Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a4d9c2136725529dace2772c23e52aa48ce7880e.roa
File:                     a4d9c2136725529dace2772c23e52aa48ce7880e.roa (raw, json)
Hash identifier:          dUruGKHiv27k1Mv34GyJVW8gWIDlfuhIbIIoefLEuhA=
Subject key identifier:   51:00:6F:F4:54:74:8C:D0:D3:1C:61:44:14:B7:37:F8:55:1A:D7:1C
Certificate issuer:       /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial:       04354F
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a4d9c2136725529dace2772c23e52aa48ce7880e.roa
Signing time:             Fri 20 Oct 2023 12:22:10 +0000
ROA not before:           Fri 20 Oct 2023 12:22:10 +0000
ROA not after:            Mon 20 Oct 2025 12:22:10 +0000
asID:                     20940
IP address blocks:        2800:550:2a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275791 (0x4354f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
        Validity
            Not Before: Oct 20 12:22:10 2023 GMT
            Not After : Oct 20 12:22:10 2025 GMT
        Subject: CN=a4d9c2136725529dace2772c23e52aa48ce7880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:bc:5c:4f:8c:5b:71:75:74:20:d4:55:2d:
                    e7:3f:83:3e:65:ee:42:f3:8d:c3:02:0b:22:94:f2:
                    9d:8f:a2:37:18:ae:25:92:34:b5:f9:74:75:78:08:
                    a0:8c:af:2e:45:ea:d5:1e:82:0b:fd:22:f2:c0:22:
                    26:6e:c1:e4:67:b5:7c:4b:2e:57:79:5a:6a:ad:d6:
                    01:69:67:68:82:6f:19:b9:7b:31:fe:19:d8:af:97:
                    51:03:e5:83:11:38:1a:71:89:46:13:30:31:7f:1b:
                    83:18:ec:ad:5b:ca:19:af:e8:ef:19:1c:73:65:f8:
                    05:7d:bd:86:55:62:d0:62:34:e0:23:84:70:60:3a:
                    f7:7a:82:dd:92:aa:82:be:e3:9b:a3:52:57:29:9b:
                    e3:d8:21:d7:c8:6a:7e:47:e5:d2:00:33:c6:32:0d:
                    5c:5e:5a:59:9a:14:f6:06:a9:00:e8:33:1e:d6:d0:
                    34:69:c9:c5:22:eb:a8:37:48:85:39:a5:68:7f:87:
                    11:e6:af:14:a6:2b:64:e3:c4:8f:ee:a5:23:2d:83:
                    69:5b:b2:e7:f2:39:df:e7:00:1d:a8:8d:d1:5e:d7:
                    04:37:aa:97:a6:d2:56:f4:93:5e:54:77:d7:67:db:
                    8f:f4:da:4d:e1:24:3e:97:bf:99:17:7f:92:77:75:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:6F:F4:54:74:8C:D0:D3:1C:61:44:14:B7:37:F8:55:1A:D7:1C
            X509v3 Authority Key Identifier:
                keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a4d9c2136725529dace2772c23e52aa48ce7880e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:550:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:a8:eb:da:c8:e3:f3:f1:50:31:27:53:d4:ad:a5:eb:e3:46:
         ba:2c:8a:e4:a5:a8:f3:13:de:ee:32:d9:a9:c6:b0:db:a6:b3:
         b2:0b:d3:48:90:75:9f:1a:47:75:44:bd:44:36:46:61:3e:b9:
         9f:2a:d1:f2:2d:a0:6a:ac:53:b6:21:aa:e1:2f:98:4f:32:69:
         a4:97:0f:a0:d4:42:dd:fa:bc:29:c4:cf:57:b2:7b:17:74:6e:
         d0:6d:eb:4d:81:7e:a8:07:ce:b7:9b:3d:10:48:de:1f:03:f4:
         b7:12:40:35:6f:b3:31:dd:82:36:00:ee:71:68:a0:23:ff:ce:
         b2:87:40:a2:b1:f6:3c:e3:78:63:41:6d:12:1d:81:c1:46:0b:
         a3:57:05:7b:8c:b6:94:ce:d8:f2:09:31:47:36:03:03:ff:2d:
         88:47:6f:a2:42:aa:cc:f6:9d:5b:50:2c:dc:13:7c:38:dd:6c:
         97:69:80:9b:68:92:4d:a4:9f:a5:50:14:e5:d8:1a:dc:f6:63:
         11:39:bc:08:54:ac:31:9d:c9:b1:6c:e9:df:cb:1c:8d:54:51:
         3d:cf:f8:4e:b0:aa:8e:a3:6c:18:50:78:b8:f2:11:ca:64:a3:
         99:29:cd:a6:bc:9f:bb:3b:db:73:b2:9a:71:9d:aa:d3:ed:1e:
         6c:65:5d:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBDVPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
OTAyMTAxZmM5ODU2NWU3NGY0MzZhNzJmNWNiOGUzNTU5OWUyNjcwHhcNMjMxMDIw
MTIyMjEwWhcNMjUxMDIwMTIyMjEwWjAzMTEwLwYDVQQDEyhhNGQ5YzIxMzY3MjU1
MjlkYWNlMjc3MmMyM2U1MmFhNDhjZTc4ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkly8XE+MW3F1dCDUVS3nP4M+Ze5C843DAgsilPKdj6I3GK4l
kjS1+XR1eAigjK8uRerVHoIL/SLywCImbsHkZ7V8Sy5XeVpqrdYBaWdogm8ZuXsx
/hnYr5dRA+WDETgacYlGEzAxfxuDGOytW8oZr+jvGRxzZfgFfb2GVWLQYjTgI4Rw
YDr3eoLdkqqCvuObo1JXKZvj2CHXyGp+R+XSADPGMg1cXlpZmhT2BqkA6DMe1tA0
acnFIuuoN0iFOaVof4cR5q8Upitk48SP7qUjLYNpW7Ln8jnf5wAdqI3RXtcEN6qX
ptJW9JNeVHfXZ9uP9NpN4SQ+l7+ZF3+Sd3W5/QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFEAb/RUdIzQ0xxhRBS3N/hVGtccMB8GA1UdIwQYMBaAFIK+FpGvc69W3+B8
R/42ptdtod8bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM5MDIx
MDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFlNmMyZDktNmE5NC00OWQ5LTlhNDgtNTEzODgz
MWQzMzYyL2E0ZDljMjEzNjcyNTUyOWRhY2UyNzcyYzIzZTUyYWE0OGNlNzg4MGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWU2YzJkOS02YTk0LTQ5ZDktOWE0OC01MTM4
ODMxZDMzNjIvZWM5MDIxMDFmYzk4NTY1ZTc0ZjQzNmE3MmY1Y2I4ZTM1NTk5ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgABVAAKjANBgkqhkiG9w0BAQsFAAOCAQEAIajr2sjj8/FQ
MSdT1K2l6+NGuiyK5KWo8xPe7jLZqcaw26azsgvTSJB1nxpHdUS9RDZGYT65nyrR
8i2gaqxTtiGq4S+YTzJppJcPoNRC3fq8KcTPV7J7F3Ru0G3rTYF+qAfOt5s9EEje
HwP0txJANW+zMd2CNgDucWigI//OsodAorH2PON4Y0FtEh2BwUYLo1cFe4y2lM7Y
8gkxRzYDA/8tiEdvokKqzPadW1As3BN8ON1sl2mAm2iSTaSfpVAU5dga3PZjETm8
CFSsMZ3JsWzp38scjVRRPc/4TrCqjqNsGFB4uPIRymSjmSnNpryfuzvbc7KacZ2q
0+0ebGVdGQ==
-----END CERTIFICATE-----