Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2dd38e8508bf3cf1789696c0707a687a657a9769.roa
File:                     2dd38e8508bf3cf1789696c0707a687a657a9769.roa (raw, json)
Hash identifier:          IV+QMR2rS/jAWJSRIgEOh7b5WUl/3ueywCPb87xwG/0=
Subject key identifier:   B0:90:03:E5:9D:CB:2C:3F:FC:F5:D4:3E:03:F0:F0:8F:5A:BE:E5:E8
Certificate issuer:       /CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
Certificate serial:       058363
Authority key identifier: EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2dd38e8508bf3cf1789696c0707a687a657a9769.roa
Signing time:             Tue 17 May 2022 19:31:08 +0000
ROA not before:           Tue 17 May 2022 03:00:00 +0000
ROA not after:            Fri 17 May 2024 03:00:00 +0000
asID:                     271993
IP address blocks:        2803:5110:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361315 (0x58363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e7c7268d24306b60d655788ea7e6ab7c157a37
        Validity
            Not Before: May 17 03:00:00 2022 GMT
            Not After : May 17 03:00:00 2024 GMT
        Subject: CN=2dd38e8508bf3cf1789696c0707a687a657a9769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:9d:58:a9:6d:88:b8:2e:a8:c1:e2:40:27:
                    db:f2:a8:a7:76:a3:13:9b:05:0b:da:a9:89:f6:cd:
                    f1:dd:68:e5:d5:a4:cf:16:bc:9c:d6:99:e7:88:18:
                    90:b9:70:d2:9f:05:9f:4c:83:01:75:bc:7c:3f:f4:
                    10:10:6f:cf:bd:a0:8c:7f:c5:cc:24:29:9d:89:4f:
                    a0:7e:8a:c1:4c:84:18:d3:8b:2d:43:72:1b:6d:60:
                    d9:2f:ca:b4:73:44:e2:0b:23:1d:2c:e3:ae:01:6f:
                    f4:89:77:26:fc:c4:11:8e:9a:6a:4b:98:57:83:46:
                    a6:4f:30:9b:82:0b:67:2e:f1:e1:96:48:03:cf:56:
                    6f:86:3a:52:fe:7e:2c:ea:2e:f7:d8:93:57:fc:ad:
                    16:31:d3:a1:fb:d0:4b:38:69:10:f9:39:3f:2b:c7:
                    8d:ed:99:15:72:56:f1:b3:19:c5:88:34:34:cc:d6:
                    a1:11:9c:58:a9:fb:43:08:39:64:a6:b2:f6:b2:e2:
                    92:2a:a8:e9:25:a5:69:0a:49:cb:44:2c:e3:28:ef:
                    98:5f:78:cf:b7:73:69:78:58:45:20:c4:45:15:22:
                    4a:8e:7d:51:c5:b9:f3:d7:a5:57:e0:df:8a:35:6c:
                    76:32:8e:ac:b9:6e:0b:d4:74:1c:ec:8e:91:69:37:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:90:03:E5:9D:CB:2C:3F:FC:F5:D4:3E:03:F0:F0:8F:5A:BE:E5:E8
            X509v3 Authority Key Identifier:
                keyid:EA:A8:46:61:25:18:D4:A2:C1:10:28:2F:AD:CA:B2:F8:36:04:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13e7c7268d24306b60d655788ea7e6ab7c157a37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/2dd38e8508bf3cf1789696c0707a687a657a9769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bfc7a2f8-bf7e-46b7-a189-21c1c04720bc/13e7c7268d24306b60d655788ea7e6ab7c157a37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5110:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:05:91:29:29:e1:dd:a1:c0:71:fe:4b:8d:57:3b:f6:7e:
         6e:a9:65:19:a4:14:81:40:62:f0:b6:47:02:ed:0d:9e:6e:0e:
         63:32:7e:07:07:99:97:e4:5d:23:42:33:15:99:2b:db:f6:42:
         c8:37:52:94:d3:3b:8e:9a:51:9a:d0:5f:4d:6a:8d:b9:9a:55:
         36:1c:e6:f0:b2:c1:76:76:34:1c:3e:6a:fd:80:2f:db:c0:e3:
         52:c0:56:ba:04:a2:ea:cc:d1:34:72:79:04:57:dd:39:1f:95:
         24:c8:b9:b2:f8:89:23:ef:a3:62:f7:1c:a1:b6:5b:12:a4:cb:
         a6:4a:65:a5:a8:7d:6f:20:0c:d1:94:98:55:0e:bb:e7:a9:be:
         57:88:a5:76:46:b3:11:c6:8c:f2:75:85:dd:ac:de:92:a3:c0:
         8a:4a:23:59:2b:bc:b4:48:1e:5e:94:4d:a5:6e:5b:1b:78:7b:
         a0:0b:19:95:d1:88:2f:05:ca:af:67:2d:06:54:0a:4a:ca:83:
         46:35:b2:f3:11:ce:3e:32:a2:c7:01:7f:0c:53:d0:a8:43:f1:
         f7:e2:ef:f2:04:1a:72:bb:87:2a:17:9d:65:a6:11:48:9b:bb:
         98:a6:9f:6f:4c:c2:88:aa:0b:08:85:4f:60:c3:0a:e3:c8:52:
         e0:d9:d9:87
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBYNjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
ZTdjNzI2OGQyNDMwNmI2MGQ2NTU3ODhlYTdlNmFiN2MxNTdhMzcwHhcNMjIwNTE3
MDMwMDAwWhcNMjQwNTE3MDMwMDAwWjAzMTEwLwYDVQQDEygyZGQzOGU4NTA4YmYz
Y2YxNzg5Njk2YzA3MDdhNjg3YTY1N2E5NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAheudWKltiLguqMHiQCfb8qindqMTmwUL2qmJ9s3x3Wjl1aTP
Fryc1pnniBiQuXDSnwWfTIMBdbx8P/QQEG/PvaCMf8XMJCmdiU+gforBTIQY04st
Q3IbbWDZL8q0c0TiCyMdLOOuAW/0iXcm/MQRjppqS5hXg0amTzCbggtnLvHhlkgD
z1ZvhjpS/n4s6i732JNX/K0WMdOh+9BLOGkQ+Tk/K8eN7ZkVclbxsxnFiDQ0zNah
EZxYqftDCDlkprL2suKSKqjpJaVpCknLRCzjKO+YX3jPt3NpeFhFIMRFFSJKjn1R
xbnz16VX4N+KNWx2Mo6suW4L1HQc7I6RaTfsCQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLCQA+Wdyyw//PXUPgPw8I9avuXoMB8GA1UdIwQYMBaAFOqoRmElGNSiwRAo
L63Ksvg2BHbqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTNlN2M3
MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2EzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmZjN2EyZjgtYmY3ZS00NmI3LWExODktMjFjMWMw
NDcyMGJjLzJkZDM4ZTg1MDhiZjNjZjE3ODk2OTZjMDcwN2E2ODdhNjU3YTk3Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZmM3YTJmOC1iZjdlLTQ2YjctYTE4OS0yMWMx
YzA0NzIwYmMvMTNlN2M3MjY4ZDI0MzA2YjYwZDY1NTc4OGVhN2U2YWI3YzE1N2Ez
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDURAgADANBgkqhkiG9w0BAQsFAAOCAQEAdEsFkSkp4d2h
wHH+S41XO/Z+bqllGaQUgUBi8LZHAu0Nnm4OYzJ+BweZl+RdI0IzFZkr2/ZCyDdS
lNM7jppRmtBfTWqNuZpVNhzm8LLBdnY0HD5q/YAv28DjUsBWugSi6szRNHJ5BFfd
OR+VJMi5sviJI++jYvccobZbEqTLpkplpah9byAM0ZSYVQ6756m+V4ildkazEcaM
8nWF3azekqPAikojWSu8tEgeXpRNpW5bG3h7oAsZldGILwXKr2ctBlQKSsqDRjWy
8xHOPjKixwF/DFPQqEPx9+Lv8gQacruHKhedZaYRSJu7mKafb0zCiKoLCIVPYMMK
48hS4NnZhw==
-----END CERTIFICATE-----