Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5f70909-e0d8-4186-911e-e8cf25998a38/fcfc3a2f5cf5c1995184843153161a3701cee30f.roa
File:                     fcfc3a2f5cf5c1995184843153161a3701cee30f.roa (raw, json)
Hash identifier:          ypAdDz1ICdp7CvceaCsnG/hoIM8nG5kWoz41waDn1Wc=
Subject key identifier:   AA:2A:79:51:09:CB:8F:BD:D3:C5:2B:BC:FF:71:1A:31:FA:CC:90:FA
Certificate issuer:       /CN=e3e1657f287ae47bdf3a7614ed840ca51f2c40c6
Certificate serial:       042E12
Authority key identifier: 31:BB:A5:81:90:90:CB:8A:0D:78:6F:EC:3C:A5:5D:C9:A9:D5:3C:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3e1657f287ae47bdf3a7614ed840ca51f2c40c6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5f70909-e0d8-4186-911e-e8cf25998a38/fcfc3a2f5cf5c1995184843153161a3701cee30f.roa
Signing time:             Fri 17 Nov 2023 04:54:36 +0000
ROA not before:           Fri 17 Nov 2023 04:54:36 +0000
ROA not after:            Mon 17 Nov 2025 04:54:36 +0000
asID:                     273011
IP address blocks:        2803:390:cac0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273938 (0x42e12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e1657f287ae47bdf3a7614ed840ca51f2c40c6
        Validity
            Not Before: Nov 17 04:54:36 2023 GMT
            Not After : Nov 17 04:54:36 2025 GMT
        Subject: CN=fcfc3a2f5cf5c1995184843153161a3701cee30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:8d:6c:17:87:25:e9:2a:55:76:7d:73:1f:
                    d5:4a:97:c4:bb:9b:c3:40:58:ed:6b:5e:9c:76:48:
                    b0:86:75:23:ee:b4:b3:c7:92:50:f4:2d:75:ea:f8:
                    44:50:5b:6c:13:3f:23:9e:c0:6c:27:19:5a:18:43:
                    0b:6a:a7:7d:a7:8f:f3:07:5f:d6:37:bd:b7:25:be:
                    db:ca:11:2b:f6:2b:99:eb:a2:12:31:17:64:65:54:
                    01:08:22:38:8e:bb:15:f6:94:4b:34:99:39:6a:5b:
                    b4:89:16:c2:ea:a3:4b:af:c8:10:05:31:d5:0e:e0:
                    f2:68:55:5d:9a:fc:6f:60:74:85:57:1c:0e:0c:8e:
                    17:39:d7:e3:8d:46:cc:ac:6b:54:60:ec:5e:b4:6b:
                    56:01:0e:2a:d4:a8:c8:45:b8:00:e7:30:d2:32:f4:
                    a0:bb:32:ce:5a:0f:28:8f:b4:18:90:18:19:e7:00:
                    e1:2d:9e:5e:2e:32:ef:d9:25:2a:1a:f9:9e:af:2f:
                    7d:67:48:c7:91:9a:ce:6b:fd:45:fe:dd:f5:6c:0a:
                    92:ea:54:a7:ff:d7:cd:f6:37:ca:5b:0f:a3:04:2b:
                    d2:6f:4d:93:75:bc:0c:bb:7d:56:eb:cb:43:6b:8e:
                    8c:ab:59:31:c8:d8:4d:25:52:c3:f7:9f:08:0b:f3:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2A:79:51:09:CB:8F:BD:D3:C5:2B:BC:FF:71:1A:31:FA:CC:90:FA
            X509v3 Authority Key Identifier:
