Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/0b2565e60f971554e686696a32c03de619200861.roa
File:                     0b2565e60f971554e686696a32c03de619200861.roa (raw, json)
Hash identifier:          wd/r5MFU1clkXRRhWWtEAf9DGBEA9/oT4qVcEeOlaEM=
Subject key identifier:   3B:6C:94:09:06:3E:28:D1:BE:69:44:21:01:01:40:C8:31:94:73:51
Certificate issuer:       /CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
Certificate serial:       0EC4B0
Authority key identifier: B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/0b2565e60f971554e686696a32c03de619200861.roa
Signing time:             Fri 24 Nov 2023 15:42:57 +0000
ROA not before:           Fri 24 Nov 2023 15:42:57 +0000
ROA not after:            Mon 24 Nov 2025 15:42:57 +0000
asID:                     19429
IP address blocks:        2801:1d:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967856 (0xec4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6cb1153f9d2823a345e050aa08a59869c1972e
        Validity
            Not Before: Nov 24 15:42:57 2023 GMT
            Not After : Nov 24 15:42:57 2025 GMT
        Subject: CN=0b2565e60f971554e686696a32c03de619200861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:8f:cd:28:fc:d4:63:f2:30:1f:eb:b9:a9:
                    21:14:de:f5:ec:5a:48:a6:5a:b2:ab:58:cd:cd:a2:
                    35:01:31:ef:98:8b:77:b8:15:df:3b:a8:7d:2b:c7:
                    f3:1c:37:2b:cc:86:98:ab:41:55:d1:08:18:65:dd:
                    b6:61:1b:5b:e4:51:1c:ec:10:13:72:0c:f5:65:ca:
                    0d:f9:a2:ae:20:4f:69:e0:30:2c:8f:f8:ee:b6:3c:
                    76:24:be:30:e8:88:6e:c7:77:7c:a6:ad:a6:32:65:
                    8a:66:8b:e7:4e:5d:99:f8:f1:a9:05:2e:14:74:c0:
                    b6:33:55:dd:21:9f:15:7b:7d:48:cd:ad:d9:33:2d:
                    1c:5b:ef:e3:85:6c:4f:46:cf:86:f6:25:a7:53:4a:
                    59:d7:d1:4d:11:42:df:0a:ba:53:e3:a3:d6:96:47:
                    17:89:9d:5e:59:64:34:51:9c:da:42:9f:38:2c:af:
                    26:d4:92:63:11:74:17:25:73:49:1f:4a:45:03:48:
                    45:36:58:e2:34:4c:a7:20:cf:07:0f:4a:70:e4:5e:
                    4d:f1:20:2b:41:7e:c2:94:a7:c7:de:d5:40:99:90:
                    e4:fd:8d:d6:dc:b8:f6:28:1f:9f:33:59:78:7f:78:
                    01:93:3a:0b:5a:ae:05:0a:20:c5:36:c7:31:27:ce:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6C:94:09:06:3E:28:D1:BE:69:44:21:01:01:40:C8:31:94:73:51
            X509v3 Authority Key Identifier:
                keyid:B1:91:4D:1E:D5:69:1F:1F:92:2C:EE:5F:8A:E0:F6:18:CE:1D:37:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6cb1153f9d2823a345e050aa08a59869c1972e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/0b2565e60f971554e686696a32c03de619200861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6149e638-df36-46c3-8055-6b26317c235e/fc6cb1153f9d2823a345e050aa08a59869c1972e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4e:c7:00:7a:52:7f:2b:43:9c:4d:9a:ff:a3:a6:61:72:dd:
         89:c9:5c:77:69:6c:79:dc:bd:3f:34:d5:8e:08:e3:65:70:34:
         46:b8:be:76:3f:7a:5c:46:b9:41:86:9e:64:05:89:28:ea:ab:
         12:78:45:08:bd:db:fc:87:14:81:e1:f6:18:7f:7f:cf:f3:98:
         fa:b4:7b:be:54:46:1f:5f:a3:7a:1b:77:4c:89:b2:c4:89:4e:
         2e:02:8e:37:0d:d3:9d:2a:37:4a:b1:38:53:26:42:fa:4c:9c:
         94:aa:9f:2c:2c:66:2d:ba:61:db:c0:6c:07:22:30:b6:7a:ed:
         a1:95:e3:67:00:74:1c:99:78:52:52:6e:0c:69:bc:6e:ec:30:
         04:c9:3f:c0:4f:05:7a:61:9d:08:78:50:6e:d0:2b:78:d4:7a:
         cd:99:1d:22:2d:28:89:56:1d:27:10:fe:9c:87:6f:ca:9a:a4:
         98:fd:53:55:56:1e:92:a4:63:91:9f:93:fd:3c:31:20:8a:50:
         a6:d6:5e:c1:76:d6:a1:2d:81:32:02:78:31:38:06:91:d2:e4:
         98:c0:23:7a:8b:a2:6c:0e:25:a4:b8:16:02:11:21:18:15:9e:
         09:37:de:22:1c:fa:25:1c:71:f8:60:25:a6:90:12:e1:ec:e6:
         f1:35:dc:4d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDsSwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZj
NmNiMTE1M2Y5ZDI4MjNhMzQ1ZTA1MGFhMDhhNTk4NjljMTk3MmUwHhcNMjMxMTI0
MTU0MjU3WhcNMjUxMTI0MTU0MjU3WjAzMTEwLwYDVQQDEygwYjI1NjVlNjBmOTcx
NTU0ZTY4NjY5NmEzMmMwM2RlNjE5MjAwODYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvOuPzSj81GPyMB/ruakhFN717FpIplqyq1jNzaI1ATHvmIt3
uBXfO6h9K8fzHDcrzIaYq0FV0QgYZd22YRtb5FEc7BATcgz1ZcoN+aKuIE9p4DAs
j/jutjx2JL4w6Ihux3d8pq2mMmWKZovnTl2Z+PGpBS4UdMC2M1XdIZ8Ve31Iza3Z
My0cW+/jhWxPRs+G9iWnU0pZ19FNEULfCrpT46PWlkcXiZ1eWWQ0UZzaQp84LK8m
1JJjEXQXJXNJH0pFA0hFNljiNEynIM8HD0pw5F5N8SArQX7ClKfH3tVAmZDk/Y3W
3Lj2KB+fM1l4f3gBkzoLWq4FCiDFNscxJ843bwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFDtslAkGPijRvmlEIQEBQMgxlHNRMB8GA1UdIwQYMBaAFLGRTR7VaR8fkizu
X4rg9hjOHTcWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmM2Y2Ix
MTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjE0OWU2MzgtZGYzNi00NmMzLTgwNTUtNmIyNjMx
N2MyMzVlLzBiMjU2NWU2MGY5NzE1NTRlNjg2Njk2YTMyYzAzZGU2MTkyMDA4NjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MTQ5ZTYzOC1kZjM2LTQ2YzMtODA1NS02YjI2
MzE3YzIzNWUvZmM2Y2IxMTUzZjlkMjgyM2EzNDVlMDUwYWEwOGE1OTg2OWMxOTcy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB2IADANBgkqhkiG9w0BAQsFAAOCAQEAS07HAHpSfytD
nE2a/6OmYXLdiclcd2lsedy9PzTVjgjjZXA0Rri+dj96XEa5QYaeZAWJKOqrEnhF
CL3b/IcUgeH2GH9/z/OY+rR7vlRGH1+jeht3TImyxIlOLgKONw3TnSo3SrE4UyZC
+kyclKqfLCxmLbph28BsByIwtnrtoZXjZwB0HJl4UlJuDGm8buwwBMk/wE8FemGd
CHhQbtAreNR6zZkdIi0oiVYdJxD+nIdvypqkmP1TVVYekqRjkZ+T/TwxIIpQptZe
wXbWoS2BMgJ4MTgGkdLkmMAjeouibA4lpLgWAhEhGBWeCTfeIhz6JRxx+GAlppAS
4ezm8TXcTQ==
-----END CERTIFICATE-----