Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/e7f6beac651bac8919325737476ae6a5263c9a6f.roa
File:                     e7f6beac651bac8919325737476ae6a5263c9a6f.roa (raw, json)
Hash identifier:          Ddc29Y7YQ8Or3xpl1m16LQpivDmFly+Dqe2iwVxI6XU=
Subject key identifier:   0F:86:BB:F0:96:E4:4E:94:F2:CE:51:00:02:6F:31:EB:03:14:21:7F
Certificate issuer:       /CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
Certificate serial:       093E87
Authority key identifier: 41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/e7f6beac651bac8919325737476ae6a5263c9a6f.roa
Signing time:             Mon 10 Jul 2023 17:00:27 +0000
ROA not before:           Sun 09 Jul 2023 17:00:26 +0000
ROA not after:            Thu 10 Jul 2025 17:00:26 +0000
asID:                     272821
IP address blocks:        2801:1d4:640::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605831 (0x93e87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
        Validity
            Not Before: Jul  9 17:00:26 2023 GMT
            Not After : Jul 10 17:00:26 2025 GMT
        Subject: CN=e7f6beac651bac8919325737476ae6a5263c9a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:2f:cc:5b:21:2e:6f:9c:ae:3b:dd:40:96:
                    6f:39:64:91:4b:f6:a3:cb:6b:52:29:9e:6e:07:c4:
                    a6:0f:46:e5:ad:7e:a9:a9:98:7b:d9:fe:fd:28:9a:
                    d3:5a:65:e3:2c:f6:16:f5:b7:e8:3a:d1:f2:bf:6a:
                    00:36:27:c3:03:b5:9f:5c:77:22:7d:c1:5b:b7:40:
                    15:29:8e:cf:92:94:0e:57:8d:b1:ac:11:a0:a3:7b:
                    4a:71:fa:aa:73:88:07:d7:0d:e6:e7:bf:c1:e4:47:
                    07:19:98:fb:8b:0d:d8:99:4e:82:8e:43:cd:53:5c:
                    22:8e:5d:3f:ba:2c:0a:37:6d:75:29:f3:bf:04:17:
                    a5:6f:2a:8c:3b:c1:e5:ac:a6:b0:5c:a8:4b:bd:5c:
                    6a:85:78:6c:8e:d8:e2:ea:44:8e:3f:d9:45:44:55:
                    1c:2f:b9:d9:ca:0f:38:75:5c:12:ad:4a:55:ab:b4:
                    12:5b:2c:69:e9:d4:73:53:28:12:ad:7f:3f:64:ea:
                    9d:da:49:8d:f2:7e:ce:a6:c3:29:3b:5f:a1:d2:84:
                    2d:cc:88:9b:a4:8a:fc:29:fb:db:4e:08:61:28:9e:
                    a9:93:b1:d6:5d:b3:4b:64:b4:b5:44:33:d3:d9:e1:
                    90:da:fb:1b:97:b3:2a:35:14:8f:6e:69:85:12:19:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:BB:F0:96:E4:4E:94:F2:CE:51:00:02:6F:31:EB:03:14:21:7F
            X509v3 Authority Key Identifier:
                keyid:41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/e7f6beac651bac8919325737476ae6a5263c9a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:08:3a:73:4a:be:02:9c:f3:b2:01:1e:1a:39:f0:57:40:95:
         69:21:a8:10:d8:d8:55:56:11:4e:1c:f0:7e:53:d2:71:ee:dc:
         ec:ea:34:10:0c:c6:2c:66:6a:b8:ae:62:43:89:a9:65:2d:84:
         f3:93:e6:cc:de:7f:26:a3:cc:c4:73:2c:ea:d6:cd:1d:e4:4b:
         fe:66:d3:b1:12:12:e3:37:e5:62:43:89:de:fb:fd:3a:25:9a:
         21:48:ee:08:b4:07:a1:8d:93:53:e5:78:df:13:8c:a6:9a:4b:
         dd:d9:54:9a:09:cc:0b:25:10:49:23:6e:2b:49:51:8b:24:32:
         11:c8:4f:c4:cc:72:01:59:9d:79:c1:ae:97:ee:a1:e5:2d:24:
         7a:39:b2:ee:41:bb:4c:21:e2:ae:47:12:ec:0b:63:62:6e:83:
         95:35:9a:df:16:3c:0c:71:db:9a:74:59:2c:e2:c0:26:cb:16:
         b1:17:30:29:c7:5e:56:5f:be:6a:9f:63:af:b3:8f:5e:5b:55:
         33:dc:2c:54:b6:5d:ae:31:96:86:b1:c0:18:dc:6b:6e:35:01:
         76:09:04:ae:f3:2b:3f:c9:43:fc:1a:30:d1:36:48:68:7f:5c:
         64:f5:8d:9a:24:b1:8c:3f:c0:9c:b2:3f:7e:d8:b9:29:93:f7:
         46:c5:24:a5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCT6HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MTAyYzhmNGZjZjk3OGJhNDQ1ZmExYjEzZjBhNTkzN2U3MWFhNjEwHhcNMjMwNzA5
MTcwMDI2WhcNMjUwNzEwMTcwMDI2WjAzMTEwLwYDVQQDEyhlN2Y2YmVhYzY1MWJh
Yzg5MTkzMjU3Mzc0NzZhZTZhNTI2M2M5YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjtMvzFshLm+crjvdQJZvOWSRS/ajy2tSKZ5uB8SmD0blrX6p
qZh72f79KJrTWmXjLPYW9bfoOtHyv2oANifDA7WfXHcifcFbt0AVKY7PkpQOV42x
rBGgo3tKcfqqc4gH1w3m57/B5EcHGZj7iw3YmU6CjkPNU1wijl0/uiwKN211KfO/
BBelbyqMO8HlrKawXKhLvVxqhXhsjtji6kSOP9lFRFUcL7nZyg84dVwSrUpVq7QS
Wyxp6dRzUygSrX8/ZOqd2kmN8n7OpsMpO1+h0oQtzIibpIr8KfvbTghhKJ6pk7HW
XbNLZLS1RDPT2eGQ2vsbl7MqNRSPbmmFEhls2wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFA+Gu/CW5E6U8s5RAAJvMesDFCF/MB8GA1UdIwQYMBaAFEEqliRb+ahf4cYQ
NbFeOAbT1LxRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQxMDJj
OGY0ZmNmOTc4YmE0NDVmYTFiMTNmMGE1OTM3ZTcxYWE2MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzRkNDkzZmItMzAxNS00MmMyLWFjZTYtZWViZDRi
OTMyYzBiL2U3ZjZiZWFjNjUxYmFjODkxOTMyNTczNzQ3NmFlNmE1MjYzYzlhNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NGQ0OTNmYi0zMDE1LTQyYzItYWNlNi1lZWJk
NGI5MzJjMGIvNWQxMDJjOGY0ZmNmOTc4YmE0NDVmYTFiMTNmMGE1OTM3ZTcxYWE2
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAdQGQDANBgkqhkiG9w0BAQsFAAOCAQEAmAg6c0q+Apzz
sgEeGjnwV0CVaSGoENjYVVYRThzwflPSce7c7Oo0EAzGLGZquK5iQ4mpZS2E85Pm
zN5/JqPMxHMs6tbNHeRL/mbTsRIS4zflYkOJ3vv9OiWaIUjuCLQHoY2TU+V43xOM
pppL3dlUmgnMCyUQSSNuK0lRiyQyEchPxMxyAVmdecGul+6h5S0kejmy7kG7TCHi
rkcS7AtjYm6DlTWa3xY8DHHbmnRZLOLAJssWsRcwKcdeVl++ap9jr7OPXltVM9ws
VLZdrjGWhrHAGNxrbjUBdgkErvMrP8lD/Bow0TZIaH9cZPWNmiSxjD/AnLI/fti5
KZP3RsUkpQ==
-----END CERTIFICATE-----