Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed22f7ef-d8b8-4c02-9878-e3f561b71f77/6b37a857f8cb2bc88fd0bb4618703cf423c0f669.roa
File:                     6b37a857f8cb2bc88fd0bb4618703cf423c0f669.roa (raw, json)
Hash identifier:          XdePhKWGalrs42VKkc0gTt/S0pwv1sPiBx0oKj3+Nmk=
Subject key identifier:   D5:88:F4:E4:83:01:27:D1:9C:DB:7A:E3:5B:E5:C8:5E:F4:32:8D:D1
Certificate issuer:       /CN=cf68254f1c8d17e98c7043f677e1c1332f65a8e9
Certificate serial:       A548
Authority key identifier: 1A:30:71:19:65:F8:F7:EF:E7:0B:F0:22:1C:14:92:D0:CC:67:17:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf68254f1c8d17e98c7043f677e1c1332f65a8e9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed22f7ef-d8b8-4c02-9878-e3f561b71f77/6b37a857f8cb2bc88fd0bb4618703cf423c0f669.roa
Signing time:             Thu 17 Aug 2023 03:08:13 +0000
ROA not before:           Wed 16 Aug 2023 03:08:13 +0000
ROA not after:            Sun 17 Aug 2025 03:08:13 +0000
asID:                     273041
IP address blocks:        2801:1a5::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42312 (0xa548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf68254f1c8d17e98c7043f677e1c1332f65a8e9
        Validity
            Not Before: Aug 16 03:08:13 2023 GMT
            Not After : Aug 17 03:08:13 2025 GMT
        Subject: CN=6b37a857f8cb2bc88fd0bb4618703cf423c0f669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:a2:e1:7b:f2:01:d3:3c:96:22:65:10:e9:
                    c6:b1:ca:a6:b2:5c:af:ab:d6:7f:63:cf:e9:57:b3:
                    84:07:51:0a:35:9f:18:a3:a9:db:1d:f5:ef:cb:0f:
                    60:f6:6c:ad:72:c6:97:74:21:18:e6:e9:02:7c:16:
                    41:66:a3:89:7d:13:32:2e:7e:01:de:0e:62:f9:45:
                    e9:55:5e:e1:ce:da:4c:09:f8:5a:f0:7a:ee:24:69:
                    09:a8:58:fb:31:64:19:50:60:46:09:23:c7:36:b6:
                    0a:d5:13:a7:9f:70:83:f5:1b:fb:fd:59:66:85:9c:
                    00:41:0b:16:39:fe:a0:e8:ab:b8:4f:f1:8e:e2:fa:
                    79:0b:f8:7c:39:93:92:a4:c4:b0:a1:5a:eb:ef:86:
                    99:ee:fe:f5:85:d4:6d:7e:83:3b:76:3e:d4:0e:a4:
                    d7:a1:b8:b5:94:0d:92:db:25:be:3f:8f:14:ae:7a:
                    f3:27:ed:6d:fa:17:6f:3d:24:64:6e:66:73:54:de:
                    c1:77:0f:e1:08:49:95:1f:f3:6a:28:7c:9b:41:8e:
                    30:4b:c7:ad:ba:f2:6c:76:b1:82:3d:1e:8b:17:c7:
                    7c:ee:3d:03:4e:d5:31:77:ed:36:db:36:19:33:c8:
                    d7:7f:c6:64:1a:73:1c:5c:d3:c6:c2:da:1d:c4:0e:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:F4:E4:83:01:27:D1:9C:DB:7A:E3:5B:E5:C8:5E:F4:32:8D:D1
            X509v3 Authority Key Identifier:
