Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/6c34306104e2c776c75b784755bdc057ff0159ab.roa
File:                     6c34306104e2c776c75b784755bdc057ff0159ab.roa (raw, json)
Hash identifier:          XcT8Hg+JRGjbZxu7Q3wLGI2jd467x4PAlqDrtrjSliM=
Subject key identifier:   D2:9F:46:3C:FA:E8:D6:32:E1:81:0C:4F:E5:98:65:65:9F:56:F7:E6
Certificate issuer:       /CN=e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb
Certificate serial:       01D5
Authority key identifier: 06:E5:C1:F1:E1:D1:08:A5:93:47:BE:A9:83:25:8D:B8:EA:43:19:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/6c34306104e2c776c75b784755bdc057ff0159ab.roa
Signing time:             Wed 09 Nov 2022 20:53:51 +0000
ROA not before:           Tue 08 Nov 2022 20:53:20 +0000
ROA not after:            Sat 09 Nov 2024 20:53:20 +0000
asID:                     19429
IP address blocks:        2801:14:d800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb
        Validity
            Not Before: Nov  8 20:53:20 2022 GMT
            Not After : Nov  9 20:53:20 2024 GMT
        Subject: CN=6c34306104e2c776c75b784755bdc057ff0159ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:e0:b8:72:20:6a:27:19:2b:21:98:9c:fb:
                    07:42:a7:cd:51:af:c4:94:4d:06:c8:22:10:cb:00:
                    46:f7:ab:bb:94:30:c8:7e:49:7a:f9:5a:37:83:ea:
                    46:59:60:72:be:dc:f6:b2:20:f5:1b:f7:cd:8d:ac:
                    ea:1c:ac:4a:34:0b:d0:6e:d8:5e:ab:f3:da:33:c5:
                    87:41:88:64:3b:d4:d2:aa:85:8f:f0:4b:4d:cb:91:
                    36:3d:31:94:a4:df:bf:55:00:ea:79:d2:00:11:4e:
                    90:c1:21:74:16:d9:ec:0c:bc:67:80:9a:a2:9a:01:
                    5d:9e:31:2b:b2:f6:68:fe:f5:09:ad:f1:17:91:a6:
                    13:66:2a:41:90:a7:34:01:94:de:6a:da:31:d3:c6:
                    71:71:44:00:29:02:fa:1f:99:c0:cf:07:6e:c8:b6:
                    08:ea:06:36:13:98:f2:56:70:37:34:bd:78:79:07:
                    fc:26:c4:6e:5f:5c:f8:c9:1c:82:36:8e:41:8d:db:
                    a0:0a:c5:c1:0b:25:12:6f:3e:c9:87:fc:97:16:49:
                    fb:2f:4a:1a:a7:10:92:d8:a3:8f:8d:c3:e8:b8:0a:
                    6b:dc:ae:9b:ec:1c:34:d8:82:fb:76:1b:54:17:c1:
                    67:ef:71:12:fe:18:15:bd:11:87:46:40:6d:b1:6c:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:46:3C:FA:E8:D6:32:E1:81:0C:4F:E5:98:65:65:9F:56:F7:E6
            X509v3 Authority Key Identifier:
                keyid:06:E5:C1:F1:E1:D1:08:A5:93:47:BE:A9:83:25:8D:B8:EA:43:19:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/6c34306104e2c776c75b784755bdc057ff0159ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:57:04:1d:58:16:64:87:39:d1:45:80:53:ad:1a:82:9e:
         8d:da:e2:5c:b8:3b:6f:9d:43:c6:ef:53:34:22:d2:fa:00:c0:
         ee:82:2d:33:de:4a:f6:ea:1d:6c:d5:e9:67:b4:a8:ec:9f:c0:
         c8:e8:bc:7c:61:76:dc:8a:d9:41:c4:2f:8f:8d:f6:de:8b:50:
         0a:26:88:7b:f2:b5:42:ed:6c:22:b8:db:36:d7:f7:c8:e6:ee:
         81:2f:6e:01:f3:ab:cc:9e:c8:b2:e6:72:83:8e:90:7e:dd:25:
         f3:22:02:e7:b0:64:b8:d1:65:06:25:6b:c4:6b:1e:df:29:e6:
         79:55:90:44:3d:46:ed:e9:b8:52:0f:94:cb:9b:09:cd:35:d7:
         47:73:89:0b:01:c3:fc:16:ab:b0:3c:73:4a:0c:a8:38:98:7e:
         d4:b6:ee:0c:eb:2d:3e:e9:3f:61:e8:ee:95:ad:12:42:53:80:
         51:92:c5:3d:74:80:51:d1:12:4f:80:db:62:4a:46:f2:c9:d1:
         b3:6e:11:6b:75:4e:8c:fa:21:68:53:32:49:0f:0d:1b:b9:d5:
         2a:4b:12:0b:c3:a6:f0:26:dd:e7:73:a7:27:b4:27:c2:f1:9a:
         1b:84:d0:50:bd:e8:5f:ff:b2:eb:a9:b0:0b:78:ba:0d:f8:b5:
         97:f9:f5:36
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTRm
YmM5OGZmNzYyZThhNmZhOGRiNDAxNzM5YzYzZDMwZmY4YTFjYjAeFw0yMjExMDgy
MDUzMjBaFw0yNDExMDkyMDUzMjBaMDMxMTAvBgNVBAMTKDZjMzQzMDYxMDRlMmM3
NzZjNzViNzg0NzU1YmRjMDU3ZmYwMTU5YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKG+C4ciBqJxkrIZic+wdCp81Rr8SUTQbIIhDLAEb3q7uUMMh+
SXr5WjeD6kZZYHK+3PayIPUb982NrOocrEo0C9Bu2F6r89ozxYdBiGQ71NKqhY/w
S03LkTY9MZSk379VAOp50gARTpDBIXQW2ewMvGeAmqKaAV2eMSuy9mj+9Qmt8ReR
phNmKkGQpzQBlN5q2jHTxnFxRAApAvofmcDPB27ItgjqBjYTmPJWcDc0vXh5B/wm
xG5fXPjJHII2jkGN26AKxcELJRJvPsmH/JcWSfsvShqnEJLYo4+Nw+i4Cmvcrpvs
HDTYgvt2G1QXwWfvcRL+GBW9EYdGQG2xbM6LAgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQU0p9GPPro1jLhgQxP5ZhlZZ9W9+YwHwYDVR0jBBgwFoAUBuXB8eHRCKWTR76p
gyWNuOpDGUswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lNGZiYzk4
ZmY3NjJlOGE2ZmE4ZGI0MDE3MzljNjNkMzBmZjhhMWNiLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy84YmVmZDI0MC1hYjQwLTQ4YjItODQzZi1iNDc4MzRm
MzU3MWYvNmMzNDMwNjEwNGUyYzc3NmM3NWI3ODQ3NTViZGMwNTdmZjAxNTlhYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzhiZWZkMjQwLWFiNDAtNDhiMi04NDNmLWI0Nzgz
NGYzNTcxZi9lNGZiYzk4ZmY3NjJlOGE2ZmE4ZGI0MDE3MzljNjNkMzBmZjhhMWNi
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAEAFNgAMA0GCSqGSIb3DQEBCwUAA4IBAQC76lcEHVgWZIc5
0UWAU60agp6N2uJcuDtvnUPG71M0ItL6AMDugi0z3kr26h1s1elntKjsn8DI6Lx8
YXbcitlBxC+Pjfbei1AKJoh78rVC7WwiuNs21/fI5u6BL24B86vMnsiy5nKDjpB+
3SXzIgLnsGS40WUGJWvEax7fKeZ5VZBEPUbt6bhSD5TLmwnNNddHc4kLAcP8Fquw
PHNKDKg4mH7Utu4M6y0+6T9h6O6VrRJCU4BRksU9dIBR0RJPgNtiSkbyydGzbhFr
dU6M+iFoUzJJDw0budUqSxILw6bwJt3nc6cntCfC8ZobhNBQvehf/7LrqbALeLoN
+LWX+fU2
-----END CERTIFICATE-----