Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/cf77f229278e022de8d9e6d0ccba666211c4a59f.roa
File:                     cf77f229278e022de8d9e6d0ccba666211c4a59f.roa (raw, json)
Hash identifier:          KbBvjP+GZU/aGsdyzwF7bDoHRNG1gOuXtoRPOnTQTkw=
Subject key identifier:   EE:32:2C:4B:D6:B6:7E:D9:44:CE:5B:EC:08:9D:C5:CF:C2:C5:D4:BA
Certificate issuer:       /CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
Certificate serial:       2169BF
Authority key identifier: 05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/cf77f229278e022de8d9e6d0ccba666211c4a59f.roa
Signing time:             Sat 17 Jun 2023 08:30:06 +0000
ROA not before:           Fri 16 Jun 2023 08:30:06 +0000
ROA not after:            Sun 15 Jun 2025 08:30:06 +0000
asID:                     52495
IP address blocks:        2803:fa00::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189759 (0x2169bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
        Validity
            Not Before: Jun 16 08:30:06 2023 GMT
            Not After : Jun 15 08:30:06 2025 GMT
        Subject: CN=cf77f229278e022de8d9e6d0ccba666211c4a59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:74:76:b1:e2:29:bf:56:f2:72:20:ef:e1:
                    48:ae:c8:0f:75:ad:b6:ee:15:bc:70:4f:07:5c:9f:
                    f1:a6:67:63:8e:ea:2f:ae:1f:18:65:35:f5:3d:fb:
                    4f:b4:b7:63:05:39:0a:a0:e9:1e:4c:d2:73:aa:98:
                    52:e2:94:16:3f:20:ff:db:52:d6:ac:4b:ec:e5:85:
                    71:28:2a:4b:85:e4:0a:c5:4d:60:75:95:7e:b8:fa:
                    a2:21:51:3a:6d:95:58:df:30:71:58:3c:6a:f3:6e:
                    ca:69:38:63:d5:c8:ed:10:99:aa:d8:94:5b:30:d1:
                    df:f8:ad:40:5a:04:59:f0:39:96:77:5c:43:8a:3d:
                    ce:46:b4:ac:25:c5:54:d4:4c:0c:d9:e8:b5:a3:16:
                    69:60:ca:84:11:7e:52:42:c8:fb:50:69:11:97:04:
                    68:c5:9c:f1:45:7e:06:87:d3:9f:3f:a2:09:bf:04:
                    3d:ad:4d:7b:ff:7e:d0:c5:3e:40:0e:f4:93:90:4e:
                    3c:b2:dc:76:11:02:90:b2:6a:7f:c2:f7:42:6f:3b:
                    8e:00:9d:36:cd:5a:7e:5d:10:ed:c2:fe:9d:77:72:
                    48:db:f2:15:f7:29:16:e4:f5:26:d3:b3:a4:1b:f5:
                    71:1a:32:7d:a4:89:5e:5f:12:b2:f9:01:26:c6:31:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:32:2C:4B:D6:B6:7E:D9:44:CE:5B:EC:08:9D:C5:CF:C2:C5:D4:BA
            X509v3 Authority Key Identifier:
                keyid:05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/cf77f229278e022de8d9e6d0ccba666211c4a59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:4a:3b:d9:c7:3f:17:ca:df:14:e0:eb:db:1c:7e:91:6d:
