Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/27d24b4b0e0b8eec93a98535c6b04aa8784ac5f0.roa
File:                     27d24b4b0e0b8eec93a98535c6b04aa8784ac5f0.roa (raw, json)
Hash identifier:          8Z239Y/JdoYcVoEh5VhbRrROckRuOdoyBfH/xh/MZcI=
Subject key identifier:   B0:3F:4B:66:78:2B:BB:FE:55:DB:DA:65:F3:86:B6:A4:91:D7:D0:A0
Certificate issuer:       /CN=0d2f3c34eaa952f81789554aedc8cb1bd83027a1
Certificate serial:       082C
Authority key identifier: 6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/27d24b4b0e0b8eec93a98535c6b04aa8784ac5f0.roa
Signing time:             Wed 13 Dec 2023 20:59:27 +0000
ROA not before:           Wed 13 Dec 2023 20:59:27 +0000
ROA not after:            Sat 13 Dec 2025 20:59:27 +0000
asID:                     265586
IP address blocks:        2806:3d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f3c34eaa952f81789554aedc8cb1bd83027a1
        Validity
            Not Before: Dec 13 20:59:27 2023 GMT
            Not After : Dec 13 20:59:27 2025 GMT
        Subject: CN=27d24b4b0e0b8eec93a98535c6b04aa8784ac5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:b8:fc:52:0d:94:0e:06:ac:59:e1:a1:39:
                    8f:8a:87:75:62:13:74:3f:53:26:4a:71:38:70:7e:
                    a5:04:ee:ce:6d:f4:41:5f:75:13:cd:53:e6:dc:36:
                    98:75:0d:ed:f5:9b:11:20:97:44:73:3e:f6:80:fe:
                    1d:5e:39:d7:bd:b9:99:18:92:b3:47:a8:e4:b3:96:
                    21:e0:c4:60:51:3b:f6:ff:3c:bc:62:a2:0c:94:5a:
                    36:4d:65:4e:6d:f2:b8:60:0d:a1:fc:a4:cd:15:16:
                    6c:56:3b:f3:73:7d:07:65:f6:e4:a1:fe:62:5a:b2:
                    8b:4e:8e:9d:aa:8a:f1:e2:4f:4a:6c:89:8f:dc:d7:
                    44:a0:06:95:c3:fc:2e:42:a7:5f:c7:96:c8:d5:01:
                    ed:1d:36:23:fc:25:2b:27:30:63:59:0f:d4:00:b7:
                    bb:45:eb:ff:46:2e:d2:4d:ff:3e:d3:7e:18:c7:ed:
                    e4:98:31:d1:4f:6b:cd:62:01:c5:89:50:10:2d:71:
                    98:0c:c9:ae:28:48:db:ac:0c:a5:14:32:89:78:3f:
                    2b:3e:7d:56:84:47:7c:53:e0:44:24:bf:66:fe:bb:
                    00:d8:21:4b:77:8f:2d:d8:95:63:53:bc:49:21:2c:
                    38:24:df:41:37:bd:ab:36:54:51:96:84:e0:c7:0a:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3F:4B:66:78:2B:BB:FE:55:DB:DA:65:F3:86:B6:A4:91:D7:D0:A0
            X509v3 Authority Key Identifier:
                keyid:6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/27d24b4b0e0b8eec93a98535c6b04aa8784ac5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:e8:41:40:5e:76:90:6f:4b:f6:5b:55:c8:12:d1:be:cb:
