Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/0d0d0ec422166c96a563b871134775216e0f8112.roa
File:                     0d0d0ec422166c96a563b871134775216e0f8112.roa (raw, json)
Hash identifier:          pVaNAQDnQfAMxcCIt31ry9sX5t+ABNYL4iz0CsBI3jc=
Subject key identifier:   B7:43:C2:26:07:5E:61:B8:10:1F:2D:D3:00:22:28:31:CA:A0:57:44
Certificate issuer:       /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial:       284500
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/0d0d0ec422166c96a563b871134775216e0f8112.roa
Signing time:             Tue 09 Apr 2024 04:35:15 +0000
ROA not before:           Tue 09 Apr 2024 04:35:15 +0000
ROA not after:            Thu 09 Apr 2026 04:35:15 +0000
asID:                     21575
IP address blocks:        2803:f080:2400::/39 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2639104 (0x284500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
        Validity
            Not Before: Apr  9 04:35:15 2024 GMT
            Not After : Apr  9 04:35:15 2026 GMT
        Subject: CN=0d0d0ec422166c96a563b871134775216e0f8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:68:cf:10:75:3e:d3:0c:93:df:1e:06:d5:
                    07:fa:74:60:e8:5e:4a:cd:c9:cb:73:3d:12:98:c7:
                    90:a2:6d:79:ed:4e:6b:f4:e4:c4:de:b2:14:11:3e:
                    16:e3:9f:ad:5b:a8:ba:68:12:16:57:01:93:b4:94:
                    fc:26:53:60:b3:a0:bf:54:c7:6f:97:44:cf:ad:64:
                    6f:6d:b7:ae:66:92:24:12:1f:4e:d6:45:d2:e0:54:
                    b3:86:4a:65:68:a9:08:6a:e0:e2:11:5c:5f:32:15:
                    5a:a4:54:cc:c4:b8:82:ad:dc:0c:48:92:14:d4:bf:
                    ba:aa:b4:ff:7b:28:a4:7e:fb:a3:8a:dd:29:d9:b8:
                    9a:4a:75:cc:8c:ea:a8:0d:73:c0:8e:7a:c4:73:66:
                    b7:aa:88:bc:43:77:1e:74:00:03:f5:5f:0b:15:74:
                    41:e6:d2:6c:b0:12:0b:8e:b9:63:ce:91:aa:12:16:
                    4c:e1:40:bd:04:4d:90:3e:62:ef:6b:c5:53:e9:98:
                    ca:e2:cd:a8:e0:cf:bd:21:ed:48:6c:be:fa:6f:9e:
                    2e:01:dc:48:b7:d0:02:2d:2b:13:bf:eb:be:81:c8:
                    cf:25:d1:c4:3a:4a:54:75:99:67:bf:21:64:66:92:
                    71:94:cf:20:ea:ea:0e:20:6c:d0:06:03:8a:99:5c:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:C2:26:07:5E:61:B8:10:1F:2D:D3:00:22:28:31:CA:A0:57:44
            X509v3 Authority Key Identifier:
                keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/0d0d0ec422166c96a563b871134775216e0f8112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2400::/39

