Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/b422dc75e2c470b65ed5fcdc7802703e055bcc61.roa
File:                     b422dc75e2c470b65ed5fcdc7802703e055bcc61.roa (raw, json)
Hash identifier:          x6FrmJAUCaJgKqMEb1bWXoWSsYyNTzgPMERN/s3ofkE=
Subject key identifier:   4A:FC:83:44:0C:B4:A8:8E:44:C7:F1:23:4A:B7:68:B7:DF:BE:4B:55
Certificate issuer:       /CN=849653be4263556bf853cd5be59595d8a2b8b7de
Certificate serial:       04DC
Authority key identifier: A3:7E:04:FD:54:1F:A8:BD:7C:AC:14:AC:BA:0A:AA:4F:8F:52:0D:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/849653be4263556bf853cd5be59595d8a2b8b7de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/b422dc75e2c470b65ed5fcdc7802703e055bcc61.roa
Signing time:             Tue 08 Nov 2022 19:41:30 +0000
ROA not before:           Mon 07 Nov 2022 19:39:09 +0000
ROA not after:            Fri 08 Nov 2024 19:39:09 +0000
asID:                     19429
IP address blocks:        2801:1c9:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849653be4263556bf853cd5be59595d8a2b8b7de
        Validity
            Not Before: Nov  7 19:39:09 2022 GMT
            Not After : Nov  8 19:39:09 2024 GMT
        Subject: CN=b422dc75e2c470b65ed5fcdc7802703e055bcc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:a6:72:04:f5:23:9c:9f:b8:d3:8c:37:45:
                    6e:9e:cb:ac:b4:6f:82:4c:d9:f7:80:16:fe:d9:35:
                    c3:42:9e:f5:79:7e:80:9d:97:85:33:b4:1a:16:a1:
                    69:18:0a:28:c5:3e:0b:fc:dc:e3:0c:3b:cb:b6:6b:
                    8c:b8:ae:bb:b4:53:e8:4b:8e:11:6e:3b:9a:85:23:
                    cc:44:59:76:56:c8:3d:77:34:ca:36:d0:f3:17:f7:
                    b7:9c:2e:6a:9a:e2:5d:83:64:12:74:02:10:a6:20:
                    89:04:f4:c1:8d:67:3f:a4:ee:d3:23:c8:a0:0d:d2:
                    a5:1b:b1:a5:33:33:be:c5:c3:ca:22:b7:25:34:4c:
                    0a:c3:8f:76:58:99:fb:a8:6b:c7:fd:dc:52:96:d7:
                    17:c8:89:78:61:a4:91:20:08:02:6d:6c:ea:31:a7:
                    d3:9b:b4:7f:bc:30:32:5b:8b:3f:74:a1:a2:1f:df:
                    a2:3a:d5:3a:19:f0:e9:f7:0b:3d:b9:c2:9b:53:0e:
                    fb:22:e5:16:3d:f0:22:cb:95:62:97:69:5a:26:2e:
                    08:39:0d:aa:92:f8:00:a2:ec:04:b9:c5:06:06:5d:
                    2f:62:80:b0:a4:38:08:98:3a:69:9c:93:80:1a:11:
                    fd:71:6f:8a:3f:0b:7d:61:07:34:3a:e0:0b:60:42:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FC:83:44:0C:B4:A8:8E:44:C7:F1:23:4A:B7:68:B7:DF:BE:4B:55
            X509v3 Authority Key Identifier:
