Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/cf429ae49904f9ed9f17de1bbdd4aeb58542f9a0.roa
File:                     cf429ae49904f9ed9f17de1bbdd4aeb58542f9a0.roa (raw, json)
Hash identifier:          23jLSWww2JlMhv0qAdGLCp9AbgY1YVnFUJ3prN8z5TA=
Subject key identifier:   FA:2F:8F:B4:68:80:2D:C7:1E:43:69:C7:71:7A:A5:23:25:7E:BB:13
Certificate issuer:       /CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
Certificate serial:       1985DD
Authority key identifier: BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/cf429ae49904f9ed9f17de1bbdd4aeb58542f9a0.roa
Signing time:             Tue 06 Sep 2022 15:28:26 +0000
ROA not before:           Mon 05 Sep 2022 15:52:54 +0000
ROA not after:            Thu 05 Sep 2024 15:52:54 +0000
asID:                     263236
IP address blocks:        2803:9680::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672669 (0x1985dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
        Validity
            Not Before: Sep  5 15:52:54 2022 GMT
            Not After : Sep  5 15:52:54 2024 GMT
        Subject: CN=cf429ae49904f9ed9f17de1bbdd4aeb58542f9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:6b:c7:12:ad:3b:39:1c:f1:23:fc:c2:e5:
                    e9:23:66:a3:b9:03:f6:56:f9:b5:d4:fd:f2:61:1e:
                    79:96:c6:9b:c3:eb:8c:86:1d:f3:0b:43:61:a4:3f:
                    d4:75:87:bb:b9:68:27:18:a4:f3:78:8e:4f:a4:e7:
                    5c:9e:75:3e:e0:ce:4a:e3:da:b6:43:5a:b2:a3:ae:
                    69:38:c7:db:af:96:02:17:31:78:16:37:ed:89:a4:
                    76:bf:e2:8f:b4:b3:7e:18:1c:89:35:31:47:91:8f:
                    bc:be:1d:32:81:e8:e9:16:bc:95:aa:75:98:28:0a:
                    45:67:de:0c:9e:d3:f8:8b:c7:5f:29:95:06:76:b2:
                    cc:35:37:16:56:c4:be:9b:20:d5:b5:5d:ea:0e:32:
                    0c:18:18:7e:94:bc:3b:09:b5:be:82:5e:d9:08:13:
                    21:77:40:ae:29:10:da:a8:49:77:b8:32:a7:28:e6:
                    cd:4b:94:ce:47:dc:c9:9e:e7:1d:67:e0:2a:38:bc:
                    3c:f5:2a:28:e4:0c:c8:b0:ac:66:18:aa:6b:f9:20:
                    36:3c:78:95:7b:c9:ac:bb:4e:f7:11:21:43:a2:77:
                    ce:6d:51:78:f8:e0:55:0d:99:81:44:6e:ae:3d:14:
                    be:16:08:67:fa:81:d8:9c:56:a1:01:da:dc:a2:92:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2F:8F:B4:68:80:2D:C7:1E:43:69:C7:71:7A:A5:23:25:7E:BB:13
            X509v3 Authority Key Identifier:
                keyid:BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/cf429ae49904f9ed9f17de1bbdd4aeb58542f9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/8f74f3635561538d1905f0fa0258d3d5fa209b59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9680::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:58:d8:8f:77:62:6d:ea:4f:07:d9:17:fc:7e:b2:6e:4c:
