Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/a05bdc99fc6f8941fc90095b0fabc9c4108cf907.roa
File:                     a05bdc99fc6f8941fc90095b0fabc9c4108cf907.roa (raw, json)
Hash identifier:          hyqZJB8SCmFsXpUql9oCQm6VEL8MHBgp+5++ENHhNYM=
Subject key identifier:   60:FC:1C:AA:DA:34:05:5A:F1:58:27:38:71:CD:28:E0:97:DE:62:11
Certificate issuer:       /CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Certificate serial:       19D73F
Authority key identifier: 5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/a05bdc99fc6f8941fc90095b0fabc9c4108cf907.roa
Signing time:             Thu 20 Apr 2023 08:30:00 +0000
ROA not before:           Wed 19 Apr 2023 08:30:00 +0000
ROA not after:            Fri 18 Apr 2025 08:30:00 +0000
asID:                     22860
IP address blocks:        2800:8f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693503 (0x19d73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
        Validity
            Not Before: Apr 19 08:30:00 2023 GMT
            Not After : Apr 18 08:30:00 2025 GMT
        Subject: CN=a05bdc99fc6f8941fc90095b0fabc9c4108cf907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:40:6b:53:83:21:be:8d:47:6c:2c:9a:6d:
                    f5:f0:8c:37:41:a7:b6:a6:6a:bf:33:d6:b6:55:13:
                    85:79:50:72:6a:43:4b:fc:3c:85:ef:0c:c8:33:3f:
                    82:ca:02:9a:69:30:c7:88:e4:65:e0:c3:ec:de:32:
                    c6:33:c6:bc:d3:6b:74:aa:6a:19:e0:88:2d:70:97:
                    f9:a1:a7:41:7a:1c:8c:41:2b:22:36:e3:17:3d:ae:
                    03:80:60:dd:4b:02:6b:ad:0c:b4:83:94:ef:49:69:
                    5c:92:3b:5a:fc:2f:4f:62:5b:c9:9b:09:d2:fb:6f:
                    55:f6:94:0e:b8:af:d0:d6:54:66:fe:2b:b2:81:60:
                    75:8b:2d:f2:f1:67:8c:f5:04:cb:eb:df:3a:18:4a:
                    a8:b2:7f:b8:74:aa:bf:7b:95:ae:b6:24:75:8b:6c:
                    dc:e2:19:49:44:a9:a7:d8:19:08:b3:ef:55:14:40:
                    23:94:02:6f:e0:82:bb:1d:8c:83:6e:02:0f:f1:07:
                    7b:21:52:22:05:ab:fe:19:5e:e7:d8:a1:25:a6:b9:
                    4f:28:10:48:78:e7:b2:19:7b:d4:d4:c9:51:a6:3e:
                    d1:0a:6a:03:80:8a:a2:a3:d7:b9:d5:d5:00:46:6e:
                    e3:b4:2c:10:57:16:0f:07:59:1b:76:bb:7d:8b:b9:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:1C:AA:DA:34:05:5A:F1:58:27:38:71:CD:28:E0:97:DE:62:11
            X509v3 Authority Key Identifier:
                keyid:5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/a05bdc99fc6f8941fc90095b0fabc9c4108cf907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:51:6b:3f:41:eb:88:49:f9:a4:b8:77:aa:e1:14:31:e9:
         c8:88:29:a2:e4:22:f9:29:3f:26:73:08:3f:7d:ee:03:77:e5:
         46:6e:be:97:b7:8d:b5:31:1c:a9:88:c6:53:7f:78:61:49:a8:
         4f:b4:e5:a2:81:e1:6c:26:a4:6e:57:19:bf:c7:0f:28:80:8f:
         f0:09:91:35:9e:4a:82:8b:03:1d:cd:f7:06:55:0a:15:6f:db:
         0e:cf:32:d7:b9:ba:b2:17:26:39:93:37:0a:d4:32:da:b3:11:
         de:f0:a5:a7:fc:8d:3e:e3:a1:4a:32:d5:85:23:39:f9:df:47:
         e0:d0:28:5a:ab:25:3f:3a:57:f4:0f:5f:52:2c:a0:c8:b3:06:
         d5:22:2f:c0:88:5c:43:9c:7f:ca:06:97:2f:5e:dc:7f:cc:67:
         26:0e:38:d7:9f:d6:92:bb:ea:2c:23:0b:ca:fd:6d:07:12:8a:
         ff:1f:2c:fd:7f:67:9b:1f:8d:85:c7:bf:bc:9b:6a:9e:99:67:
         c5:54:1c:c0:31:22:09:98:d4:3d:6a:33:9e:87:08:03:25:3a:
         1b:e4:f6:7d:90:f3:53:15:a2:ae:5b:89:c1:06:c3:69:ee:22:
         bd:09:8c:a0:ff:fc:f3:1c:d4:f1:87:16:8f:3e:5a:95:57:71:
         53:97:48:8b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGdc/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJk
ZTEzYmQ1YzA1YzFiZWJiZDY4ZTU3MDAxYWExYzVkOWY3YzAzYTEwHhcNMjMwNDE5
MDgzMDAwWhcNMjUwNDE4MDgzMDAwWjAzMTEwLwYDVQQDEyhhMDViZGM5OWZjNmY4
OTQxZmM5MDA5NWIwZmFiYzljNDEwOGNmOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj2xAa1ODIb6NR2wsmm318Iw3Qae2pmq/M9a2VROFeVByakNL
/DyF7wzIMz+CygKaaTDHiORl4MPs3jLGM8a802t0qmoZ4IgtcJf5oadBehyMQSsi
NuMXPa4DgGDdSwJrrQy0g5TvSWlckjta/C9PYlvJmwnS+29V9pQOuK/Q1lRm/iuy
gWB1iy3y8WeM9QTL6986GEqosn+4dKq/e5WutiR1i2zc4hlJRKmn2BkIs+9VFEAj
lAJv4IK7HYyDbgIP8Qd7IVIiBav+GV7n2KElprlPKBBIeOeyGXvU1MlRpj7RCmoD
gIqio9e51dUARm7jtCwQVxYPB1kbdrt9i7kQwwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGD8HKraNAVa8VgnOHHNKOCX3mIRMB8GA1UdIwQYMBaAFFr2zi7U6oaP0bKS
8n/07//4WfH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmRlMTNi
ZDVjMDVjMWJlYmJkNjhlNTcwMDFhYTFjNWQ5ZjdjMDNhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjEwZDk3ZWMtZGNhYi00ZGEzLTk2MDktMDViMDQ4
MDY3MTUyL2EwNWJkYzk5ZmM2Zjg5NDFmYzkwMDk1YjBmYWJjOWM0MTA4Y2Y5MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTBkOTdlYy1kY2FiLTRkYTMtOTYwOS0wNWIw
NDgwNjcxNTIvMmRlMTNiZDVjMDVjMWJlYmJkNjhlNTcwMDFhYTFjNWQ5ZjdjMDNh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgACPAwDQYJKoZIhvcNAQELBQADggEBAIXkUWs/QeuISfmk
uHeq4RQx6ciIKaLkIvkpPyZzCD997gN35UZuvpe3jbUxHKmIxlN/eGFJqE+05aKB
4WwmpG5XGb/HDyiAj/AJkTWeSoKLAx3N9wZVChVv2w7PMte5urIXJjmTNwrUMtqz
Ed7wpaf8jT7joUoy1YUjOfnfR+DQKFqrJT86V/QPX1IsoMizBtUiL8CIXEOcf8oG
ly9e3H/MZyYOONef1pK76iwjC8r9bQcSiv8fLP1/Z5sfjYXHv7ybap6ZZ8VUHMAx
IgmY1D1qM56HCAMlOhvk9n2Q81MVoq5bicEGw2nuIr0JjKD//PMc1PGHFo8+WpVX
cVOXSIs=
-----END CERTIFICATE-----