                keyid:A3:7E:04:FD:54:1F:A8:BD:7C:AC:14:AC:BA:0A:AA:4F:8F:52:0D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/849653be4263556bf853cd5be59595d8a2b8b7de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/b422dc75e2c470b65ed5fcdc7802703e055bcc61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/830b1626-0393-4f23-94d0-529ef5e1adcc/849653be4263556bf853cd5be59595d8a2b8b7de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c9:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:41:49:0a:da:dc:76:52:e6:27:50:ce:34:32:61:4d:8c:de:
         bf:86:15:9c:21:fb:7f:b0:a0:c8:4d:eb:86:95:7e:0a:50:2a:
         d4:7d:4b:6a:7e:a8:0b:59:f9:16:92:9d:37:79:52:d7:90:48:
         6e:06:89:30:dd:b7:67:ac:d0:ac:37:d5:85:86:f4:7a:98:a7:
         75:0a:a2:3c:0d:0e:ac:2f:53:34:95:43:ed:29:43:40:01:ba:
         40:28:09:1d:09:dc:d2:5e:dd:eb:08:35:79:fe:fc:76:b8:97:
         40:73:1e:47:20:22:d9:df:5e:b2:16:fa:f8:3c:fb:38:0e:51:
         c8:c1:55:91:42:3b:4a:cf:8e:7b:c3:ab:e8:55:9e:6c:46:6a:
         c1:e8:94:2d:56:b3:e7:16:e9:21:6f:25:86:f6:b4:fa:72:1f:
         e9:0c:dd:3f:dd:ee:21:ff:9e:73:28:4c:56:38:0c:06:d4:4a:
         f9:a0:69:8f:f6:35:49:dc:84:23:2f:20:01:5a:31:b4:80:b4:
         74:a1:70:4f:87:09:8f:2a:92:3a:72:09:15:53:75:49:f6:79:
         68:5b:f5:77:e0:98:3d:8a:e1:7c:8c:1e:b8:4f:5d:68:ec:d7:
         58:33:09:2f:c7:84:17:71:32:02:ba:52:fe:b9:ec:c8:b5:27:
         78:fa:fb:6b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODQ5
NjUzYmU0MjYzNTU2YmY4NTNjZDViZTU5NTk1ZDhhMmI4YjdkZTAeFw0yMjExMDcx
OTM5MDlaFw0yNDExMDgxOTM5MDlaMDMxMTAvBgNVBAMTKGI0MjJkYzc1ZTJjNDcw
YjY1ZWQ1ZmNkYzc4MDI3MDNlMDU1YmNjNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfiaZyBPUjnJ+404w3RW6ey6y0b4JM2feAFv7ZNcNCnvV5foCd
l4UztBoWoWkYCijFPgv83OMMO8u2a4y4rru0U+hLjhFuO5qFI8xEWXZWyD13NMo2
0PMX97ecLmqa4l2DZBJ0AhCmIIkE9MGNZz+k7tMjyKAN0qUbsaUzM77Fw8oityU0
TArDj3ZYmfuoa8f93FKW1xfIiXhhpJEgCAJtbOoxp9ObtH+8MDJbiz90oaIf36I6
1ToZ8On3Cz25wptTDvsi5RY98CLLlWKXaVomLgg5DaqS+ACi7AS5xQYGXS9igLCk
OAiYOmmck4AaEf1xb4o/C31hBzQ64AtgQtSLAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQUSvyDRAy0qI5Ex/EjSrdot9++S1UwHwYDVR0jBBgwFoAUo34E/VQfqL18rBSs
ugqqT49SDaowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84NDk2NTNi
ZTQyNjM1NTZiZjg1M2NkNWJlNTk1OTVkOGEyYjhiN2RlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84MzBiMTYyNi0wMzkzLTRmMjMtOTRkMC01MjllZjVl
MWFkY2MvYjQyMmRjNzVlMmM0NzBiNjVlZDVmY2RjNzgwMjcwM2UwNTViY2M2MS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzgzMGIxNjI2LTAzOTMtNGYyMy05NGQwLTUyOWVm
NWUxYWRjYy84NDk2NTNiZTQyNjM1NTZiZjg1M2NkNWJlNTk1OTVkOGEyYjhiN2Rl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEByQAEMA0GCSqGSIb3DQEBCwUAA4IBAQBSQUkK2tx2UuYn
UM40MmFNjN6/hhWcIft/sKDITeuGlX4KUCrUfUtqfqgLWfkWkp03eVLXkEhuBokw
3bdnrNCsN9WFhvR6mKd1CqI8DQ6sL1M0lUPtKUNAAbpAKAkdCdzSXt3rCDV5/vx2
uJdAcx5HICLZ316yFvr4PPs4DlHIwVWRQjtKz457w6voVZ5sRmrB6JQtVrPnFukh
byWG9rT6ch/pDN0/3e4h/55zKExWOAwG1Er5oGmP9jVJ3IQjLyABWjG0gLR0oXBP
hwmPKpI6cgkVU3VJ9nloW/V34Jg9iuF8jB64T11o7NdYMwkvx4QXcTICulL+uezI
tSd4+vtr
-----END CERTIFICATE-----