Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/65cfe9fac28bac24639474ccf7a4d40c1ea905f7.roa
File:                     65cfe9fac28bac24639474ccf7a4d40c1ea905f7.roa (raw, json)
Hash identifier:          wDLEFLCRCD0y8DH9R13SKf51Rr0zwgZmRl4MxXVyfJg=
Subject key identifier:   13:4A:3B:B6:7C:59:01:C2:7D:46:FB:5D:1C:48:18:93:47:55:89:42
Certificate issuer:       /CN=47b26b4cc424b80b0e574677390a5e2698d3886d
Certificate serial:       0F6830
Authority key identifier: 2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/65cfe9fac28bac24639474ccf7a4d40c1ea905f7.roa
Signing time:             Thu 02 Nov 2023 16:09:35 +0000
ROA not before:           Thu 02 Nov 2023 16:09:34 +0000
ROA not after:            Sun 02 Nov 2025 16:09:34 +0000
asID:                     265685
IP address blocks:        2803:11c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009712 (0xf6830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b26b4cc424b80b0e574677390a5e2698d3886d
        Validity
            Not Before: Nov  2 16:09:34 2023 GMT
            Not After : Nov  2 16:09:34 2025 GMT
        Subject: CN=65cfe9fac28bac24639474ccf7a4d40c1ea905f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:51:98:02:e7:1e:bf:fa:9f:f5:92:b8:6d:
                    da:1d:0e:08:28:cd:99:25:63:4b:a4:6d:42:73:89:
                    80:4b:74:25:45:0e:61:f9:c4:c1:d0:0d:2a:2d:2f:
                    ef:34:da:66:ac:f9:9b:2e:24:46:d5:d4:5f:eb:cc:
                    ed:41:64:37:74:c6:f4:c6:2b:84:d6:f3:a5:43:15:
                    fe:f4:5e:3c:11:bd:ed:30:cb:f4:f1:d2:14:02:f9:
                    35:57:10:d2:8b:bc:2a:a0:4f:c7:de:36:1f:e9:f5:
                    f2:f7:2e:f4:c4:ac:6a:1a:c3:97:d8:e1:fc:fa:53:
                    4f:97:cb:a5:21:31:e6:2a:f8:ab:9c:0c:ad:d4:a3:
                    33:91:4e:bb:22:ac:f8:0e:2a:1f:4f:df:08:88:73:
                    ed:3c:e2:7e:a5:6c:a7:20:d4:05:c0:e2:af:f3:9f:
                    36:31:6f:03:7b:0d:e2:85:22:68:ca:34:e5:98:66:
                    26:dd:66:2e:bb:54:78:32:f2:33:7e:0c:c7:15:30:
                    2b:d6:d4:df:c3:e2:7c:29:aa:b1:ac:dd:cd:de:9e:
                    bc:32:02:08:86:ce:09:d4:46:74:1e:53:e8:d4:91:
                    c4:3c:3e:0d:07:1c:35:aa:ec:34:99:88:07:49:2e:
                    0e:17:ea:2f:d8:f5:ed:f9:40:88:9d:3e:da:51:bd:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4A:3B:B6:7C:59:01:C2:7D:46:FB:5D:1C:48:18:93:47:55:89:42
            X509v3 Authority Key Identifier:
                keyid:2A:4F:D1:6B:51:87:4D:E8:DE:72:FA:FE:BF:D5:BB:89:98:8B:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b26b4cc424b80b0e574677390a5e2698d3886d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/65cfe9fac28bac24639474ccf7a4d40c1ea905f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffecd954-8a15-4c38-ad18-aaef8f175896/47b26b4cc424b80b0e574677390a5e2698d3886d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:11c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:04:6f:34:a1:1c:c2:bb:ad:f5:1c:0e:69:33:e4:9a:06:f4:
         6f:0d:86:82:12:f2:75:78:5a:69:fa:ef:1a:78:b5:d0:45:2b:
         f0:0e:42:2c:c5:1e:c4:d5:c8:a6:09:73:9e:aa:95:7e:06:dd:
         d4:23:1b:85:07:06:bb:8f:5b:1c:df:56:a5:1f:b1:8f:e9:98:
         40:cc:28:08:0c:e4:e2:01:dc:ec:61:d0:d8:19:3f:48:df:b7:
         ce:73:44:bc:ca:14:f4:27:e5:3a:b3:a8:81:93:38:f9:b4:f4:
         7f:17:87:ef:12:13:a0:52:0e:2e:eb:97:b1:b0:d1:0f:97:b4:
         a5:6a:76:9d:0b:5a:f2:77:c2:61:24:98:22:8a:3e:11:37:07:
         f3:33:39:53:23:fe:b3:e9:f2:46:b6:89:ff:b0:d6:06:fd:9c:
         f8:cc:64:0c:41:69:45:e9:8f:41:b9:af:d4:cf:5d:5a:77:59:
         41:88:41:36:9b:fe:2e:b1:24:49:be:b8:52:76:97:22:10:b6:
         69:b7:24:f1:22:d0:9e:e0:2b:4b:16:b7:5b:8c:6b:fe:75:cc:
         dc:f6:87:46:66:8b:47:ea:b1:d1:8c:eb:0f:3e:8e:a5:19:62:
         e4:4b:5d:6a:aa:2e:97:50:af:7a:75:3a:cd:7f:22:33:51:08:
         dd:a2:17:14
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDD2gwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ3
YjI2YjRjYzQyNGI4MGIwZTU3NDY3NzM5MGE1ZTI2OThkMzg4NmQwHhcNMjMxMTAy
MTYwOTM0WhcNMjUxMTAyMTYwOTM0WjAzMTEwLwYDVQQDEyg2NWNmZTlmYWMyOGJh
YzI0NjM5NDc0Y2NmN2E0ZDQwYzFlYTkwNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhfBRmALnHr/6n/WSuG3aHQ4IKM2ZJWNLpG1Cc4mAS3QlRQ5h
+cTB0A0qLS/vNNpmrPmbLiRG1dRf68ztQWQ3dMb0xiuE1vOlQxX+9F48Eb3tMMv0
8dIUAvk1VxDSi7wqoE/H3jYf6fXy9y70xKxqGsOX2OH8+lNPl8ulITHmKvirnAyt
1KMzkU67Iqz4DiofT98IiHPtPOJ+pWynINQFwOKv8582MW8Dew3ihSJoyjTlmGYm
3WYuu1R4MvIzfgzHFTAr1tTfw+J8KaqxrN3N3p68MgIIhs4J1EZ0HlPo1JHEPD4N
Bxw1quw0mYgHSS4OF+ov2PXt+UCInT7aUb1TJQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFBNKO7Z8WQHCfUb7XRxIGJNHVYlCMB8GA1UdIwQYMBaAFCpP0WtRh03o3nL6
/r/Vu4mYi9y+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDdiMjZi
NGNjNDI0YjgwYjBlNTc0Njc3MzkwYTVlMjY5OGQzODg2ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZlY2Q5NTQtOGExNS00YzM4LWFkMTgtYWFlZjhm
MTc1ODk2LzY1Y2ZlOWZhYzI4YmFjMjQ2Mzk0NzRjY2Y3YTRkNDBjMWVhOTA1Zjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmVjZDk1NC04YTE1LTRjMzgtYWQxOC1hYWVm
OGYxNzU4OTYvNDdiMjZiNGNjNDI0YjgwYjBlNTc0Njc3MzkwYTVlMjY5OGQzODg2
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDEcAwDQYJKoZIhvcNAQELBQADggEBAFkEbzShHMK7rfUc
Dmkz5JoG9G8NhoIS8nV4Wmn67xp4tdBFK/AOQizFHsTVyKYJc56qlX4G3dQjG4UH
BruPWxzfVqUfsY/pmEDMKAgM5OIB3Oxh0NgZP0jft85zRLzKFPQn5TqzqIGTOPm0
9H8Xh+8SE6BSDi7rl7Gw0Q+XtKVqdp0LWvJ3wmEkmCKKPhE3B/MzOVMj/rPp8ka2
if+w1gb9nPjMZAxBaUXpj0G5r9TPXVp3WUGIQTab/i6xJEm+uFJ2lyIQtmm3JPEi
0J7gK0sWt1uMa/51zNz2h0Zmi0fqsdGM6w8+jqUZYuRLXWqqLpdQr3p1Os1/IjNR
CN2iFxQ=
-----END CERTIFICATE-----