Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/883d88c7a93fee689aa12309245090afababd668.roa
File:                     883d88c7a93fee689aa12309245090afababd668.roa (raw, json)
Hash identifier:          6mmU3pKfPZwMka3yeqdg4wOf37UBipOlhL209wf9syE=
Subject key identifier:   9A:C7:65:87:AD:E4:58:7F:F3:56:FF:AF:DB:92:85:22:53:4B:02:1F
Certificate issuer:       /CN=94997e9738eb4843477b7a8b538303d62f97978d
Certificate serial:       21DD98
Authority key identifier: 97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/883d88c7a93fee689aa12309245090afababd668.roa
Signing time:             Wed 05 Jul 2023 02:05:30 +0000
ROA not before:           Tue 04 Jul 2023 02:05:30 +0000
ROA not after:            Sat 05 Jul 2025 02:05:30 +0000
asID:                     52468
IP address blocks:        2803:27c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219416 (0x21dd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94997e9738eb4843477b7a8b538303d62f97978d
        Validity
            Not Before: Jul  4 02:05:30 2023 GMT
            Not After : Jul  5 02:05:30 2025 GMT
        Subject: CN=883d88c7a93fee689aa12309245090afababd668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:70:85:93:39:94:20:5d:a5:c8:d1:96:e0:
                    a9:c4:fc:d8:df:a4:39:cb:db:1f:e4:03:18:17:20:
                    26:f4:1d:ee:55:49:3e:7c:81:a6:38:01:39:3a:45:
                    a6:ec:25:8b:97:50:0f:e3:67:b3:15:c4:79:40:b9:
                    72:3b:4f:bc:b1:66:e9:af:bb:67:b3:90:2d:a8:b8:
                    a6:ee:d6:af:e6:c9:5e:b2:33:14:39:b8:12:b3:77:
                    f2:f9:e8:46:83:03:e4:74:bd:3d:e5:c3:f6:5d:12:
                    03:a4:0a:b8:cb:96:49:f8:9e:dd:03:09:17:d9:9e:
                    a3:ac:01:1f:56:1d:37:2a:e0:ea:e0:d3:43:4a:ae:
                    22:8f:e0:27:3f:4a:ad:99:05:f2:d7:1d:8b:89:60:
                    eb:fc:31:4a:03:05:a6:02:f9:b5:ef:2b:56:0d:02:
                    85:52:ec:59:16:f6:ee:27:33:82:78:1b:e2:a7:dc:
                    16:bc:f8:46:0e:f5:c0:65:c8:ef:c4:e3:51:00:ea:
                    63:c4:f6:1f:92:5b:40:62:fe:45:6c:10:1e:3a:09:
                    b8:0f:9c:44:1d:e6:6a:8e:13:8f:70:3c:9c:a5:40:
                    b4:ea:f3:7e:d9:da:8b:25:d3:76:b9:1d:98:d7:2f:
                    83:ed:81:6c:c7:30:f0:62:65:2f:5d:c1:e5:71:24:
                    9c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C7:65:87:AD:E4:58:7F:F3:56:FF:AF:DB:92:85:22:53:4B:02:1F
            X509v3 Authority Key Identifier:
                keyid:97:DA:8C:47:FE:77:ED:09:BC:AC:B4:04:A4:C3:AD:57:49:0E:4B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94997e9738eb4843477b7a8b538303d62f97978d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/883d88c7a93fee689aa12309245090afababd668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/994b0d04-17cb-46b8-a337-c16214ac8a31/94997e9738eb4843477b7a8b538303d62f97978d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:f8:a0:c5:30:16:5a:53:4a:1e:c0:b5:37:e9:47:42:27:
         37:65:3c:28:c4:ad:f9:18:e4:ae:d5:e8:67:74:ef:eb:95:23:
         17:2d:88:3e:78:b1:2d:3d:c1:1d:d3:70:e3:14:92:70:e7:e5:
         bc:3e:41:cd:00:22:95:e3:5f:d3:38:3b:0c:b1:98:60:ac:1e:
         fe:e2:b5:f3:37:c5:f2:33:ec:dc:66:ff:a9:c0:c5:2c:8a:88:
         12:ce:3a:4d:67:1f:d1:ed:85:36:3e:a6:e3:00:9c:66:08:fb:
         57:b8:7d:c4:77:6a:cf:26:5f:9a:71:7e:55:8d:b4:bc:14:42:
         e7:cf:25:db:8f:4b:da:c2:a8:2f:11:dc:a3:c2:f6:df:2d:48:
         40:ad:c2:4e:8c:53:8b:21:3b:85:82:e5:d1:66:4c:c5:01:af:
         b4:c3:57:62:ed:3f:c3:70:5b:22:ad:b7:8b:ec:64:67:cd:69:
         bc:3a:0e:5d:ff:12:ef:9b:3d:16:bc:61:3d:42:ca:46:e6:6f:
         69:b8:9e:42:b2:16:dd:83:ef:74:4e:36:b2:89:f8:5c:10:36:
         62:80:79:39:06:aa:4a:15:81:72:ea:a3:b2:db:b1:5f:ba:f4:
         31:0b:0d:37:1a:83:d8:d9:9e:35:24:b4:6c:c8:c6:fd:31:86:
         bb:47:02:81
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDId2YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
OTk3ZTk3MzhlYjQ4NDM0NzdiN2E4YjUzODMwM2Q2MmY5Nzk3OGQwHhcNMjMwNzA0
MDIwNTMwWhcNMjUwNzA1MDIwNTMwWjAzMTEwLwYDVQQDEyg4ODNkODhjN2E5M2Zl
ZTY4OWFhMTIzMDkyNDUwOTBhZmFiYWJkNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkaNwhZM5lCBdpcjRluCpxPzY36Q5y9sf5AMYFyAm9B3uVUk+
fIGmOAE5OkWm7CWLl1AP42ezFcR5QLlyO0+8sWbpr7tns5AtqLim7tav5slesjMU
ObgSs3fy+ehGgwPkdL095cP2XRIDpAq4y5ZJ+J7dAwkX2Z6jrAEfVh03KuDq4NND
Sq4ij+AnP0qtmQXy1x2LiWDr/DFKAwWmAvm17ytWDQKFUuxZFvbuJzOCeBvip9wW
vPhGDvXAZcjvxONRAOpjxPYfkltAYv5FbBAeOgm4D5xEHeZqjhOPcDycpUC06vN+
2dqLJdN2uR2Y1y+D7YFsxzDwYmUvXcHlcSSclQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJrHZYet5Fh/81b/r9uShSJTSwIfMB8GA1UdIwQYMBaAFJfajEf+d+0JvKy0
BKTDrVdJDkuoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ5OTdl
OTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk0YjBkMDQtMTdjYi00NmI4LWEzMzctYzE2MjE0
YWM4YTMxLzg4M2Q4OGM3YTkzZmVlNjg5YWExMjMwOTI0NTA5MGFmYWJhYmQ2Njgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTRiMGQwNC0xN2NiLTQ2YjgtYTMzNy1jMTYy
MTRhYzhhMzEvOTQ5OTdlOTczOGViNDg0MzQ3N2I3YThiNTM4MzAzZDYyZjk3OTc4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDJ8AwDQYJKoZIhvcNAQELBQADggEBAFp1+KDFMBZaU0oe
wLU36UdCJzdlPCjErfkY5K7V6Gd07+uVIxctiD54sS09wR3TcOMUknDn5bw+Qc0A
IpXjX9M4OwyxmGCsHv7itfM3xfIz7Nxm/6nAxSyKiBLOOk1nH9HthTY+puMAnGYI
+1e4fcR3as8mX5pxflWNtLwUQufPJduPS9rCqC8R3KPC9t8tSECtwk6MU4shO4WC
5dFmTMUBr7TDV2LtP8NwWyKtt4vsZGfNabw6Dl3/Eu+bPRa8YT1Cykbmb2m4nkKy
Ft2D73RONrKJ+FwQNmKAeTkGqkoVgXLqo7LbsV+69DELDTcag9jZnjUktGzIxv0x
hrtHAoE=
-----END CERTIFICATE-----