         11:12:14:d3:c1:e4:b5:47:18:8f:21:3c:1f:d8:86:aa:cd:24:
         fb:3d:83:0b:e7:7e:8f:2a:81:43:fa:6c:35:2e:1a:f0:f1:5b:
         c9:ba:73:39:3c:64:13:00:71:af:3a:82:e2:a8:b2:f7:05:e0:
         9d:99:8b:67:06:cc:c0:7b:63:33:28:39:23:97:f8:71:72:95:
         0d:6c:34:c3:44:9d:ac:e8:4f:2e:d8:28:76:f1:00:15:82:25:
         fe:eb:12:cc:34:48:b0:9a:d6:5d:cf:41:60:36:66:74:28:20:
         2a:8b:9e:06:0b:01:b3:7f:c2:4e:a0:df:64:05:8f:5a:7f:7b:
         43:91:53:01:2b:43:6c:52:7f:74:b3:5f:55:cf:bb:58:4f:71:
         fa:c2:2e:50:ec:8b:44:5b:c6:fd:24:e1:c3:4f:be:99:9b:a3:
         3e:22:99:4a:17:84:8c:87:cd:bb:1a:2a:c1:dd:e8:be:30:67:
         e4:e6:b8:8c:78:5e:b0:cd:e6:aa:14:8d:0d:e8:7b:b8:88:a5:
         d6:45:1d:f7:62:8c:02:34:20:2a:14:8c:6a:18:85:dd:72:d0:
         4e:33:f0:36:0e:30:4a:14:d8:8e:bf:aa:68:5a:93:bf:fc:8e:
         b6:48:67:71
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGQy
ZjNjMzRlYWE5NTJmODE3ODk1NTRhZWRjOGNiMWJkODMwMjdhMTAeFw0yMzEyMTMy
MDU5MjdaFw0yNTEyMTMyMDU5MjdaMDMxMTAvBgNVBAMTKDI3ZDI0YjRiMGUwYjhl
ZWM5M2E5ODUzNWM2YjA0YWE4Nzg0YWM1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSwbj8Ug2UDgasWeGhOY+Kh3ViE3Q/UyZKcThwfqUE7s5t9EFf
dRPNU+bcNph1De31mxEgl0RzPvaA/h1eOde9uZkYkrNHqOSzliHgxGBRO/b/PLxi
ogyUWjZNZU5t8rhgDaH8pM0VFmxWO/NzfQdl9uSh/mJasotOjp2qivHiT0psiY/c
10SgBpXD/C5Cp1/HlsjVAe0dNiP8JSsnMGNZD9QAt7tF6/9GLtJN/z7TfhjH7eSY
MdFPa81iAcWJUBAtcZgMya4oSNusDKUUMol4Pys+fVaER3xT4EQkv2b+uwDYIUt3
jy3YlWNTvEkhLDgk30E3vas2VFGWhODHCnqFAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUsD9LZngru/5V29pl84a2pJHX0KAwHwYDVR0jBBgwFoAUb//cC+0nzmX1D9Nd
dGP8o28XzYAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wZDJmM2Mz
NGVhYTk1MmY4MTc4OTU1NGFlZGM4Y2IxYmQ4MzAyN2ExLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8yMmI1NjRiYi1iZTdjLTQ0M2UtYmM1MS0xZjM2MWI1
Y2FjYWQvMjdkMjRiNGIwZTBiOGVlYzkzYTk4NTM1YzZiMDRhYTg3ODRhYzVmMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzIyYjU2NGJiLWJlN2MtNDQzZS1iYzUxLTFmMzYx
YjVjYWNhZC8wZDJmM2MzNGVhYTk1MmY4MTc4OTU1NGFlZGM4Y2IxYmQ4MzAyN2Ex
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAYD1DANBgkqhkiG9w0BAQsFAAOCAQEALJ7oQUBedpBvS/Zb
VcgS0b7LERIU08HktUcYjyE8H9iGqs0k+z2DC+d+jyqBQ/psNS4a8PFbybpzOTxk
EwBxrzqC4qiy9wXgnZmLZwbMwHtjMyg5I5f4cXKVDWw0w0SdrOhPLtgodvEAFYIl
/usSzDRIsJrWXc9BYDZmdCggKoueBgsBs3/CTqDfZAWPWn97Q5FTAStDbFJ/dLNf
Vc+7WE9x+sIuUOyLRFvG/SThw0++mZujPiKZSheEjIfNuxoqwd3ovjBn5Oa4jHhe
sM3mqhSNDeh7uIil1kUd92KMAjQgKhSMahiF3XLQTjPwNg4wShTYjr+qaFqTv/yO
tkhncQ==
-----END CERTIFICATE-----