Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/5a9a689257b454b616cd21b6117e857fcfcf97e9.roa
File:                     5a9a689257b454b616cd21b6117e857fcfcf97e9.roa (raw, json)
Hash identifier:          xD/XiUMfFzGnAUYQOD/ZzFplyWEapB8uyN65YJEEbWI=
Subject key identifier:   60:28:9D:99:39:B8:39:61:60:9B:A5:04:4F:E9:9E:52:43:C8:B9:6C
Certificate issuer:       /CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
Certificate serial:       0C0E9A
Authority key identifier: 74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/5a9a689257b454b616cd21b6117e857fcfcf97e9.roa
Signing time:             Tue 06 Jun 2023 20:26:50 +0000
ROA not before:           Mon 05 Jun 2023 20:26:50 +0000
ROA not after:            Fri 06 Jun 2025 20:26:50 +0000
asID:                     174
IP address blocks:        2800:3e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790170 (0xc0e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0
        Validity
            Not Before: Jun  5 20:26:50 2023 GMT
            Not After : Jun  6 20:26:50 2025 GMT
        Subject: CN=5a9a689257b454b616cd21b6117e857fcfcf97e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:49:90:4d:c5:a9:6f:b7:99:4b:98:82:05:
                    78:f6:7b:8b:82:ae:3f:16:fa:31:6d:56:44:66:91:
                    01:ab:2a:fe:cc:9c:df:fb:20:ee:1d:a8:02:93:fd:
                    ac:22:4d:e9:ff:3c:b8:5f:71:12:60:93:fa:e1:d5:
                    3c:77:db:4e:19:fc:a7:50:7c:ff:ed:64:72:c6:bb:
                    08:9b:e0:9b:ea:f8:72:9c:da:82:b5:b3:08:a4:36:
                    9b:d8:33:3d:e4:b5:9b:83:3a:3e:82:7d:67:e4:c8:
                    60:8d:87:11:35:c8:71:0a:ee:e8:15:36:5d:d0:db:
                    7e:81:56:38:b5:3b:30:c8:07:cf:73:37:bc:fb:69:
                    5c:4e:34:b7:44:4b:3a:77:6a:1d:2d:ea:f2:1f:13:
                    24:36:91:c7:9f:08:a4:36:f1:70:55:14:65:14:88:
                    b1:fe:05:aa:1b:bb:86:07:48:31:f3:ba:39:f7:72:
                    fd:52:4e:c2:b0:7e:56:80:6f:07:98:8a:82:cc:e3:
                    48:78:6c:0d:f7:0e:f2:d8:db:d1:e7:2e:04:c9:86:
                    cd:0a:65:4f:3c:26:5d:29:8c:c9:de:34:f7:1b:dc:
                    cb:3a:52:f0:2e:8b:e9:1a:3f:2a:d8:68:12:d1:a8:
                    60:39:63:c4:70:26:93:3d:09:c8:0d:0d:25:b5:59:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:9D:99:39:B8:39:61:60:9B:A5:04:4F:E9:9E:52:43:C8:B9:6C
            X509v3 Authority Key Identifier:
                keyid:74:C0:3B:0A:A0:C8:09:2F:21:03:C5:F0:BD:82:24:8C:34:22:E8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/5a9a689257b454b616cd21b6117e857fcfcf97e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3b886181-22f5-4068-b06e-1fbe606c5224/1f8b1ddc6b200aca52e4f28db1eca38dd443a2a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:ba:e4:49:c0:c9:3b:0a:89:a2:fd:c4:67:46:07:29:4f:
         9c:55:f6:73:58:64:45:5c:e4:cf:bd:2a:79:d9:bf:fa:66:61:
         29:e5:b5:fa:06:54:a2:11:d5:64:61:d5:47:68:51:a9:c3:ce:
         38:14:cb:10:ff:2a:29:3e:36:74:c3:61:be:b2:b8:af:2f:c1:
         e2:78:77:49:38:f2:48:75:22:38:bf:26:6f:da:1e:dd:6a:b5:
         70:45:d3:72:d9:72:52:a3:bf:b7:a5:1f:82:f6:19:52:bd:93:
         f8:72:66:8a:12:d8:7c:8a:a3:b4:39:92:44:ef:50:2e:6e:6c:
         cb:78:76:03:31:ec:b8:9f:02:82:e7:fe:f2:a9:bb:6e:74:13:
         9e:57:9a:2c:b6:98:b9:8e:b1:78:c6:58:1e:0d:9d:60:78:aa:
         69:ea:c7:23:89:73:88:4d:e7:4f:f9:38:90:00:c9:3c:59:23:
         9d:2d:05:cd:71:bd:83:e9:20:27:72:5e:83:f7:53:9c:dd:59:
         16:e5:6f:6b:8c:fc:1d:3f:03:00:45:be:20:4b:9c:96:e1:7e:
         eb:c1:4c:79:65:ab:10:b8:49:f1:d9:e4:fb:96:4f:93:d0:9e:
         0a:90:63:33:4d:9b:10:0d:26:07:4e:a9:d1:5e:bb:a5:e5:ff:
         99:2f:86:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDA6aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
OGIxZGRjNmIyMDBhY2E1MmU0ZjI4ZGIxZWNhMzhkZDQ0M2EyYTAwHhcNMjMwNjA1
MjAyNjUwWhcNMjUwNjA2MjAyNjUwWjAzMTEwLwYDVQQDEyg1YTlhNjg5MjU3YjQ1
NGI2MTZjZDIxYjYxMTdlODU3ZmNmY2Y5N2U5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkHVJkE3FqW+3mUuYggV49nuLgq4/FvoxbVZEZpEBqyr+zJzf
+yDuHagCk/2sIk3p/zy4X3ESYJP64dU8d9tOGfynUHz/7WRyxrsIm+Cb6vhynNqC
tbMIpDab2DM95LWbgzo+gn1n5MhgjYcRNchxCu7oFTZd0Nt+gVY4tTswyAfPcze8
+2lcTjS3REs6d2odLeryHxMkNpHHnwikNvFwVRRlFIix/gWqG7uGB0gx87o593L9
Uk7CsH5WgG8HmIqCzONIeGwN9w7y2NvR5y4EyYbNCmVPPCZdKYzJ3jT3G9zLOlLw
LovpGj8q2GgS0ahgOWPEcCaTPQnIDQ0ltVlW8QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGAonZk5uDlhYJulBE/pnlJDyLlsMB8GA1UdIwQYMBaAFHTAOwqgyAkvIQPF
8L2CJIw0IugCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWY4YjFk
ZGM2YjIwMGFjYTUyZTRmMjhkYjFlY2EzOGRkNDQzYTJhMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2I4ODYxODEtMjJmNS00MDY4LWIwNmUtMWZiZTYw
NmM1MjI0LzVhOWE2ODkyNTdiNDU0YjYxNmNkMjFiNjExN2U4NTdmY2ZjZjk3ZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYjg4NjE4MS0yMmY1LTQwNjgtYjA2ZS0xZmJl
NjA2YzUyMjQvMWY4YjFkZGM2YjIwMGFjYTUyZTRmMjhkYjFlY2EzOGRkNDQzYTJh
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgAA+AwDQYJKoZIhvcNAQELBQADggEBADn2uuRJwMk7Comi
/cRnRgcpT5xV9nNYZEVc5M+9KnnZv/pmYSnltfoGVKIR1WRh1UdoUanDzjgUyxD/
Kik+NnTDYb6yuK8vweJ4d0k48kh1Iji/Jm/aHt1qtXBF03LZclKjv7elH4L2GVK9
k/hyZooS2HyKo7Q5kkTvUC5ubMt4dgMx7LifAoLn/vKpu250E55Xmiy2mLmOsXjG
WB4NnWB4qmnqxyOJc4hN50/5OJAAyTxZI50tBc1xvYPpICdyXoP3U5zdWRblb2uM
/B0/AwBFviBLnJbhfuvBTHllqxC4SfHZ5PuWT5PQngqQYzNNmxANJgdOqdFeu6Xl
/5kvhuA=
-----END CERTIFICATE-----