                keyid:1A:30:71:19:65:F8:F7:EF:E7:0B:F0:22:1C:14:92:D0:CC:67:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf68254f1c8d17e98c7043f677e1c1332f65a8e9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed22f7ef-d8b8-4c02-9878-e3f561b71f77/6b37a857f8cb2bc88fd0bb4618703cf423c0f669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed22f7ef-d8b8-4c02-9878-e3f561b71f77/cf68254f1c8d17e98c7043f677e1c1332f65a8e9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a5::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:57:f6:49:04:67:97:8d:53:03:24:18:e4:73:2c:87:6a:
         31:26:3e:5e:ee:47:08:76:9f:07:4b:c1:29:93:71:ab:cc:a1:
         3e:22:6b:03:35:ba:bd:a6:df:c8:7f:a0:69:d7:35:5b:7a:2b:
         c1:de:07:72:9b:4a:0e:2d:22:45:51:90:6c:50:00:51:d1:84:
         52:e6:17:93:3a:a6:b7:34:55:27:81:30:d0:c3:4e:47:3b:bf:
         a6:09:8b:c6:e9:dd:88:86:cc:29:d3:19:2d:12:be:2c:51:b8:
         13:84:aa:2c:00:3d:56:34:35:25:73:8f:e0:ba:38:eb:aa:aa:
         08:b5:20:2b:ad:f9:6b:39:aa:b2:13:aa:d5:1a:27:85:ff:9f:
         77:4c:68:68:a1:a7:f5:f1:36:f4:76:ed:2c:6f:5b:3b:a3:03:
         94:70:dc:3f:9a:24:c9:f4:1d:d1:f4:3f:7c:a1:3e:a0:0e:17:
         83:92:7b:7b:d0:b1:2b:d9:3e:3e:27:a9:b7:7d:61:1c:10:b0:
         3e:95:5f:12:c9:f6:77:c9:b4:b2:43:58:a0:2c:32:08:8a:c6:
         e9:3c:15:20:a0:96:80:0d:fc:ef:58:f8:ec:9a:c3:0f:d5:cd:
         a7:28:fb:85:df:83:b5:2b:88:b9:eb:8a:37:5f:8c:49:0b:ef:
         94:bd:82:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDAKVIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
NjgyNTRmMWM4ZDE3ZTk4YzcwNDNmNjc3ZTFjMTMzMmY2NWE4ZTkwHhcNMjMwODE2
MDMwODEzWhcNMjUwODE3MDMwODEzWjAzMTEwLwYDVQQDEyg2YjM3YTg1N2Y4Y2Iy
YmM4OGZkMGJiNDYxODcwM2NmNDIzYzBmNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhcOi4XvyAdM8liJlEOnGscqmslyvq9Z/Y8/pV7OEB1EKNZ8Y
o6nbHfXvyw9g9mytcsaXdCEY5ukCfBZBZqOJfRMyLn4B3g5i+UXpVV7hztpMCfha
8HruJGkJqFj7MWQZUGBGCSPHNrYK1ROnn3CD9Rv7/VlmhZwAQQsWOf6g6Ku4T/GO
4vp5C/h8OZOSpMSwoVrr74aZ7v71hdRtfoM7dj7UDqTXobi1lA2S2yW+P48Urnrz
J+1t+hdvPSRkbmZzVN7Bdw/hCEmVH/NqKHybQY4wS8etuvJsdrGCPR6LF8d87j0D
TtUxd+022zYZM8jXf8ZkGnMcXNPGwtodxA7AGwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNWI9OSDASfRnNt641vlyF70Mo3RMB8GA1UdIwQYMBaAFBowcRll+Pfv5wvw
IhwUktDMZxf7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2Y2ODI1
NGYxYzhkMTdlOThjNzA0M2Y2NzdlMWMxMzMyZjY1YThlOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQyMmY3ZWYtZDhiOC00YzAyLTk4NzgtZTNmNTYx
YjcxZjc3LzZiMzdhODU3ZjhjYjJiYzg4ZmQwYmI0NjE4NzAzY2Y0MjNjMGY2Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDIyZjdlZi1kOGI4LTRjMDItOTg3OC1lM2Y1
NjFiNzFmNzcvY2Y2ODI1NGYxYzhkMTdlOThjNzA0M2Y2NzdlMWMxMzMyZjY1YThl
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCgBAaUAADANBgkqhkiG9w0BAQsFAAOCAQEADaFX9kkEZ5eN
UwMkGORzLIdqMSY+Xu5HCHafB0vBKZNxq8yhPiJrAzW6vabfyH+gadc1W3orwd4H
cptKDi0iRVGQbFAAUdGEUuYXkzqmtzRVJ4Ew0MNORzu/pgmLxundiIbMKdMZLRK+
LFG4E4SqLAA9VjQ1JXOP4Lo466qqCLUgK635azmqshOq1Ronhf+fd0xoaKGn9fE2
9HbtLG9bO6MDlHDcP5okyfQd0fQ/fKE+oA4Xg5J7e9CxK9k+Piept31hHBCwPpVf
Esn2d8m0skNYoCwyCIrG6TwVIKCWgA3871j47JrDD9XNpyj7hd+DtSuIueuKN1+M
SQvvlL2CGQ==
-----END CERTIFICATE-----