Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/5d2f56ca09e6385447819bee435f5dda0141e6ef.roa
File:                     5d2f56ca09e6385447819bee435f5dda0141e6ef.roa (raw, json)
Hash identifier:          1Wi/xRpCRDzoeu7lPohX7XBor3stGzImDfVCaDCrEs0=
Subject key identifier:   05:04:B0:26:6A:F1:7C:14:40:A5:30:DF:9B:33:BA:F5:17:64:A7:F6
Certificate issuer:       /CN=a49fdf5c435c9fbcfb4b67172f731850c567f0a7
Certificate serial:       1FE7AD
Authority key identifier: 36:4F:40:23:FD:4E:27:BE:AA:29:9E:8F:E8:B3:B1:A2:DF:BE:9B:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/5d2f56ca09e6385447819bee435f5dda0141e6ef.roa
Signing time:             Mon 03 Jul 2023 14:12:22 +0000
ROA not before:           Sun 02 Jul 2023 14:12:22 +0000
ROA not after:            Thu 03 Jul 2025 14:12:22 +0000
asID:                     52468
IP address blocks:        2803:f2c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090925 (0x1fe7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49fdf5c435c9fbcfb4b67172f731850c567f0a7
        Validity
            Not Before: Jul  2 14:12:22 2023 GMT
            Not After : Jul  3 14:12:22 2025 GMT
        Subject: CN=5d2f56ca09e6385447819bee435f5dda0141e6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:02:ef:24:b4:df:dd:92:b8:9e:70:a4:6f:
                    1e:73:53:0d:98:ac:94:e1:07:65:df:0c:49:12:2b:
                    87:0e:68:a9:09:7d:a1:a7:3e:56:6d:83:1d:5d:b5:
                    73:d0:0c:d4:dc:71:a4:9e:fd:83:62:d5:12:08:33:
                    09:3f:a3:e3:5e:c9:20:26:e0:68:ce:2d:36:95:1f:
                    14:b2:55:cc:08:22:4d:66:ef:7c:f8:17:62:a6:bb:
                    61:d2:42:2d:43:19:98:76:47:52:2f:3b:fe:2e:c4:
                    86:e0:6a:76:18:79:6a:0c:82:63:75:0a:60:bd:ac:
                    0f:37:72:c9:af:4a:b2:9e:7d:09:4b:60:fd:33:5a:
                    da:bc:50:80:bd:46:8d:db:9b:d0:b8:13:bc:d1:67:
                    c0:18:8b:a8:a3:0c:75:a8:e2:25:ca:8d:8a:dc:99:
                    b6:18:cc:93:a4:3e:d2:c4:35:0d:fa:37:20:94:5f:
                    d3:b2:27:30:42:02:be:ae:03:62:8c:1d:23:73:56:
                    3d:87:b8:80:58:be:b2:43:84:a7:f6:be:ae:e5:d6:
                    0a:20:36:ff:0b:1b:b9:6a:17:24:ca:f1:c8:d9:77:
                    99:8b:4e:ab:23:e1:09:b1:28:61:4d:25:e6:7d:59:
                    30:23:c1:fe:df:b9:b1:2b:ec:bf:ba:61:4c:5c:ee:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:B0:26:6A:F1:7C:14:40:A5:30:DF:9B:33:BA:F5:17:64:A7:F6
            X509v3 Authority Key Identifier:
                keyid:36:4F:40:23:FD:4E:27:BE:AA:29:9E:8F:E8:B3:B1:A2:DF:BE:9B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/5d2f56ca09e6385447819bee435f5dda0141e6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56da29e8-f038-443b-98de-8e83b0985d27/a49fdf5c435c9fbcfb4b67172f731850c567f0a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:3f:dc:43:ba:0b:39:a7:56:1c:b6:c4:30:4d:8d:5a:2e:
