Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/30176621a74d96e91a957000b18b0d21e0e85460.roa
File:                     30176621a74d96e91a957000b18b0d21e0e85460.roa (raw, json)
Hash identifier:          AOJbn9B++lgRPDvajJ7J1UooTYSbFf46Rw5AhRy6hBQ=
Subject key identifier:   F4:23:18:7D:F5:25:4B:14:8E:3C:8C:ED:4D:10:8F:CB:57:52:CB:A1
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       0DDA0C
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/30176621a74d96e91a957000b18b0d21e0e85460.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:52 +0000
ROA not after:            Tue 24 Mar 2026 14:29:52 +0000
asID:                     265819
IP address blocks:        2803:a9c0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907788 (0xdda0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Mar 24 14:29:52 2021 GMT
            Not After : Mar 24 14:29:52 2026 GMT
        Subject: CN=30176621a74d96e91a957000b18b0d21e0e85460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:cb:0c:12:e0:00:13:d4:da:75:3b:e7:b9:
                    ef:ca:d0:92:27:d6:14:eb:98:51:f7:1d:cf:75:2f:
                    f8:ad:0b:8a:fc:77:41:f7:7f:87:ce:7c:20:5c:ff:
                    a3:bf:b0:4c:ca:b9:c2:bf:05:a6:fe:3a:74:06:71:
                    5e:5c:5c:cb:1a:2b:29:11:48:92:43:81:b0:18:f3:
                    c7:3a:a2:33:21:df:86:41:ed:a7:30:0d:ef:08:2c:
                    59:c3:1e:0d:56:b1:d9:c9:c7:e7:4c:e1:0b:20:36:
                    bf:04:ef:45:cb:fc:6a:5e:90:fe:2d:4d:bf:b0:fe:
                    5f:15:18:43:cc:d0:b3:65:23:93:18:a9:1c:b7:32:
                    e3:f8:b9:20:6b:74:d6:64:9e:48:90:33:a6:a6:b0:
                    a0:0e:21:f2:d9:b5:47:2f:e0:e0:67:84:e0:6a:19:
                    b2:ce:84:43:18:cd:cd:35:a6:8f:99:2c:a3:36:25:
                    d0:6b:e5:1a:20:46:21:35:68:c6:4f:68:6e:31:6a:
                    00:27:31:60:70:d0:9e:d6:9e:e4:49:ac:93:d6:3f:
                    6c:51:92:e1:83:74:c1:a9:2e:eb:a3:ba:35:56:b6:
                    15:21:26:f9:d5:c2:8f:a9:4b:bc:bb:98:a7:57:4b:
                    e2:a2:91:6d:6a:85:0b:2a:cf:54:18:81:5e:8b:b7:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:18:7D:F5:25:4B:14:8E:3C:8C:ED:4D:10:8F:CB:57:52:CB:A1
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/30176621a74d96e91a957000b18b0d21e0e85460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a9c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:6d:66:1a:38:f3:14:11:e0:55:db:c9:b5:75:2d:12:5e:
         61:81:e9:3a:4d:63:be:2d:b1:59:5d:25:e0:1a:97:c4:49:75:
         52:cd:de:bd:08:e6:28:df:7a:85:4c:f4:67:00:f3:2a:82:4e:
         d9:3f:7f:52:87:ed:d4:03:c4:fa:9a:03:56:1d:a9:99:ff:1d:
         c3:5d:a0:cc:bd:6e:97:07:02:4b:b8:df:3a:54:38:b5:a3:02:
         26:19:4a:ec:23:67:52:f9:17:8b:22:86:77:aa:07:65:9b:a6:
         64:ce:90:b1:ec:41:fc:df:2e:2d:3a:0f:34:1c:20:68:c3:fb:
         d9:b7:f6:ae:ac:db:56:1e:0c:31:ba:eb:fe:5a:9d:0f:50:1b:
         71:34:0c:13:bb:8f:5b:2e:f8:5d:3f:e1:84:68:bd:00:32:77:
         6e:fe:11:cd:10:19:64:97:77:68:b7:76:be:5f:e9:cd:b6:61:
         37:f6:a7:8c:65:f2:7f:92:30:b4:14:36:3d:50:3f:5e:b6:fa:
         1b:a9:d5:ac:c0:f3:60:bb:84:30:8c:b4:8b:d4:61:a6:68:61:
         e7:8c:9a:37:86:d6:8f:bd:5f:9a:81:06:00:11:90:25:7b:24:
         cc:76:8c:c3:8a:06:ed:49:2a:1d:15:14:7b:ea:11:3c:3f:6b:
         2d:ff:71:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDdoMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
N2JkNGMzNjVjMDRmNGRkNWQzOWFjNjUzMmMyNjdhZjY4OGUyNjcwHhcNMjEwMzI0
MTQyOTUyWhcNMjYwMzI0MTQyOTUyWjAzMTEwLwYDVQQDEygzMDE3NjYyMWE3NGQ5
NmU5MWE5NTcwMDBiMThiMGQyMWUwZTg1NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhV/LDBLgABPU2nU757nvytCSJ9YU65hR9x3PdS/4rQuK/HdB
93+HznwgXP+jv7BMyrnCvwWm/jp0BnFeXFzLGispEUiSQ4GwGPPHOqIzId+GQe2n
MA3vCCxZwx4NVrHZycfnTOELIDa/BO9Fy/xqXpD+LU2/sP5fFRhDzNCzZSOTGKkc
tzLj+Lkga3TWZJ5IkDOmprCgDiHy2bVHL+DgZ4TgahmyzoRDGM3NNaaPmSyjNiXQ
a+UaIEYhNWjGT2huMWoAJzFgcNCe1p7kSayT1j9sUZLhg3TBqS7ro7o1VrYVISb5
1cKPqUu8u5inV0viopFtaoULKs9UGIFei7dssQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFPQjGH31JUsUjjyM7U0Qj8tXUsuhMB8GA1UdIwQYMBaAFDcShC/tGTJcVW6u
TQ58GYlt/B91MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzE3YmQ0
YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmM0NGM3YTItZmEyYi00YWU5LTk0MmQtODZhM2Fl
Y2M1N2ZkLzMwMTc2NjIxYTc0ZDk2ZTkxYTk1NzAwMGIxOGIwZDIxZTBlODU0NjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYzQ0YzdhMi1mYTJiLTRhZTktOTQyZC04NmEz
YWVjYzU3ZmQvNzE3YmQ0YzM2NWMwNGY0ZGQ1ZDM5YWM2NTMyYzI2N2FmNjg4ZTI2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDqcAAAjANBgkqhkiG9w0BAQsFAAOCAQEAizltZho48xQR
4FXbybV1LRJeYYHpOk1jvi2xWV0l4BqXxEl1Us3evQjmKN96hUz0ZwDzKoJO2T9/
Uoft1APE+poDVh2pmf8dw12gzL1ulwcCS7jfOlQ4taMCJhlK7CNnUvkXiyKGd6oH
ZZumZM6QsexB/N8uLToPNBwgaMP72bf2rqzbVh4MMbrr/lqdD1AbcTQME7uPWy74
XT/hhGi9ADJ3bv4RzRAZZJd3aLd2vl/pzbZhN/anjGXyf5IwtBQ2PVA/Xrb6G6nV
rMDzYLuEMIy0i9Rhpmhh54yaN4bWj71fmoEGABGQJXskzHaMw4oG7UkqHRUUe+oR
PD9rLf9xyg==
-----END CERTIFICATE-----