Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/3ee15a58eb360c19f50c0aa8abdd1d0a5b7c3479.roa
File:                     3ee15a58eb360c19f50c0aa8abdd1d0a5b7c3479.roa (raw, json)
Hash identifier:          NB2IsmbbpKWvZDhzcwKCsXQudqgXLa4ffeppEj8e61A=
Subject key identifier:   87:3F:3D:4F:15:DE:A2:BE:26:CC:AD:CA:05:20:71:4E:0A:86:F9:A6
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       19B98E
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/3ee15a58eb360c19f50c0aa8abdd1d0a5b7c3479.roa
Signing time:             Wed 03 Aug 2022 13:52:57 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Sat 03 Aug 2024 03:00:00 +0000
asID:                     22541
IP address blocks:        2803:7680::/36 maxlen: 36
                          2803:7680:1000::/36 maxlen: 36
                          2803:7680:2000::/36 maxlen: 36
                          2803:7680:3000::/36 maxlen: 36
                          2803:7680:4000::/36 maxlen: 36
                          2803:7680:5000::/36 maxlen: 36
                          2803:7680:6000::/36 maxlen: 36
                          2803:7680:7000::/36 maxlen: 36
                          2803:7680:8000::/36 maxlen: 36
                          2803:7680:9000::/36 maxlen: 36
                          2803:7680:a000::/36 maxlen: 36
                          2803:7680:b000::/36 maxlen: 36
                          2803:7680:c000::/36 maxlen: 36
                          2803:7680:d000::/36 maxlen: 36
                          2803:7680:e000::/36 maxlen: 36
                          2803:7680:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685902 (0x19b98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Aug  3 03:00:00 2024 GMT
        Subject: CN=3ee15a58eb360c19f50c0aa8abdd1d0a5b7c3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:0d:6d:8d:50:05:a8:54:38:38:7a:32:59:
                    73:b4:9b:d1:aa:e7:1d:64:a4:61:35:62:dc:a9:e5:
                    1a:e8:01:d7:79:fa:51:68:d7:14:d0:23:d2:96:f8:
                    3c:4b:1a:f7:1b:40:6b:62:52:46:e6:d4:7d:0f:b5:
                    08:8f:f5:90:93:ba:11:b2:a0:b8:3b:d4:9a:82:e2:
                    b4:1a:ca:11:37:a5:f9:6b:96:64:91:a2:6a:70:b3:
                    e7:7a:3a:e1:ec:4a:e9:a7:5f:53:b9:25:f4:c1:f7:
                    c5:b8:bd:e0:21:8a:97:6f:b7:08:15:fc:7a:7c:40:
                    76:b1:02:ff:f4:87:3f:1a:79:ab:f9:5a:56:a8:8c:
                    2f:8d:71:e3:e2:57:cb:00:48:90:b3:3c:d4:a9:45:
                    b6:f9:1d:29:c2:d4:3d:cd:c2:8d:da:3e:1d:20:91:
                    b3:f9:15:4e:2c:58:4b:05:bf:d1:f9:73:07:27:3d:
                    c6:ee:33:1e:db:23:47:e4:d4:3c:f7:e3:67:8e:23:
                    86:92:d0:08:f4:1d:99:83:c1:70:7f:6d:40:bf:6e:
                    b6:3b:45:da:f2:f5:fb:7f:a1:f2:6d:23:8e:7e:c7:
                    97:5d:f2:af:91:3b:5f:39:c4:4c:a5:db:8b:4a:8c:
