Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/11458a5038e06535ecabddb9acf6bc8df65f0e85.roa
File:                     11458a5038e06535ecabddb9acf6bc8df65f0e85.roa (raw, json)
Hash identifier:          lHGjdLJ6bCf7C6aPJTVsSE4URUzbrOF8VP/oQ8jW/vs=
Subject key identifier:   27:16:7A:FD:32:EA:55:66:39:1D:EE:89:0E:A9:0E:3B:19:73:8B:F9
Certificate issuer:       /CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
Certificate serial:       21F709
Authority key identifier: A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/11458a5038e06535ecabddb9acf6bc8df65f0e85.roa
Signing time:             Fri 25 Aug 2023 19:30:47 +0000
ROA not before:           Thu 24 Aug 2023 19:30:46 +0000
ROA not after:            Mon 25 Aug 2025 19:30:46 +0000
asID:                     267766
IP address blocks:        2803:5ba0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225929 (0x21f709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b44cb5800e96935d03e5d14faab2003de5a3deb7
        Validity
            Not Before: Aug 24 19:30:46 2023 GMT
            Not After : Aug 25 19:30:46 2025 GMT
        Subject: CN=11458a5038e06535ecabddb9acf6bc8df65f0e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:c2:3a:5a:24:67:7a:cc:93:6f:27:3e:ed:
                    85:f0:7b:5f:5c:5f:34:08:57:f2:5b:14:fa:92:1b:
                    37:f2:98:49:8e:ba:aa:a8:b1:d3:9d:25:46:f9:03:
                    96:5b:f6:21:d7:a6:85:ca:df:6b:b9:b2:89:fd:dd:
                    ff:90:5a:a9:42:51:c6:7d:eb:0d:22:ee:26:ab:00:
                    9d:bb:8e:23:4d:80:d7:59:87:8a:16:6d:ae:ed:3f:
                    c0:0a:03:d0:d9:48:67:5b:f2:d7:1b:44:53:60:c5:
                    78:b4:24:fe:38:c3:9f:0f:aa:e0:c8:55:5c:b2:94:
                    67:5c:2c:25:e5:ca:54:83:d9:12:67:ae:35:48:ef:
                    a9:5a:5d:c6:37:d1:f1:b9:6f:d0:45:7d:4a:e7:5f:
                    ab:21:fc:8a:24:2f:77:43:2f:98:5f:12:cd:4f:6f:
                    41:91:91:b5:12:fb:a7:d7:14:a8:75:94:46:a5:10:
                    d0:a6:53:e9:f0:4b:f1:3c:af:b2:91:fd:47:98:53:
                    03:64:99:d8:b9:6a:51:64:3c:ef:40:b8:db:5c:5b:
                    73:f6:fc:c5:be:55:e6:d5:71:cc:0a:cd:b9:d2:f7:
                    82:e1:c7:ae:36:a0:56:90:03:1e:01:ee:f2:19:bf:
                    3e:b4:79:7e:c0:7d:a3:e2:90:f7:69:16:1f:00:5f:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:16:7A:FD:32:EA:55:66:39:1D:EE:89:0E:A9:0E:3B:19:73:8B:F9
            X509v3 Authority Key Identifier:
                keyid:A2:C1:FC:16:13:33:E5:CE:7D:49:A4:36:72:11:73:EA:28:44:8D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b44cb5800e96935d03e5d14faab2003de5a3deb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/11458a5038e06535ecabddb9acf6bc8df65f0e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/425a0a2e-106c-47b4-8f12-3be91ade2099/b44cb5800e96935d03e5d14faab2003de5a3deb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:53:c9:84:25:ac:ad:a0:74:ae:4a:03:4c:39:f2:84:53:98:
