
                    68:cf:bb:01:1b:b1:97:e4:11:bd:b0:bd:93:57:f5:
                    5a:44:43:c6:fe:83:af:f8:99:0c:18:f7:7a:a1:51:
                    54:21:c5:4b:62:3c:89:b0:b6:5b:53:ab:82:3c:5a:
                    3e:62:9e:b2:0b:42:3c:ab:b3:be:c9:55:7c:da:d1:
                    19:66:e3:c3:c5:68:a7:6b:ed:02:09:50:08:ae:24:
                    a3:1c:6e:6d:18:cc:e7:bd:7b:62:51:91:07:24:5b:
                    f2:15:5f:3f:0e:22:f4:b0:66:a0:83:61:ab:12:3c:
                    4c:28:80:66:89:13:b9:f1:54:19:9d:c9:63:91:1e:
                    ad:f7:f0:88:6a:db:2c:6d:9c:ed:a0:6d:51:29:3e:
                    b0:79:26:79:b1:c5:99:a3:a8:8c:f8:55:1f:df:74:
                    48:e4:82:18:85:dc:67:9e:bc:ee:00:cd:25:d0:74:
                    b3:94:6a:cf:84:15:77:d8:fd:98:18:37:cf:2e:d9:
                    31:bd:c5:87:e2:14:f9:a0:bd:f6:88:84:f1:ea:df:
                    e6:36:57:83:37:a4:83:23:8b:7b:40:70:1d:fd:a8:
                    26:48:31:c9:5d:53:ca:b1:aa:2c:27:f6:54:f2:e2:
                    63:b6:bc:2e:d8:cf:89:f4:87:ec:07:6f:0d:48:16:
                    2f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:DB:02:02:B5:BD:46:55:19:31:65:BE:B1:40:7F:BE:0F:EB:0E
            X509v3 Authority Key Identifier:
                keyid:42:FE:70:36:F9:4C:D2:6F:3D:77:69:DB:F5:0D:EF:C0:51:DC:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/8411ecf5405ad060cbad2598c27ac0c24212e265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f97604-3cdb-48ab-a511-177ab281944a/992fc30e4ae72d0bf9ff0f801bf4718ce1867356.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:adc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:0f:46:e3:68:e1:c3:20:61:9d:6c:3e:70:57:fe:f6:0c:c2:
         99:63:28:fb:33:6c:b3:52:a4:40:9a:2f:d9:f4:5a:2e:95:7d:
         ad:9c:0c:4e:6c:59:92:42:dd:f9:52:bc:cb:68:19:62:fd:53:
         81:70:22:81:19:aa:99:05:77:73:9b:8d:77:7c:b4:fb:fa:9f:
         c0:57:44:e1:6b:f1:c4:2e:1c:87:8b:b9:e3:38:f2:f1:b4:22:
         c0:5a:ea:f7:47:f0:48:8c:c3:70:b4:c4:18:4f:b7:83:5e:97:
         df:2f:20:c2:77:dd:f7:2f:b0:63:21:2d:eb:c7:74:02:07:96:
         8c:c8:0c:b8:b0:9f:69:bb:33:4f:10:f7:e5:9e:d7:c6:92:0a:
         f5:0e:04:b3:d1:24:5c:88:6f:8b:f2:59:5d:3a:5f:c8:5d:04:
         6a:51:43:b0:dd:c9:5f:2b:fd:b6:a8:d9:51:84:46:d6:a3:52:
         dc:fd:ea:a5:67:b4:25:6a:e1:1e:71:a3:bd:38:2e:ea:89:5f:
         3f:86:f4:4e:b1:2c:d8:71:5c:23:49:fe:b5:55:c3:24:aa:93:
         92:c4:08:d0:a1:5e:26:d8:d5:cc:16:b2:34:7d:2e:88:0a:40:
         6e:37:40:be:01:f6:e0:d4:3e:34:ce:42:c8:82:00:c1:75:45:
         51:e1:ac:0b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDKHrCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
MmZjMzBlNGFlNzJkMGJmOWZmMGY4MDFiZjQ3MThjZTE4NjczNTYwHhcNMjQwMzE4
MTkwNTM5WhcNMjYwMzE4MTkwNTM5WjAzMTEwLwYDVQQDEyg4NDExZWNmNTQwNWFk
MDYwY2JhZDI1OThjMjdhYzBjMjQyMTJlMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhhDdCnyxf8ykPNmW4+Roz7sBG7GX5BG9sL2TV/VaREPG/oOv
+JkMGPd6oVFUIcVLYjyJsLZbU6uCPFo+Yp6yC0I8q7O+yVV82tEZZuPDxWina+0C
CVAIriSjHG5tGMznvXtiUZEHJFvyFV8/DiL0sGagg2GrEjxMKIBmiRO58VQZnclj
kR6t9/CIatssbZztoG1RKT6weSZ5scWZo6iM+FUf33RI5IIYhdxnnrzuAM0l0HSz
lGrPhBV32P2YGDfPLtkxvcWH4hT5oL32iITx6t/mNleDN6SDI4t7QHAd/agmSDHJ
XVPKsaosJ/ZU8uJjtrwu2M+J9IfsB28NSBYvTwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLVE2wICtb1GVRkxZb6xQH++D+sOMB8GA1UdIwQYMBaAFEL+cDb5TNJvPXdp
2/UN78BR3A5NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTkyZmMz
MGU0YWU3MmQwYmY5ZmYwZjgwMWJmNDcxOGNlMTg2NzM1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTNmOTc2MDQtM2NkYi00OGFiLWE1MTEtMTc3YWIy
ODE5NDRhLzg0MTFlY2Y1NDA1YWQwNjBjYmFkMjU5OGMyN2FjMGMyNDIxMmUyNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lM2Y5NzYwNC0zY2RiLTQ4YWItYTUxMS0xNzdh
YjI4MTk0NGEvOTkyZmMzMGU0YWU3MmQwYmY5ZmYwZjgwMWJmNDcxOGNlMTg2NzM1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDrcAwDQYJKoZIhvcNAQELBQADggEBAE4PRuNo4cMgYZ1s
PnBX/vYMwpljKPszbLNSpECaL9n0Wi6Vfa2cDE5sWZJC3flSvMtoGWL9U4FwIoEZ
qpkFd3ObjXd8tPv6n8BXROFr8cQuHIeLueM48vG0IsBa6vdH8EiMw3C0xBhPt4Ne
l98vIMJ33fcvsGMhLevHdAIHlozIDLiwn2m7M08Q9+We18aSCvUOBLPRJFyIb4vy
WV06X8hdBGpRQ7DdyV8r/bao2VGERtajUtz96qVntCVq4R5xo704LuqJXz+G9E6x
LNhxXCNJ/rVVwySqk5LECNChXibY1cwWsjR9LogKQG43QL4B9uDUPjTOQsiCAMF1
RVHhrAs=
-----END CERTIFICATE-----