Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7544169663793766b7630a9f3324076130726d65.roa
File:                     7544169663793766b7630a9f3324076130726d65.roa (raw, json)
Hash identifier:          6frrPdCfFcIpd9gdKLdvgVpapGkdRwQfH+FsS8mZ6hM=
Subject key identifier:   9A:37:14:7A:06:4D:2C:8A:A3:BE:05:3D:60:59:B2:81:E6:51:6C:84
Certificate issuer:       /CN=e10299c1af81d7fbd554ad8da2099da215779551
Certificate serial:       20178A
Authority key identifier: F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7544169663793766b7630a9f3324076130726d65.roa
Signing time:             Fri 24 Mar 2023 08:30:39 +0000
ROA not before:           Thu 23 Mar 2023 08:30:39 +0000
ROA not after:            Sat 22 Mar 2025 08:30:39 +0000
asID:                     27884
IP address blocks:        2800:b10:100::/44 maxlen: 48
                          2800:b10:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103178 (0x20178a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10299c1af81d7fbd554ad8da2099da215779551
        Validity
            Not Before: Mar 23 08:30:39 2023 GMT
            Not After : Mar 22 08:30:39 2025 GMT
        Subject: CN=7544169663793766b7630a9f3324076130726d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:21:b3:10:ec:03:e1:a1:b4:80:ca:11:cc:
                    33:9e:c1:ff:20:11:1e:17:d3:61:f8:4d:34:40:df:
                    90:cb:1a:90:a8:76:33:88:f2:7f:b4:99:29:ea:b1:
                    d7:f4:a9:77:c1:af:95:f2:27:37:f1:e6:a8:ec:ff:
                    99:65:d0:8e:e1:a9:96:db:1d:92:9f:4d:23:95:87:
                    7d:5a:d8:68:9d:30:62:cd:75:3e:7d:f2:cb:1a:d8:
                    a9:9d:3f:22:c1:4d:46:81:11:ca:9c:86:0e:c3:b5:
                    7a:19:51:1b:44:1f:e0:ad:c0:d0:bc:b8:9b:81:6e:
                    c8:78:b7:cf:b6:05:f4:a5:06:47:2b:a9:66:4b:39:
                    ce:de:03:ba:8e:04:ca:73:db:ab:77:c2:cd:f8:0e:
                    04:65:6c:5d:6a:9b:33:1d:e3:4b:a7:70:a8:33:cf:
                    fb:2a:3b:13:6d:9c:cf:fd:83:d9:7d:c4:0f:8f:fc:
                    3a:6a:fb:25:d2:29:02:58:0a:3a:b2:29:b1:76:32:
                    cd:1e:c0:29:14:53:00:29:56:43:b0:dc:f1:51:f1:
                    5e:a9:bf:f9:a6:ff:0e:7f:a3:04:83:e3:ab:bd:3a:
                    b6:1e:33:dc:b4:82:81:27:ea:c1:4b:78:7f:75:d5:
                    12:26:ce:8b:1b:71:9c:35:99:55:4b:ba:c0:5e:d2:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:37:14:7A:06:4D:2C:8A:A3:BE:05:3D:60:59:B2:81:E6:51:6C:84
            X509v3 Authority Key Identifier:
                keyid:F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/7544169663793766b7630a9f3324076130726d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b10:10::/48