                    94:6a:b7:ad:c0:3b:f3:2f:67:37:32:ea:22:13:9e:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3F:3D:4F:15:DE:A2:BE:26:CC:AD:CA:05:20:71:4E:0A:86:F9:A6
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/3ee15a58eb360c19f50c0aa8abdd1d0a5b7c3479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:25:41:52:f7:9a:20:18:f8:da:a5:a9:c4:29:3f:9f:f5:e4:
         ed:e0:b4:05:e9:d9:bd:e7:43:be:c6:08:98:3d:c0:1e:60:42:
         54:b1:38:86:46:11:6c:6b:ea:88:f2:d8:a0:41:7f:7c:16:65:
         d2:b9:24:58:e1:31:ec:45:28:38:0f:22:c3:67:a3:a9:4a:8a:
         68:77:6f:0c:b8:98:c9:f2:b9:fb:c7:b6:8e:06:49:54:dc:cf:
         86:05:57:f9:95:e1:b9:b3:e3:8b:3f:51:6d:d9:8a:ff:85:d3:
         e5:d3:d1:6e:6e:b5:f2:77:b5:c6:ec:71:46:eb:7e:3a:3b:a8:
         76:5a:d2:b3:c7:3a:1b:d7:c7:01:34:f9:29:c7:b9:41:6f:12:
         e5:ca:f1:f8:e2:86:b5:af:f9:6f:b0:c1:7a:14:2d:d5:53:dc:
         e5:c3:87:d2:5e:35:ed:b4:ef:3c:69:df:23:0d:fa:a1:4f:96:
         48:d4:ed:98:68:97:cc:e9:10:c4:f9:a2:5d:ac:8d:fb:a1:00:
         4c:51:b7:56:6e:af:4b:7f:2c:f6:15:f6:59:73:78:3d:7f:bc:
         b1:db:47:02:41:c5:15:c7:24:0c:d9:59:a1:0b:11:98:83:76:
         33:28:3a:dc:f9:c3:aa:86:16:0a:85:e8:c6:57:f4:11:7d:8c:
         d6:fe:84:8f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGbmOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
MDQ2ZmZjYTExODY3ODRkNDIwOTQ0YjJmNTJhNjUyNWYyYTliOGQwHhcNMjIwODAz
MDMwMDAwWhcNMjQwODAzMDMwMDAwWjAzMTEwLwYDVQQDEygzZWUxNWE1OGViMzYw
YzE5ZjUwYzBhYThhYmRkMWQwYTViN2MzNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApwkNbY1QBahUODh6MllztJvRqucdZKRhNWLcqeUa6AHXefpR
aNcU0CPSlvg8Sxr3G0BrYlJG5tR9D7UIj/WQk7oRsqC4O9SaguK0GsoRN6X5a5Zk
kaJqcLPnejrh7Erpp19TuSX0wffFuL3gIYqXb7cIFfx6fEB2sQL/9Ic/Gnmr+VpW
qIwvjXHj4lfLAEiQszzUqUW2+R0pwtQ9zcKN2j4dIJGz+RVOLFhLBb/R+XMHJz3G
7jMe2yNH5NQ89+NnjiOGktAI9B2Zg8Fwf21Av262O0Xa8vX7f6HybSOOfseXXfKv
kTtfOcRMpduLSoyUaretwDvzL2c3MuoiE54nmwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIc/PU8V3qK+JsytygUgcU4KhvmmMB8GA1UdIwQYMBaAFIrrGOHN1vBRFW3s
wCOyOnm0ZgOuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjMwNDZm
ZmNhMTE4Njc4NGQ0MjA5NDRiMmY1MmE2NTI1ZjJhOWI4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjhkMmViNDEtNmNiOS00YzcyLTg2YTEtNGEyMWIw
NDFhOTVjLzNlZTE1YTU4ZWIzNjBjMTlmNTBjMGFhOGFiZGQxZDBhNWI3YzM0Nzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OGQyZWI0MS02Y2I5LTRjNzItODZhMS00YTIx
YjA0MWE5NWMvNjMwNDZmZmNhMTE4Njc4NGQ0MjA5NDRiMmY1MmE2NTI1ZjJhOWI4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDdoAwDQYJKoZIhvcNAQELBQADggEBADclQVL3miAY+Nql
qcQpP5/15O3gtAXp2b3nQ77GCJg9wB5gQlSxOIZGEWxr6ojy2KBBf3wWZdK5JFjh
MexFKDgPIsNno6lKimh3bwy4mMnyufvHto4GSVTcz4YFV/mV4bmz44s/UW3Ziv+F
0+XT0W5utfJ3tcbscUbrfjo7qHZa0rPHOhvXxwE0+SnHuUFvEuXK8fjihrWv+W+w
wXoULdVT3OXDh9JeNe207zxp3yMN+qFPlkjU7Zhol8zpEMT5ol2sjfuhAExRt1Zu
r0t/LPYV9llzeD1/vLHbRwJBxRXHJAzZWaELEZiDdjMoOtz5w6qGFgqF6MZX9BF9
jNb+hI8=
-----END CERTIFICATE-----