         6b:34:1a:5b:c6:78:06:ba:b3:f6:8f:48:c2:e6:51:4f:61:c3:
         48:a9:6a:6f:a9:c6:fd:73:12:32:ad:c4:47:01:25:23:be:42:
         a3:a1:88:d2:cf:af:ba:46:f3:71:2d:55:bd:49:11:13:3e:3f:
         c6:47:ba:3f:9c:89:95:b1:23:3c:a7:66:c1:86:e8:5d:2f:c5:
         6e:fb:93:f8:6c:ce:44:0b:37:44:6e:6d:35:2d:82:80:2d:ca:
         1b:c9:26:7d:10:5b:6c:49:55:df:78:ed:a6:72:5c:1e:7a:8c:
         db:6f:61:03:aa:b2:9f:ff:68:f8:1a:97:a4:f0:2f:c7:70:9c:
         c1:a7:83:da:5c:a3:68:59:b0:74:73:1a:94:b4:86:2a:b0:cd:
         79:61:fb:37:ab:9e:fe:34:42:3f:5b:69:31:5d:59:59:da:ae:
         f2:9d:b9:a4:90:a2:dd:a7:4f:55:4e:53:1f:6c:f8:df:a6:4b:
         31:2e:12:ac:32:4b:21:47:16:d1:0f:91:62:8d:4a:81:7e:9c:
         e7:df:51:99:7c:6b:02:b4:54:c7:d7:c9:29:12:92:90:31:ba:
         0d:78:dd:2b:6f:43:9f:91:b6:ad:c4:00:91:3c:ed:5b:2f:da:
         0b:d1:c4:a8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIfcJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI0
NGNiNTgwMGU5NjkzNWQwM2U1ZDE0ZmFhYjIwMDNkZTVhM2RlYjcwHhcNMjMwODI0
MTkzMDQ2WhcNMjUwODI1MTkzMDQ2WjAzMTEwLwYDVQQDEygxMTQ1OGE1MDM4ZTA2
NTM1ZWNhYmRkYjlhY2Y2YmM4ZGY2NWYwZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuEPCOlokZ3rMk28nPu2F8HtfXF80CFfyWxT6khs38phJjrqq
qLHTnSVG+QOWW/Yh16aFyt9rubKJ/d3/kFqpQlHGfesNIu4mqwCdu44jTYDXWYeK
Fm2u7T/ACgPQ2UhnW/LXG0RTYMV4tCT+OMOfD6rgyFVcspRnXCwl5cpUg9kSZ641
SO+pWl3GN9HxuW/QRX1K51+rIfyKJC93Qy+YXxLNT29BkZG1Evun1xSodZRGpRDQ
plPp8EvxPK+ykf1HmFMDZJnYuWpRZDzvQLjbXFtz9vzFvlXm1XHMCs250veC4ceu
NqBWkAMeAe7yGb8+tHl+wH2j4pD3aRYfAF8d9QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCcWev0y6lVmOR3uiQ6pDjsZc4v5MB8GA1UdIwQYMBaAFKLB/BYTM+XOfUmk
NnIRc+ooRI0CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjQ0Y2I1
ODAwZTk2OTM1ZDAzZTVkMTRmYWFiMjAwM2RlNWEzZGViNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDI1YTBhMmUtMTA2Yy00N2I0LThmMTItM2JlOTFh
ZGUyMDk5LzExNDU4YTUwMzhlMDY1MzVlY2FiZGRiOWFjZjZiYzhkZjY1ZjBlODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MjVhMGEyZS0xMDZjLTQ3YjQtOGYxMi0zYmU5
MWFkZTIwOTkvYjQ0Y2I1ODAwZTk2OTM1ZDAzZTVkMTRmYWFiMjAwM2RlNWEzZGVi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDW6AwDQYJKoZIhvcNAQELBQADggEBAHdTyYQlrK2gdK5K
A0w58oRTmGs0GlvGeAa6s/aPSMLmUU9hw0ipam+pxv1zEjKtxEcBJSO+QqOhiNLP
r7pG83EtVb1JERM+P8ZHuj+ciZWxIzynZsGG6F0vxW77k/hszkQLN0RubTUtgoAt
yhvJJn0QW2xJVd947aZyXB56jNtvYQOqsp//aPgal6TwL8dwnMGng9pco2hZsHRz
GpS0hiqwzXlh+zernv40Qj9baTFdWVnarvKduaSQot2nT1VOUx9s+N+mSzEuEqwy
SyFHFtEPkWKNSoF+nOffUZl8awK0VMfXySkSkpAxug143StvQ5+Rtq3EAJE87Vsv
2gvRxKg=
-----END CERTIFICATE-----