                  2800:b10:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:39:4a:43:77:36:a5:53:1c:2e:26:04:e0:05:a5:a4:2d:96:
         03:cf:31:26:35:b6:c9:d0:e6:5e:d2:60:e2:d5:c9:7e:58:b5:
         2b:d0:69:89:76:13:59:4e:b0:3d:5e:59:0f:c6:8a:fa:46:8d:
         b8:5d:0f:46:04:94:c0:8b:7c:aa:25:0f:43:38:58:a5:14:c0:
         42:e0:5a:22:3a:7b:44:16:65:8c:cf:7d:4f:99:02:64:c3:10:
         aa:96:19:8d:14:72:8d:a0:f1:44:f3:a0:fe:45:2e:25:91:f2:
         5c:13:41:4f:a2:93:75:81:38:de:33:8d:9d:cf:f6:c2:f5:ae:
         7d:7e:4f:3e:d2:f4:6f:80:35:9a:ef:46:20:76:71:c0:8c:3f:
         42:94:1e:0d:e8:61:51:04:0f:20:6e:d1:1b:44:29:18:1a:39:
         05:c5:1e:15:58:ac:7a:e5:d4:10:07:3c:1b:1a:1b:e6:04:af:
         0f:b4:dd:ef:8b:cc:ca:20:f1:ae:53:2b:85:86:30:e9:e3:f3:
         fc:5c:2d:e7:3c:ec:7e:eb:f9:a4:84:98:ff:dc:c7:30:39:15:
         55:d4:5a:04:a4:d6:10:27:ce:2f:55:ee:95:a1:15:1d:2a:fb:
         5d:13:69:0b:f9:eb:ca:65:c6:ca:56:02:ba:3d:6f:4d:25:fe:
         6c:56:59:05
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDIBeKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUx
MDI5OWMxYWY4MWQ3ZmJkNTU0YWQ4ZGEyMDk5ZGEyMTU3Nzk1NTEwHhcNMjMwMzIz
MDgzMDM5WhcNMjUwMzIyMDgzMDM5WjAzMTEwLwYDVQQDEyg3NTQ0MTY5NjYzNzkz
NzY2Yjc2MzBhOWYzMzI0MDc2MTMwNzI2ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxaEhsxDsA+GhtIDKEcwznsH/IBEeF9Nh+E00QN+QyxqQqHYz
iPJ/tJkp6rHX9Kl3wa+V8ic38eao7P+ZZdCO4amW2x2Sn00jlYd9WthonTBizXU+
ffLLGtipnT8iwU1GgRHKnIYOw7V6GVEbRB/grcDQvLibgW7IeLfPtgX0pQZHK6lm
SznO3gO6jgTKc9urd8LN+A4EZWxdapszHeNLp3CoM8/7KjsTbZzP/YPZfcQPj/w6
avsl0ikCWAo6simxdjLNHsApFFMAKVZDsNzxUfFeqb/5pv8Of6MEg+OrvTq2HjPc
tIKBJ+rBS3h/ddUSJs6LG3GcNZlVS7rAXtKzSQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFJo3FHoGTSyKo74FPWBZsoHmUWyEMB8GA1UdIwQYMBaAFPTe1g3kS26pmgV+
dkBtBH6BndAwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTEwMjk5
YzFhZjgxZDdmYmQ1NTRhZDhkYTIwOTlkYTIxNTc3OTU1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWRjMThmMDctYmEyMC00MzgwLThhZmQtOGNhZmFk
ZTQwNThmLzc1NDQxNjk2NjM3OTM3NjZiNzYzMGE5ZjMzMjQwNzYxMzA3MjZkNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZGMxOGYwNy1iYTIwLTQzODAtOGFmZC04Y2Fm
YWRlNDA1OGYvZTEwMjk5YzFhZjgxZDdmYmQ1NTRhZDhkYTIwOTlkYTIxNTc3OTU1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAIwEgMHACgACxAAEAMHBCgACxABADANBgkqhkiG9w0BAQsFAAOCAQEA
EjlKQ3c2pVMcLiYE4AWlpC2WA88xJjW2ydDmXtJg4tXJfli1K9BpiXYTWU6wPV5Z
D8aK+kaNuF0PRgSUwIt8qiUPQzhYpRTAQuBaIjp7RBZljM99T5kCZMMQqpYZjRRy
jaDxRPOg/kUuJZHyXBNBT6KTdYE43jONnc/2wvWufX5PPtL0b4A1mu9GIHZxwIw/
QpQeDehhUQQPIG7RG0QpGBo5BcUeFViseuXUEAc8Gxob5gSvD7Td74vMyiDxrlMr
hYYw6ePz/Fwt5zzsfuv5pISY/9zHMDkVVdRaBKTWECfOL1XulaEVHSr7XRNpC/nr
ymXGylYCuj1vTSX+bFZZBQ==
-----END CERTIFICATE-----