         d2:97:1e:0f:89:d6:13:2b:d5:f9:ce:db:f9:29:41:2d:24:37:
         14:ac:31:21:d7:14:49:ef:cd:ab:40:c7:95:37:77:f3:5f:da:
         bb:a6:07:40:98:ed:aa:cb:b9:75:62:f2:9c:50:81:ef:3e:af:
         68:95:cf:b1:46:b6:a9:a9:fa:14:35:1a:a2:59:ca:d5:ff:2a:
         e6:d8:ea:92:ac:6e:e7:2d:91:9d:05:41:41:d3:e1:ef:b4:9d:
         df:53:6f:35:28:4e:ce:f5:98:14:43:e6:67:e4:a0:79:1c:95:
         b8:dd:3c:70:3b:96:df:92:d4:0f:00:f9:a1:07:d9:e6:1b:2a:
         ce:15:1e:59:12:10:fb:36:5c:6d:73:a3:67:5f:72:5f:e1:bf:
         cd:bb:da:22:c8:9b:1e:b1:be:51:f9:ef:01:12:31:e1:34:c9:
         2c:74:bb:11:12:36:98:c3:e9:27:2d:7e:e5:0b:04:0b:27:16:
         d5:2e:f1:72:e3:98:bc:45:50:c2:8c:d7:a9:58:46:b4:5e:85:
         04:63:f9:6f:cc:82:7b:eb:af:2d:42:be:fa:06:04:d1:26:68:
         a3:89:af:01:23:8f:8c:e9:cc:86:c7:41:48:23:ce:a7:51:1d:
         30:0e:f9:03
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIWm/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
N2RjNmE0NmFjODAwM2MwNmM1ZGNjMWM0NGU1ZTMzNGZjYzRhNjEwHhcNMjMwNjE2
MDgzMDA2WhcNMjUwNjE1MDgzMDA2WjAzMTEwLwYDVQQDEyhjZjc3ZjIyOTI3OGUw
MjJkZThkOWU2ZDBjY2JhNjY2MjExYzRhNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtnp0drHiKb9W8nIg7+FIrsgPda227hW8cE8HXJ/xpmdjjuov
rh8YZTX1PftPtLdjBTkKoOkeTNJzqphS4pQWPyD/21LWrEvs5YVxKCpLheQKxU1g
dZV+uPqiIVE6bZVY3zBxWDxq827KaThj1cjtEJmq2JRbMNHf+K1AWgRZ8DmWd1xD
ij3ORrSsJcVU1EwM2ei1oxZpYMqEEX5SQsj7UGkRlwRoxZzxRX4Gh9OfP6IJvwQ9
rU17/37QxT5ADvSTkE48stx2EQKQsmp/wvdCbzuOAJ02zVp+XRDtwv6dd3JI2/IV
9ykW5PUm07OkG/VxGjJ9pIleXxKy+QEmxjG6GQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFO4yLEvWtn7ZRM5b7Aidxc/CxdS6MB8GA1UdIwQYMBaAFAVhV+WXosr9I8XM
3ko6n7kTT7nQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWI3ZGM2
YTQ2YWM4MDAzYzA2YzVkY2MxYzQ0ZTVlMzM0ZmNjNGE2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTUyMzU0ZTMtYTgwYy00NTgwLThjYmYtMGY2NTYy
OTI4MDQ4L2NmNzdmMjI5Mjc4ZTAyMmRlOGQ5ZTZkMGNjYmE2NjYyMTFjNGE1OWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NTIzNTRlMy1hODBjLTQ1ODAtOGNiZi0wZjY1
NjI5MjgwNDgvYWI3ZGM2YTQ2YWM4MDAzYzA2YzVkY2MxYzQ0ZTVlMzM0ZmNjNGE2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD+gAwDQYJKoZIhvcNAQELBQADggEBACw/SjvZxz8Xyt8U
4OvbHH6RbdKXHg+J1hMr1fnO2/kpQS0kNxSsMSHXFEnvzatAx5U3d/Nf2rumB0CY
7arLuXVi8pxQge8+r2iVz7FGtqmp+hQ1GqJZytX/KubY6pKsbuctkZ0FQUHT4e+0
nd9TbzUoTs71mBRD5mfkoHkclbjdPHA7lt+S1A8A+aEH2eYbKs4VHlkSEPs2XG1z
o2dfcl/hv8272iLImx6xvlH57wESMeE0ySx0uxESNpjD6SctfuULBAsnFtUu8XLj
mLxFUMKM16lYRrRehQRj+W/Mgnvrry1CvvoGBNEmaKOJrwEjj4zpzIbHQUgjzqdR
HTAO+QM=
-----END CERTIFICATE-----