         7b:91:6a:65:18:0e:ca:53:4b:1a:d9:3d:31:49:14:7f:cd:6c:
         97:28:53:cd:5d:f5:71:46:37:91:e4:0c:90:f1:d4:ff:2c:d0:
         ba:dc:5c:44:78:d4:c1:3d:a1:25:18:78:60:e5:6b:aa:07:64:
         4e:e2:ee:ca:f1:46:c8:39:37:12:e7:ff:df:48:21:ea:71:13:
         c6:e4:09:61:bb:f7:6e:a2:ff:a2:cf:23:74:90:47:17:c2:0f:
         03:c6:14:79:c3:0a:f6:27:40:51:b9:a5:cf:35:c7:c5:f3:d5:
         15:5b:76:09:76:70:ab:14:db:59:49:a8:9a:4e:9d:c5:0f:a5:
         9e:87:b2:c1:4b:3e:ba:1e:0b:f3:bb:02:57:d8:98:39:70:1a:
         46:61:b0:64:10:34:61:ef:4d:fa:d7:39:39:88:ab:c1:a1:dc:
         63:24:25:62:22:8e:fe:e0:1b:70:f1:0c:8d:80:a6:6f:89:1b:
         33:6f:35:ca:39:cd:f2:31:d9:3f:ef:21:c5:25:b4:f2:af:b1:
         38:cb:69:2b:12:3a:87:d8:48:19:20:16:ce:a7:6a:58:c5:2d:
         00:22:88:76:72:91:dc:7d:f2:79:10:99:57:30:4c:3f:2b:72:
         61:ac:53:90
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDH+etMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
OWZkZjVjNDM1YzlmYmNmYjRiNjcxNzJmNzMxODUwYzU2N2YwYTcwHhcNMjMwNzAy
MTQxMjIyWhcNMjUwNzAzMTQxMjIyWjAzMTEwLwYDVQQDEyg1ZDJmNTZjYTA5ZTYz
ODU0NDc4MTliZWU0MzVmNWRkYTAxNDFlNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi/wC7yS0392SuJ5wpG8ec1MNmKyU4Qdl3wxJEiuHDmipCX2h
pz5WbYMdXbVz0AzU3HGknv2DYtUSCDMJP6PjXskgJuBozi02lR8UslXMCCJNZu98
+Bdiprth0kItQxmYdkdSLzv+LsSG4Gp2GHlqDIJjdQpgvawPN3LJr0qynn0JS2D9
M1ravFCAvUaN25vQuBO80WfAGIuoowx1qOIlyo2K3Jm2GMyTpD7SxDUN+jcglF/T
sicwQgK+rgNijB0jc1Y9h7iAWL6yQ4Sn9r6u5dYKIDb/Cxu5ahckyvHI2XeZi06r
I+EJsShhTSXmfVkwI8H+37mxK+y/umFMXO7djQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAUEsCZq8XwUQKUw35szuvUXZKf2MB8GA1UdIwQYMBaAFDZPQCP9Tie+qime
j+izsaLfvpuVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTQ5ZmRm
NWM0MzVjOWZiY2ZiNGI2NzE3MmY3MzE4NTBjNTY3ZjBhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTZkYTI5ZTgtZjAzOC00NDNiLTk4ZGUtOGU4M2Iw
OTg1ZDI3LzVkMmY1NmNhMDllNjM4NTQ0NzgxOWJlZTQzNWY1ZGRhMDE0MWU2ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NmRhMjllOC1mMDM4LTQ0M2ItOThkZS04ZTgz
YjA5ODVkMjcvYTQ5ZmRmNWM0MzVjOWZiY2ZiNGI2NzE3MmY3MzE4NTBjNTY3ZjBh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD8sAwDQYJKoZIhvcNAQELBQADggEBAB9PP9xDugs5p1Yc
tsQwTY1aLnuRamUYDspTSxrZPTFJFH/NbJcoU81d9XFGN5HkDJDx1P8s0LrcXER4
1ME9oSUYeGDla6oHZE7i7srxRsg5NxLn/99IIepxE8bkCWG7926i/6LPI3SQRxfC
DwPGFHnDCvYnQFG5pc81x8Xz1RVbdgl2cKsU21lJqJpOncUPpZ6HssFLProeC/O7
AlfYmDlwGkZhsGQQNGHvTfrXOTmIq8Gh3GMkJWIijv7gG3DxDI2Apm+JGzNvNco5
zfIx2T/vIcUltPKvsTjLaSsSOofYSBkgFs6naljFLQAiiHZykdx98nkQmVcwTD8r
cmGsU5A=
-----END CERTIFICATE-----