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:7b:e8:43:89:93:30:ae:34:3a:e3:b8:63:78:99:48:92:
         97:38:09:c5:02:74:45:d1:25:7a:1a:37:da:c5:1c:5f:a5:87:
         79:e4:59:1b:4a:4a:e4:d2:69:57:fa:0a:dc:ff:a6:91:89:ee:
         10:10:fc:a1:cd:81:5f:a3:15:b9:3f:6c:77:6c:4c:fb:42:16:
         f4:3c:bb:1c:39:71:a9:72:7c:00:68:69:1c:c7:31:f6:67:fc:
         95:fc:52:b3:da:8d:b6:3b:04:6a:8b:a7:ee:d7:70:46:fe:5f:
         49:73:2f:c2:6a:b1:c8:bb:ef:d8:ce:bc:f2:cd:b3:b1:7b:7b:
         c3:0c:65:3c:f4:0c:6b:5b:56:f4:02:2c:7f:bc:60:88:ca:31:
         a4:44:4b:32:f9:2f:c9:ba:c3:f0:78:53:78:06:22:81:a5:99:
         11:2a:56:3a:e1:00:70:80:91:ef:86:b8:0f:9f:e4:ee:5b:e1:
         9d:e6:fb:10:62:8d:c9:46:12:ff:26:1e:17:17:f3:a4:7e:e0:
         64:17:7a:cd:bb:27:09:33:24:40:ca:6f:8b:06:91:91:67:0a:
         a7:55:a0:40:1b:3c:20:93:bb:88:dd:2f:d9:f1:24:7a:78:f7:
         a0:3d:34:d5:5f:13:5d:0f:8f:09:6e:3b:93:3a:40:82:2c:ee:
         9e:2c:97:f4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDKEUAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNk
ZWZiNDk0NDk0ZDI1YmMxOWZiMTY1MzVlYTc0MmFkYzdhNzkyYjgwHhcNMjQwNDA5
MDQzNTE1WhcNMjYwNDA5MDQzNTE1WjAzMTEwLwYDVQQDEygwZDBkMGVjNDIyMTY2
Yzk2YTU2M2I4NzExMzQ3NzUyMTZlMGY4MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxfNozxB1PtMMk98eBtUH+nRg6F5KzcnLcz0SmMeQom157U5r
9OTE3rIUET4W45+tW6i6aBIWVwGTtJT8JlNgs6C/VMdvl0TPrWRvbbeuZpIkEh9O
1kXS4FSzhkplaKkIauDiEVxfMhVapFTMxLiCrdwMSJIU1L+6qrT/eyikfvujit0p
2biaSnXMjOqoDXPAjnrEc2a3qoi8Q3cedAAD9V8LFXRB5tJssBILjrljzpGqEhZM
4UC9BE2QPmLva8VT6ZjK4s2o4M+9Ie1IbL76b54uAdxIt9ACLSsTv+u+gcjPJdHE
OkpUdZlnvyFkZpJxlM8g6uoOIGzQBgOKmVzTjQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFLdDwiYHXmG4EB8t0wAiKDHKoFdEMB8GA1UdIwQYMBaAFFR09pEaOi4wvYXK
O6DZ3v5LnbptMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2RlZmI0
OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmNlOTAxNjctYWIwOS00ZGQyLWIzZTUtZDY4YmU1
MDdhN2E0LzBkMGQwZWM0MjIxNjZjOTZhNTYzYjg3MTEzNDc3NTIxNmUwZjgxMTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82Y2U5MDE2Ny1hYjA5LTRkZDItYjNlNS1kNjhi
ZTUwN2E3YTQvY2RlZmI0OTQ0OTRkMjViYzE5ZmIxNjUzNWVhNzQyYWRjN2E3OTJi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGASgD8IAkMA0GCSqGSIb3DQEBCwUAA4IBAQAnbHvoQ4mTMK40
OuO4Y3iZSJKXOAnFAnRF0SV6GjfaxRxfpYd55FkbSkrk0mlX+grc/6aRie4QEPyh
zYFfoxW5P2x3bEz7Qhb0PLscOXGpcnwAaGkcxzH2Z/yV/FKz2o22OwRqi6fu13BG
/l9Jcy/CarHIu+/YzrzyzbOxe3vDDGU89AxrW1b0Aix/vGCIyjGkREsy+S/JusPw
eFN4BiKBpZkRKlY64QBwgJHvhrgPn+TuW+Gd5vsQYo3JRhL/Jh4XF/OkfuBkF3rN
uycJMyRAym+LBpGRZwqnVaBAGzwgk7uI3S/Z8SR6ePegPTTVXxNdD48JbjuTOkCC
LO6eLJf0
-----END CERTIFICATE-----