Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/3808513cb5f74759590148ad076b1eadf66e56b5.roa
File:                     3808513cb5f74759590148ad076b1eadf66e56b5.roa (raw, json)
Hash identifier:          wKnPJ1CG7FS6B8ml06tlY8cJP8rbbpzf0kUvvurU/oY=
Subject key identifier:   55:0D:31:19:DE:9B:6D:5C:76:3D:6E:49:FC:04:20:25:85:16:76:45
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       0E7BC4
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/3808513cb5f74759590148ad076b1eadf66e56b5.roa
Signing time:             Sun 25 Feb 2024 20:18:30 +0000
ROA not before:           Sun 25 Feb 2024 20:18:30 +0000
ROA not after:            Wed 25 Feb 2026 20:18:30 +0000
asID:                     272812
IP address blocks:        2803:f890::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949188 (0xe7bc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Feb 25 20:18:30 2024 GMT
            Not After : Feb 25 20:18:30 2026 GMT
        Subject: CN=3808513cb5f74759590148ad076b1eadf66e56b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:2b:4b:8e:e7:56:c0:9d:4f:f1:15:42:23:
                    64:1a:f1:66:b5:6f:13:8e:25:59:50:20:7a:3c:a2:
                    99:f5:26:f3:01:2c:67:cb:16:8c:2f:26:d0:7e:f2:
                    15:4f:0b:6f:08:83:73:5a:7c:9e:12:6b:1a:fe:82:
                    ab:25:47:85:27:8b:e8:20:49:55:26:d8:f2:de:21:
                    df:08:6e:a3:d2:2f:bc:a8:56:ee:77:c2:88:d0:f3:
                    3b:59:0d:ad:5e:17:60:e9:6a:73:93:ad:fb:b5:0f:
                    9b:3a:a1:9e:9a:6f:b4:a7:d5:cb:e0:d6:57:f8:f2:
                    8b:81:ec:b2:af:a8:53:d1:b0:53:d3:24:37:66:bb:
                    4c:5b:4c:be:71:62:63:55:55:e6:65:95:93:f1:8a:
                    7a:83:62:72:c0:34:e9:16:33:78:db:a2:75:96:9c:
                    34:ca:38:25:b2:a3:e5:1a:62:2e:cd:19:5f:d0:1c:
                    eb:7d:b4:fd:78:f6:2d:e3:ef:c1:c9:8f:9a:e3:9b:
                    9e:d2:7c:ec:52:80:ea:a4:6f:85:84:71:c2:8c:a6:
                    cc:2d:8d:4b:03:22:4f:da:a8:a4:d9:74:51:7f:32:
                    e6:ef:43:98:e0:fa:11:88:88:b5:6e:d8:f2:ea:a5:
                    4f:da:15:5e:4f:10:08:05:30:e3:d6:5c:a9:e7:90:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:31:19:DE:9B:6D:5C:76:3D:6E:49:FC:04:20:25:85:16:76:45
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/3808513cb5f74759590148ad076b1eadf66e56b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:44:c3:1f:18:d3:5e:8a:fc:db:d5:9a:0c:f4:cf:4e:f1:5a:
         67:44:97:e1:07:76:be:60:2b:7e:5f:c9:17:41:16:d2:98:3c:
         17:18:d0:19:2a:4e:aa:8b:6f:24:a5:9b:f7:89:91:dd:a0:fe:
         2c:2f:3e:58:77:b1:4c:29:1d:2a:f6:bb:80:71:09:59:2c:26:
         15:32:db:2c:ed:70:0a:9c:6a:b3:71:90:06:22:a4:64:ef:49:
         f7:90:9a:a9:9d:fc:36:ee:0f:ea:68:ff:ca:52:d1:75:19:98:
         fa:5c:ba:bb:fb:ce:0e:9d:86:29:33:65:0f:b5:9d:c2:9d:5a:
         c1:d7:01:04:08:6e:f1:11:85:c9:60:68:ef:24:32:b3:57:74:
         ed:29:1f:cc:39:c1:3c:87:c7:98:d9:e8:10:a7:12:1c:5b:9d:
         0b:e0:fb:a0:47:77:fa:ce:0d:bd:f1:61:ef:26:ea:83:99:c5:
         18:22:27:52:56:be:bd:23:5c:ca:7c:34:d9:76:da:12:fa:73:
         a8:a3:5c:79:8d:67:a5:a8:33:73:60:56:cb:02:b2:29:90:08:
         f9:7f:a5:0c:22:db:a8:ec:26:53:27:10:0f:b3:66:bc:71:39:
         2c:b3:49:9b:14:eb:01:df:f6:27:0b:d6:e4:f6:76:b9:df:85:
         e9:79:4b:5c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDDnvEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVj
NDQ4YmVkODg3NDcwMWM5ZTY5MTU4NWJmMjY4NmUwYjdhNWUzNmUwHhcNMjQwMjI1
MjAxODMwWhcNMjYwMjI1MjAxODMwWjAzMTEwLwYDVQQDEygzODA4NTEzY2I1Zjc0
NzU5NTkwMTQ4YWQwNzZiMWVhZGY2NmU1NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqGQrS47nVsCdT/EVQiNkGvFmtW8TjiVZUCB6PKKZ9SbzASxn
yxaMLybQfvIVTwtvCINzWnyeEmsa/oKrJUeFJ4voIElVJtjy3iHfCG6j0i+8qFbu
d8KI0PM7WQ2tXhdg6Wpzk637tQ+bOqGemm+0p9XL4NZX+PKLgeyyr6hT0bBT0yQ3
ZrtMW0y+cWJjVVXmZZWT8Yp6g2JywDTpFjN426J1lpw0yjglsqPlGmIuzRlf0Bzr
fbT9ePYt4+/ByY+a45ue0nzsUoDqpG+FhHHCjKbMLY1LAyJP2qik2XRRfzLm70OY
4PoRiIi1btjy6qVP2hVeTxAIBTDj1lyp55D3uQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFFUNMRnem21cdj1uSfwEICWFFnZFMB8GA1UdIwQYMBaAFOmWadEWPmV/bcG8
9eWJZ/NZUcBOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWM0NDhi
ZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTVlY2JlN2QtNDg3ZS00ZDg0LWFjZTgtNWRkYWZi
ZjU0MWYyLzM4MDg1MTNjYjVmNzQ3NTk1OTAxNDhhZDA3NmIxZWFkZjY2ZTU2YjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNWVjYmU3ZC00ODdlLTRkODQtYWNlOC01ZGRh
ZmJmNTQxZjIvNWM0NDhiZWQ4ODc0NzAxYzllNjkxNTg1YmYyNjg2ZTBiN2E1ZTM2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBCgD+JAAMA0GCSqGSIb3DQEBCwUAA4IBAQAGRMMfGNNeivzb
1ZoM9M9O8VpnRJfhB3a+YCt+X8kXQRbSmDwXGNAZKk6qi28kpZv3iZHdoP4sLz5Y
d7FMKR0q9ruAcQlZLCYVMtss7XAKnGqzcZAGIqRk70n3kJqpnfw27g/qaP/KUtF1
GZj6XLq7+84OnYYpM2UPtZ3CnVrB1wEECG7xEYXJYGjvJDKzV3TtKR/MOcE8h8eY
2egQpxIcW50L4PugR3f6zg298WHvJuqDmcUYIidSVr69I1zKfDTZdtoS+nOoo1x5
jWelqDNzYFbLArIpkAj5f6UMItuo7CZTJxAPs2a8cTkss0mbFOsB3/YnC9bk9na5
34XpeUtc
-----END CERTIFICATE-----