Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa
File:                     ba3b7022fb793e89895c5be64803eec3aade3c35.roa (raw, json)
Hash identifier:          hZnVBhjpM3ZziTxqY6g/6hAs+gIhy96ylgJlRdCam4s=
Subject key identifier:   64:DE:46:0A:98:95:36:A9:4D:3D:67:09:09:25:93:82:A8:F8:C4:0C
Certificate issuer:       /CN=dd6660715432dca219d013cf5f8591f73aafbd11
Certificate serial:       0CB32F
Authority key identifier: 97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa
Signing time:             Wed 21 Dec 2022 18:25:06 +0000
ROA not before:           Sat 29 Jan 2022 07:30:00 +0000
ROA not after:            Tue 30 Jan 2024 07:30:00 +0000
asID:                     271925
IP address blocks:        2801:13:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832303 (0xcb32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6660715432dca219d013cf5f8591f73aafbd11
        Validity
            Not Before: Jan 29 07:30:00 2022 GMT
            Not After : Jan 30 07:30:00 2024 GMT
        Subject: CN=ba3b7022fb793e89895c5be64803eec3aade3c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7d:29:12:bf:f8:fe:dc:0a:b0:2b:5c:9b:8e:
                    6f:17:62:8e:f3:81:bc:b4:d6:03:1b:34:d1:55:d6:
                    d9:b4:c3:39:c2:c8:16:3e:82:66:96:04:c7:e0:4a:
                    30:24:e6:0b:0e:71:9e:d2:42:65:81:58:b9:c1:33:
                    1e:b0:d3:fa:be:de:7a:f7:8f:50:da:bd:6c:ea:95:
                    eb:ef:19:8f:0b:b5:86:d2:a3:00:c2:60:a5:5a:0a:
                    2c:99:7c:b8:3d:1e:59:b3:15:fe:09:1a:3d:47:5a:
                    aa:1b:21:03:73:4b:39:c9:10:f1:26:8a:ff:f2:03:
                    cc:35:b2:10:2b:81:91:ab:a5:b4:d6:60:7c:94:86:
                    ba:76:1f:a8:f9:b5:dd:29:d5:77:4a:cf:26:6b:b1:
                    3a:7b:55:34:3a:9e:fd:1b:69:be:78:90:95:e7:39:
                    24:b2:3c:62:a9:86:76:e8:5c:58:b7:90:f9:9e:f7:
                    31:35:c2:bc:46:22:fd:c5:8a:7a:d6:44:23:0a:8e:
                    32:0e:6f:f3:b7:54:cd:e9:12:55:0e:98:6e:ea:d3:
                    a6:3d:0c:77:26:94:47:5e:f2:f6:01:dd:a4:db:fb:
                    4d:ce:45:6b:48:a9:ca:c6:66:1c:23:0c:b2:d9:62:
                    24:4d:80:4e:c3:18:9a:fe:5b:ad:ce:46:07:b6:5e:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:46:0A:98:95:36:A9:4D:3D:67:09:09:25:93:82:A8:F8:C4:0C
            X509v3 Authority Key Identifier:
                keyid:97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/ba3b7022fb793e89895c5be64803eec3aade3c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:3a:aa:49:54:2f:62:87:14:83:53:55:0f:9d:57:45:6a:
         89:3d:ff:ad:2f:82:32:9f:73:f7:85:17:d2:aa:fc:34:18:94:
         35:32:31:cc:75:e2:ba:c0:75:28:62:d8:13:6a:79:eb:8e:c8:
         a1:9c:97:d8:9a:78:69:1e:96:e5:55:3c:71:a5:bb:38:6e:0d:
         e8:55:a0:5f:28:96:a4:07:5a:32:1e:5c:79:eb:f5:44:54:99:
         48:b6:3f:81:fc:bd:07:71:c7:e5:21:9c:c6:26:88:fd:37:53:
         75:1e:f2:31:2a:b1:ce:ac:0f:c4:8b:0d:2c:9c:34:47:49:ff:
         dc:83:e9:79:0f:31:2c:6e:26:9e:e7:b0:75:4c:64:98:04:9e:
         8e:16:7b:2d:75:ff:6f:52:15:b8:56:03:24:dc:f8:6f:ec:07:
         8b:41:e5:6c:cb:ea:48:be:e2:c9:3d:48:a6:29:e4:6b:53:b5:
         5e:0e:52:6b:95:68:54:de:79:12:b1:29:60:60:14:0e:c7:3a:
         c9:08:3c:3f:bc:89:c1:6d:d1:2a:f0:46:fe:7f:a5:c7:61:54:
         82:62:ef:c4:2f:88:14:19:c2:49:5e:34:f8:1d:4f:b0:a4:b0:
         32:0c:5b:a4:b4:1f:ac:6c:1c:d8:d1:fd:69:11:f3:c4:73:cf:
         fc:7d:c1:1a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDLMvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
NjY2MDcxNTQzMmRjYTIxOWQwMTNjZjVmODU5MWY3M2FhZmJkMTEwHhcNMjIwMTI5
MDczMDAwWhcNMjQwMTMwMDczMDAwWjAzMTEwLwYDVQQDEyhiYTNiNzAyMmZiNzkz
ZTg5ODk1YzViZTY0ODAzZWVjM2FhZGUzYzM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgH0pEr/4/twKsCtcm45vF2KO84G8tNYDGzTRVdbZtMM5wsgW
PoJmlgTH4EowJOYLDnGe0kJlgVi5wTMesNP6vt56949Q2r1s6pXr7xmPC7WG0qMA
wmClWgosmXy4PR5ZsxX+CRo9R1qqGyEDc0s5yRDxJor/8gPMNbIQK4GRq6W01mB8
lIa6dh+o+bXdKdV3Ss8ma7E6e1U0Op79G2m+eJCV5zkksjxiqYZ26FxYt5D5nvcx
NcK8RiL9xYp61kQjCo4yDm/zt1TN6RJVDphu6tOmPQx3JpRHXvL2Ad2k2/tNzkVr
SKnKxmYcIwyy2WIkTYBOwxia/lutzkYHtl5sXQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGTeRgqYlTapTT1nCQklk4Ko+MQMMB8GA1UdIwQYMBaAFJcH/bA4BaJ4h9mu
g98TZ7dukvZVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ2NjYw
NzE1NDMyZGNhMjE5ZDAxM2NmNWY4NTkxZjczYWFmYmQxMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQ2NjU3YmYtMGVhMy00OTBmLTk1YjUtZTk1Zjhm
ZWJmODY5L2JhM2I3MDIyZmI3OTNlODk4OTVjNWJlNjQ4MDNlZWMzYWFkZTNjMzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDY2NTdiZi0wZWEzLTQ5MGYtOTViNS1lOTVm
OGZlYmY4NjkvZGQ2NjYwNzE1NDMyZGNhMjE5ZDAxM2NmNWY4NTkxZjczYWFmYmQx
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABPoADANBgkqhkiG9w0BAQsFAAOCAQEADA86qklUL2KH
FINTVQ+dV0VqiT3/rS+CMp9z94UX0qr8NBiUNTIxzHXiusB1KGLYE2p5647IoZyX
2Jp4aR6W5VU8caW7OG4N6FWgXyiWpAdaMh5ceev1RFSZSLY/gfy9B3HH5SGcxiaI
/TdTdR7yMSqxzqwPxIsNLJw0R0n/3IPpeQ8xLG4mnuewdUxkmASejhZ7LXX/b1IV
uFYDJNz4b+wHi0HlbMvqSL7iyT1Ipinka1O1Xg5Sa5VoVN55ErEpYGAUDsc6yQg8
P7yJwW3RKvBG/n+lx2FUgmLvxC+IFBnCSV40+B1PsKSwMgxbpLQfrGwc2NH9aRHz
xHPP/H3BGg==
-----END CERTIFICATE-----