         c1:58:b8:3e:96:39:e7:de:1b:53:03:62:b1:eb:38:84:47:43:
         36:84:ae:3c:f9:bb:e5:03:f2:e3:74:19:08:da:c5:dc:86:fb:
         8f:84:a5:4c:f1:d2:91:33:9e:43:ce:f8:19:c3:13:63:da:d7:
         97:7a:87:1d:aa:65:14:d3:51:8f:01:81:4c:0a:3a:79:d7:35:
         b3:4f:54:6e:6e:96:e6:03:c0:b8:d6:26:70:bd:2e:51:cb:69:
         40:6b:f2:9e:ba:9f:88:17:19:7f:b6:da:d6:1e:7d:3a:9c:32:
         87:26:d9:97:50:aa:eb:d0:21:b8:68:e3:71:14:40:d6:62:23:
         2e:08:f9:98:4c:f8:9e:a4:94:4c:43:f9:db:48:1a:ea:72:96:
         5f:f3:fe:85:06:e7:b8:29:3b:59:b2:4f:7f:0f:7e:3b:16:9c:
         61:2a:87:0b:d6:a6:2b:95:18:86:7c:fc:ef:d9:b8:a8:10:35:
         b3:6e:57:a7:43:d0:c2:e4:ae:ea:17:ab:84:05:43:54:c5:b2:
         12:24:d8:83:0f:60:d3:16:c7:3d:22:37:c8:3a:02:95:5c:73:
         96:f7:22:01:cc:d4:69:6b:b8:38:94:f4:45:bf:2b:93:ea:b7:
         22:a7:16:7f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGYXdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhm
NzRmMzYzNTU2MTUzOGQxOTA1ZjBmYTAyNThkM2Q1ZmEyMDliNTkwHhcNMjIwOTA1
MTU1MjU0WhcNMjQwOTA1MTU1MjU0WjAzMTEwLwYDVQQDEyhjZjQyOWFlNDk5MDRm
OWVkOWYxN2RlMWJiZGQ0YWViNTg1NDJmOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlFVrxxKtOzkc8SP8wuXpI2ajuQP2Vvm11P3yYR55lsabw+uM
hh3zC0NhpD/UdYe7uWgnGKTzeI5PpOdcnnU+4M5K49q2Q1qyo65pOMfbr5YCFzF4
FjftiaR2v+KPtLN+GByJNTFHkY+8vh0ygejpFryVqnWYKApFZ94MntP4i8dfKZUG
drLMNTcWVsS+myDVtV3qDjIMGBh+lLw7CbW+gl7ZCBMhd0CuKRDaqEl3uDKnKObN
S5TOR9zJnucdZ+AqOLw89Soo5AzIsKxmGKpr+SA2PHiVe8msu073ESFDonfObVF4
+OBVDZmBRG6uPRS+Fghn+oHYnFahAdrcopJVYwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPovj7RogC3HHkNpx3F6pSMlfrsTMB8GA1UdIwQYMBaAFLqsHdaLzkFVOzFd
58To1CiO0lL+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGY3NGYz
NjM1NTYxNTM4ZDE5MDVmMGZhMDI1OGQzZDVmYTIwOWI1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjBiZmI5OGMtNGI1ZC00OTBkLTkzNDItYjc0MjFh
NDgxOTM5L2NmNDI5YWU0OTkwNGY5ZWQ5ZjE3ZGUxYmJkZDRhZWI1ODU0MmY5YTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMGJmYjk4Yy00YjVkLTQ5MGQtOTM0Mi1iNzQy
MWE0ODE5MzkvOGY3NGYzNjM1NTYxNTM4ZDE5MDVmMGZhMDI1OGQzZDVmYTIwOWI1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDloAwDQYJKoZIhvcNAQELBQADggEBAI4eWNiPd2Jt6k8H
2Rf8frJuTMFYuD6WOefeG1MDYrHrOIRHQzaErjz5u+UD8uN0GQjaxdyG+4+EpUzx
0pEznkPO+BnDE2Pa15d6hx2qZRTTUY8BgUwKOnnXNbNPVG5uluYDwLjWJnC9LlHL
aUBr8p66n4gXGX+22tYefTqcMocm2ZdQquvQIbho43EUQNZiIy4I+ZhM+J6klExD
+dtIGupyll/z/oUG57gpO1myT38PfjsWnGEqhwvWpiuVGIZ8/O/ZuKgQNbNuV6dD
0MLkruoXq4QFQ1TFshIk2IMPYNMWxz0iN8g6ApVcc5b3IgHM1GlruDiU9EW/K5Pq
tyKnFn8=
-----END CERTIFICATE-----