Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa
File:                     8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa (raw, json)
Hash identifier:          Qj5PJ2Ws6/Gl4O31IklWFBJno3/SJiiHLZXCPdOZlRc=
Subject key identifier:   F0:22:76:37:EF:D6:22:8C:45:B8:9C:58:FB:40:A0:11:A7:CE:35:98
Certificate issuer:       /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial:       200DC7
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa
Signing time:             Sun 09 Apr 2023 08:30:02 +0000
ROA not before:           Sat 08 Apr 2023 08:30:02 +0000
ROA not after:            Mon 07 Apr 2025 08:30:02 +0000
asID:                     12956
IP address blocks:        2803:b2c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100679 (0x200dc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
        Validity
            Not Before: Apr  8 08:30:02 2023 GMT
            Not After : Apr  7 08:30:02 2025 GMT
        Subject: CN=8d2ff8bde85f47589fe034c16ca6d9b780234e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:94:cf:6a:a3:51:06:7e:59:74:27:da:3f:
                    db:e0:b4:22:8d:7a:ca:9b:32:94:ae:d1:7c:e5:6c:
                    74:2e:e3:88:05:7a:0d:c8:6b:35:fb:e8:f6:b4:04:
                    6b:32:21:b3:f6:12:7d:2a:81:0d:dc:0b:81:c3:0c:
                    4d:9f:23:9d:26:2d:08:ac:53:09:64:de:7c:9c:98:
                    53:73:88:76:9f:17:ac:72:60:72:67:28:24:8a:a8:
                    df:fc:2b:35:67:4f:9c:fb:47:7f:20:a8:ac:13:1a:
                    c5:48:ad:83:62:b3:69:e9:61:cb:d5:aa:cc:32:b8:
                    5e:f6:47:41:5e:23:4f:a3:9b:2d:3f:91:f2:20:99:
                    60:26:6c:5a:bd:37:c7:70:2d:ed:64:e9:31:be:ae:
                    d2:b8:0d:ef:3a:ca:f9:13:df:be:09:8f:ce:25:95:
                    71:95:1a:cd:a0:c9:55:9e:6c:9f:fb:42:45:2e:d3:
                    bc:40:3d:28:02:d6:ac:ce:8d:84:b5:ea:43:58:a9:
                    06:78:03:3b:a0:28:bc:04:d0:ea:c7:5a:59:eb:c6:
                    3d:e8:02:7a:18:fe:a6:af:b8:ca:a2:8f:ba:58:0e:
                    e5:9a:d5:f1:c6:81:80:ad:dd:3c:0b:2d:17:6b:c4:
                    3b:1b:f2:a5:33:33:12:2a:d8:e3:08:08:af:58:a8:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:22:76:37:EF:D6:22:8C:45:B8:9C:58:FB:40:A0:11:A7:CE:35:98
            X509v3 Authority Key Identifier:
                keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/8d2ff8bde85f47589fe034c16ca6d9b780234e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:8f:3f:df:94:d2:d0:16:d5:c3:87:e0:6a:ed:73:d1:7e:
         32:43:b8:0a:37:ed:24:27:1b:9c:22:80:68:72:aa:cb:d0:5c:
         02:2a:e4:4a:9e:ee:39:2b:1e:c2:98:3a:23:43:c9:89:b2:40:
         ca:bd:da:d1:d9:a6:3e:41:37:2b:50:36:aa:33:aa:0a:66:b7:
         16:6e:7a:c7:1b:2a:ae:31:1a:94:77:ba:e9:5b:f4:7e:a6:51:
         5d:62:43:0f:e1:40:38:67:32:b0:98:60:71:a3:6a:37:48:2f:
         a2:fe:b1:85:b7:95:4c:a2:b7:3f:89:92:3e:d3:6f:a1:f5:36:
         d6:22:30:95:dd:75:04:69:d7:a9:53:38:de:49:47:0e:de:f8:
         c6:b1:0b:32:95:72:09:23:7c:f1:be:92:dc:61:e5:b3:d5:9b:
         0f:58:d9:b4:61:af:4e:28:75:94:d5:cc:34:8c:e5:06:53:84:
         38:10:ca:f3:c4:6e:ca:63:13:d4:8e:0e:30:2e:66:f9:29:5c:
         e2:41:9c:c4:37:1a:92:11:ef:09:d9:bd:d2:83:bc:4f:4a:96:
         88:64:cf:b8:03:e3:f0:3e:48:85:00:73:3a:14:a4:5d:2a:e5:
         0b:a8:20:22:ac:e2:b7:bf:b8:38:1f:e0:32:9f:7f:ae:05:8f:
         1c:4d:28:96
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIA3HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
YTU4MmY2Yzc4MDdmNWZkZDMxYjY5YWUyNzBmODVkMDBjMzk3MDYwHhcNMjMwNDA4
MDgzMDAyWhcNMjUwNDA3MDgzMDAyWjAzMTEwLwYDVQQDEyg4ZDJmZjhiZGU4NWY0
NzU4OWZlMDM0YzE2Y2E2ZDliNzgwMjM0ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqvaUz2qjUQZ+WXQn2j/b4LQijXrKmzKUrtF85Wx0LuOIBXoN
yGs1++j2tARrMiGz9hJ9KoEN3AuBwwxNnyOdJi0IrFMJZN58nJhTc4h2nxescmBy
Zygkiqjf/Cs1Z0+c+0d/IKisExrFSK2DYrNp6WHL1arMMrhe9kdBXiNPo5stP5Hy
IJlgJmxavTfHcC3tZOkxvq7SuA3vOsr5E9++CY/OJZVxlRrNoMlVnmyf+0JFLtO8
QD0oAtaszo2EtepDWKkGeAM7oCi8BNDqx1pZ68Y96AJ6GP6mr7jKoo+6WA7lmtXx
xoGArd08Cy0Xa8Q7G/KlMzMSKtjjCAivWKg78wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFPAidjfv1iKMRbicWPtAoBGnzjWYMB8GA1UdIwQYMBaAFGUKgwJwZrHds66C
FoPPNNKLdGZ7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRhNTgy
ZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWFlYmVkNjktMzBkZS00MjYyLWE0OTQtZDI2MmIz
M2MyYzljLzhkMmZmOGJkZTg1ZjQ3NTg5ZmUwMzRjMTZjYTZkOWI3ODAyMzRlNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YWViZWQ2OS0zMGRlLTQyNjItYTQ5NC1kMjYy
YjMzYzJjOWMvZjRhNTgyZjZjNzgwN2Y1ZmRkMzFiNjlhZTI3MGY4NWQwMGMzOTcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDssAwDQYJKoZIhvcNAQELBQADggEBAKUzjz/flNLQFtXD
h+Bq7XPRfjJDuAo37SQnG5wigGhyqsvQXAIq5Eqe7jkrHsKYOiNDyYmyQMq92tHZ
pj5BNytQNqozqgpmtxZuescbKq4xGpR3uulb9H6mUV1iQw/hQDhnMrCYYHGjajdI
L6L+sYW3lUyitz+Jkj7Tb6H1NtYiMJXddQRp16lTON5JRw7e+MaxCzKVcgkjfPG+
ktxh5bPVmw9Y2bRhr04odZTVzDSM5QZThDgQyvPEbspjE9SODjAuZvkpXOJBnMQ3
GpIR7wnZvdKDvE9Klohkz7gD4/A+SIUAczoUpF0q5QuoICKs4re/uDgf4DKff64F
jxxNKJY=
-----END CERTIFICATE-----