                keyid:31:BB:A5:81:90:90:CB:8A:0D:78:6F:EC:3C:A5:5D:C9:A9:D5:3C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3e1657f287ae47bdf3a7614ed840ca51f2c40c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5f70909-e0d8-4186-911e-e8cf25998a38/fcfc3a2f5cf5c1995184843153161a3701cee30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5f70909-e0d8-4186-911e-e8cf25998a38/e3e1657f287ae47bdf3a7614ed840ca51f2c40c6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:390:cac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:dc:7f:20:bb:0d:67:d6:3c:6a:57:a2:85:ff:a4:0a:df:
         ef:12:0e:da:30:32:64:95:b7:ee:29:09:7a:a2:e4:5a:af:f2:
         94:d4:e0:1c:8b:1e:88:47:ec:99:f5:6f:ae:71:ca:a7:67:d8:
         40:a8:c7:b6:fe:1f:51:19:dc:63:22:87:60:1b:03:fb:9b:62:
         39:79:60:d7:9e:49:73:bd:94:eb:bb:b2:87:cf:26:0f:e1:fd:
         89:73:a4:24:34:48:9f:e2:79:cd:1a:3a:95:10:d1:ce:15:ba:
         40:ea:92:8e:82:4b:0b:e2:72:dc:af:fb:5c:75:cd:82:f2:3b:
         90:3b:7c:81:e8:b5:81:a4:16:2a:79:c8:54:d4:e2:e0:2a:96:
         5c:c4:71:d2:26:8b:aa:6a:c5:85:3f:4f:0c:1b:30:21:23:3b:
         0d:8f:a0:c8:16:be:92:91:1f:ec:8b:3e:ba:cf:34:02:cb:0c:
         5b:80:e9:94:4f:d9:7d:cb:1c:4a:f3:62:b9:a5:16:fa:d5:a6:
         18:e6:a0:de:2f:76:ca:58:c6:eb:5e:88:33:e4:a9:6f:39:2d:
         5d:d2:90:51:08:ca:66:2f:71:40:f9:e2:19:40:cf:70:eb:31:
         a7:76:89:99:1a:2c:d5:6f:ce:63:64:95:82:81:c8:5e:36:f6:
         71:70:e6:77
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBC4SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUz
ZTE2NTdmMjg3YWU0N2JkZjNhNzYxNGVkODQwY2E1MWYyYzQwYzYwHhcNMjMxMTE3
MDQ1NDM2WhcNMjUxMTE3MDQ1NDM2WjAzMTEwLwYDVQQDEyhmY2ZjM2EyZjVjZjVj
MTk5NTE4NDg0MzE1MzE2MWEzNzAxY2VlMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnNyNbBeHJekqVXZ9cx/VSpfEu5vDQFjta16cdkiwhnUj7rSz
x5JQ9C116vhEUFtsEz8jnsBsJxlaGEMLaqd9p4/zB1/WN723Jb7byhEr9iuZ66IS
MRdkZVQBCCI4jrsV9pRLNJk5alu0iRbC6qNLr8gQBTHVDuDyaFVdmvxvYHSFVxwO
DI4XOdfjjUbMrGtUYOxetGtWAQ4q1KjIRbgA5zDSMvSguzLOWg8oj7QYkBgZ5wDh
LZ5eLjLv2SUqGvmery99Z0jHkZrOa/1F/t31bAqS6lSn/9fN9jfKWw+jBCvSb02T
dbwMu31W68tDa46Mq1kxyNhNJVLD958IC/MHLwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFKoqeVEJy4+908UrvP9xGjH6zJD6MB8GA1UdIwQYMBaAFDG7pYGQkMuKDXhv
7DylXcmp1TyKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTNlMTY1
N2YyODdhZTQ3YmRmM2E3NjE0ZWQ4NDBjYTUxZjJjNDBjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjVmNzA5MDktZTBkOC00MTg2LTkxMWUtZThjZjI1
OTk4YTM4L2ZjZmMzYTJmNWNmNWMxOTk1MTg0ODQzMTUzMTYxYTM3MDFjZWUzMGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWY3MDkwOS1lMGQ4LTQxODYtOTExZS1lOGNm
MjU5OThhMzgvZTNlMTY1N2YyODdhZTQ3YmRmM2E3NjE0ZWQ4NDBjYTUxZjJjNDBj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgDA5DKwDANBgkqhkiG9w0BAQsFAAOCAQEAPrvcfyC7DWfW
PGpXooX/pArf7xIO2jAyZJW37ikJeqLkWq/ylNTgHIseiEfsmfVvrnHKp2fYQKjH
tv4fURncYyKHYBsD+5tiOXlg155Jc72U67uyh88mD+H9iXOkJDRIn+J5zRo6lRDR
zhW6QOqSjoJLC+Jy3K/7XHXNgvI7kDt8gei1gaQWKnnIVNTi4CqWXMRx0iaLqmrF
hT9PDBswISM7DY+gyBa+kpEf7Is+us80AssMW4DplE/ZfcscSvNiuaUW+tWmGOag
3i92yljG616IM+SpbzktXdKQUQjKZi9xQPniGUDPcOsxp3aJmRos1W/OY2SVgoHI
Xjb2cXDmdw==
-----END CERTIFICATE-----