Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/d8dd0804a0f71fe225e701be97903dbfac4c5a07.roa
File:                     d8dd0804a0f71fe225e701be97903dbfac4c5a07.roa (raw, json)
Hash identifier:          gNMUOFE9A5e/qKgaPcuxxwyXxeLrQ89M0Vwh5lTuq88=
Subject key identifier:   07:F3:A7:49:28:20:48:41:13:8D:5C:AC:8E:53:B7:2D:D6:7D:AC:85
Certificate issuer:       /CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
Certificate serial:       17DCA2
Authority key identifier: 3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/d8dd0804a0f71fe225e701be97903dbfac4c5a07.roa
Signing time:             Tue 03 Oct 2023 14:16:36 +0000
ROA not before:           Mon 02 Oct 2023 14:16:36 +0000
ROA not after:            Fri 03 Oct 2025 15:16:36 +0000
asID:                     264685
IP address blocks:        2803:340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563810 (0x17dca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
        Validity
            Not Before: Oct  2 14:16:36 2023 GMT
            Not After : Oct  3 15:16:36 2025 GMT
        Subject: CN=d8dd0804a0f71fe225e701be97903dbfac4c5a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:73:b5:d1:a2:8d:1b:42:e6:98:e9:2f:d9:
                    8a:cf:fa:a1:19:74:5d:2a:8a:2b:96:49:d7:11:d9:
                    c1:f3:62:5f:c1:85:fe:fb:15:e6:6b:cb:6d:2b:c8:
                    2e:a8:14:36:87:1b:75:12:aa:5a:f6:1e:88:92:1c:
                    d2:97:e7:d3:6d:8b:86:c7:4e:c8:a6:14:57:b6:a6:
                    59:f9:91:7b:cb:40:81:b6:9d:e1:88:13:3d:e8:86:
                    43:aa:c0:55:c7:c9:f0:fa:dd:01:94:62:9f:d3:13:
                    65:8e:66:7c:72:52:f7:91:a3:71:dd:b6:8a:41:4d:
                    78:bc:10:44:f1:9a:9b:05:0e:39:68:6a:5f:e3:ab:
                    02:14:c4:1d:a3:95:b0:87:97:bb:69:df:0d:16:03:
                    0f:09:70:44:9e:f4:6a:b0:3b:64:0a:30:3a:3a:cc:
                    7a:b6:7e:28:a2:b2:9f:80:43:88:1c:34:ff:97:e6:
                    e7:c5:b3:8c:5e:8e:1f:06:44:d0:93:1d:a4:3f:ae:
                    e4:57:ea:4e:14:9d:37:1d:4f:4d:29:65:57:9d:8e:
                    43:c5:14:f6:5b:32:a8:8f:2b:60:2a:8d:9b:16:cc:
                    5b:2d:e5:46:97:4d:a2:50:9b:36:36:67:9a:8e:95:
                    68:b7:3e:73:f4:c0:ea:d1:7f:ce:f0:e3:4f:07:d6:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:A7:49:28:20:48:41:13:8D:5C:AC:8E:53:B7:2D:D6:7D:AC:85
            X509v3 Authority Key Identifier:
                keyid:3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/d8dd0804a0f71fe225e701be97903dbfac4c5a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:c1:57:fd:13:1c:97:17:9a:7d:8f:6c:92:bb:90:60:2b:
         84:ea:38:65:76:9d:9e:e2:11:b4:48:21:95:c3:63:b2:0a:f5:
         70:ba:93:96:e2:ab:5f:00:9d:bb:2b:81:3f:f8:39:27:16:f7:
         56:73:25:62:5c:d7:e4:90:ce:f5:41:6d:2b:26:c7:82:8a:e7:
         6f:00:34:1b:5f:99:1a:ee:0f:84:47:02:a7:68:fd:74:e7:91:
         3a:14:b0:11:96:04:7b:62:a5:55:77:b8:10:3f:6b:1f:7b:1f:
         ef:0e:71:da:fe:ee:8e:50:78:78:6b:e2:15:a5:77:4e:d2:d8:
         79:c9:5b:83:7e:6a:5d:ea:1c:be:ed:bf:cc:25:0b:65:bb:47:
         04:34:d9:e3:e7:a0:59:9a:18:15:8d:37:af:e8:bb:14:5d:81:
         fa:71:20:3d:f0:87:16:04:13:0d:d7:fd:67:e5:d3:de:c5:2c:
         ab:4d:cf:34:d6:a1:a3:ca:dd:4a:cf:99:56:d1:5d:03:21:0d:
         60:9f:23:be:95:0b:a8:e7:8e:42:7a:91:26:bf:16:99:3c:1c:
         09:02:00:32:2f:99:4a:30:72:0c:6e:6b:d0:15:25:70:26:10:
         6c:47:2a:d9:2a:46:0e:48:4b:a8:0c:53:d9:79:1a:e9:17:1c:
         27:3b:c1:45
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDF9yiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
ZTM5ZDdiNDBjYTkxZGUyYmIxYmRhMjM4MGFmOTc3ZWY5NTY1ZWYwHhcNMjMxMDAy
MTQxNjM2WhcNMjUxMDAzMTUxNjM2WjAzMTEwLwYDVQQDEyhkOGRkMDgwNGEwZjcx
ZmUyMjVlNzAxYmU5NzkwM2RiZmFjNGM1YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsJ5ztdGijRtC5pjpL9mKz/qhGXRdKoorlknXEdnB82JfwYX+
+xXma8ttK8guqBQ2hxt1Eqpa9h6IkhzSl+fTbYuGx07IphRXtqZZ+ZF7y0CBtp3h
iBM96IZDqsBVx8nw+t0BlGKf0xNljmZ8clL3kaNx3baKQU14vBBE8ZqbBQ45aGpf
46sCFMQdo5Wwh5e7ad8NFgMPCXBEnvRqsDtkCjA6Osx6tn4oorKfgEOIHDT/l+bn
xbOMXo4fBkTQkx2kP67kV+pOFJ03HU9NKWVXnY5DxRT2WzKojytgKo2bFsxbLeVG
l02iUJs2NmeajpVotz5z9MDq0X/O8ONPB9YZTQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAfzp0koIEhBE41crI5Tty3WfayFMB8GA1UdIwQYMBaAFDy9KIizu2XVXZV/
EYj8/LqdPj6BMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVlMzlk
N2I0MGNhOTFkZTJiYjFiZGEyMzgwYWY5NzdlZjk1NjVlZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZhMmJhYjAtMzQyZS00ZTIzLWI2MzQtN2FmN2Qz
Y2FkMzg0L2Q4ZGQwODA0YTBmNzFmZTIyNWU3MDFiZTk3OTAzZGJmYWM0YzVhMDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmEyYmFiMC0zNDJlLTRlMjMtYjYzNC03YWY3
ZDNjYWQzODQvMmVlMzlkN2I0MGNhOTFkZTJiYjFiZGEyMzgwYWY5NzdlZjk1NjVl
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDA0AwDQYJKoZIhvcNAQELBQADggEBABegwVf9ExyXF5p9
j2ySu5BgK4TqOGV2nZ7iEbRIIZXDY7IK9XC6k5biq18AnbsrgT/4OScW91ZzJWJc
1+SQzvVBbSsmx4KK528ANBtfmRruD4RHAqdo/XTnkToUsBGWBHtipVV3uBA/ax97
H+8Ocdr+7o5QeHhr4hWld07S2HnJW4N+al3qHL7tv8wlC2W7RwQ02ePnoFmaGBWN
N6/ouxRdgfpxID3whxYEEw3X/Wfl097FLKtNzzTWoaPK3UrPmVbRXQMhDWCfI76V
C6jnjkJ6kSa/Fpk8HAkCADIvmUowcgxua9AVJXAmEGxHKtkqRg5IS6gMU9l5GukX
HCc7wUU=
-----END CERTIFICATE-----