Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/68a454f3d849fd67e040d53c226f5c685c644393.roa
File:                     68a454f3d849fd67e040d53c226f5c685c644393.roa (raw, json)
Hash identifier:          5NuCepG2wiYC6IM8JzP/SMn9xgVbPlTsln8PgjXlOuo=
Subject key identifier:   21:66:DF:82:52:75:8F:E2:5D:46:7A:34:50:FA:E1:2F:43:3A:A5:C6
Certificate issuer:       /CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
Certificate serial:       1DD780
Authority key identifier: 52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/68a454f3d849fd67e040d53c226f5c685c644393.roa
Signing time:             Fri 12 May 2023 21:41:09 +0000
ROA not before:           Thu 11 May 2023 21:41:08 +0000
ROA not after:            Mon 12 May 2025 21:41:08 +0000
asID:                     264668
IP address blocks:        2803:fd60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955712 (0x1dd780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99489470a7c41b7b995971ffb2f6e2d7d2252a1a
        Validity
            Not Before: May 11 21:41:08 2023 GMT
            Not After : May 12 21:41:08 2025 GMT
        Subject: CN=68a454f3d849fd67e040d53c226f5c685c644393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:ce:5c:5b:37:7a:4d:db:fc:ee:8c:ec:49:
                    60:c3:03:60:43:a7:1a:86:51:99:66:31:0e:1b:94:
                    8c:ff:c8:b3:45:e0:41:6c:28:84:c2:2f:74:15:28:
                    0f:2e:64:54:f0:9b:a5:ec:5e:31:f8:c4:e2:6e:38:
                    d6:c5:87:69:de:fa:52:b5:8d:b8:c4:80:cf:97:67:
                    d5:29:2d:88:f9:b9:6a:23:7a:7f:9d:de:27:ca:5f:
                    a0:68:57:fc:cd:d6:09:37:d5:b5:5c:b5:5c:0a:f2:
                    01:eb:95:65:46:d0:dd:7b:94:85:e8:b7:33:75:ad:
                    41:12:99:06:e7:25:29:28:0a:9b:bd:ab:d1:30:2e:
                    24:2d:4f:82:d8:f0:2a:ac:45:55:41:b4:a3:f3:29:
                    73:c1:3f:c5:64:cb:60:05:d7:79:3c:5a:ae:2e:06:
                    06:4f:20:be:4e:83:55:4c:48:b1:19:fd:6c:34:62:
                    46:56:87:c2:88:bc:09:3e:70:85:5d:a1:97:7f:7f:
                    83:0c:70:7f:8b:f1:53:1d:7f:81:30:9b:1c:6b:81:
                    83:e4:6b:02:d5:0f:18:a4:43:9a:92:f0:68:d3:c7:
                    0e:b1:0e:15:5a:12:0e:7e:2e:f4:16:dc:12:0f:74:
                    17:06:96:26:e5:2e:d4:ac:d2:d6:e2:59:0d:10:8a:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:DF:82:52:75:8F:E2:5D:46:7A:34:50:FA:E1:2F:43:3A:A5:C6
            X509v3 Authority Key Identifier:
                keyid:52:85:C8:6E:36:31:F0:49:98:96:F4:F5:AC:45:5D:3E:0C:57:8E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/68a454f3d849fd67e040d53c226f5c685c644393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c037a0e8-0607-4288-8722-e88b4c0fb447/99489470a7c41b7b995971ffb2f6e2d7d2252a1a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:52:bf:00:f9:35:86:9c:86:43:b8:67:5a:44:23:ee:be:
         87:75:52:26:49:e3:01:48:b2:5d:62:25:c8:21:83:be:ef:ca:
         e5:6a:76:6f:f2:05:43:af:a3:b5:24:53:9d:95:c8:1d:0d:18:
         90:8a:cb:a7:f6:38:8b:c1:e8:4c:fd:f0:40:17:e6:e2:b1:02:
         9f:82:58:4c:eb:9c:bf:4e:73:97:4f:3c:50:f2:83:0d:02:fc:
         c5:42:64:15:5b:64:ba:ae:d6:5c:bc:aa:0d:95:e5:46:1d:63:
         93:ab:47:54:8e:2c:f0:aa:d6:de:aa:02:71:cf:05:71:da:0d:
         10:a4:cf:93:2a:93:6d:98:5a:09:4c:98:01:a5:bb:d8:ae:17:
         00:c0:ac:62:1b:6a:6a:00:06:32:94:f6:9e:a8:f6:72:65:95:
         41:9d:14:23:80:1f:04:13:19:f7:38:b4:c9:b3:95:ae:23:dc:
         86:91:3f:41:01:a2:ba:18:14:4c:6e:34:c4:a5:2d:d1:3d:c9:
         e2:84:35:4a:c8:2c:e0:9f:bf:1c:1e:ce:57:55:3d:e1:85:19:
         8d:c9:74:c4:ef:b5:9a:60:a5:5d:3e:83:e0:42:2e:3e:48:16:
         ed:c3:8a:cc:42:0a:b8:de:62:13:d1:0a:67:24:c3:67:ac:d5:
         6a:a9:9b:42
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHdeAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk5
NDg5NDcwYTdjNDFiN2I5OTU5NzFmZmIyZjZlMmQ3ZDIyNTJhMWEwHhcNMjMwNTEx
MjE0MTA4WhcNMjUwNTEyMjE0MTA4WjAzMTEwLwYDVQQDEyg2OGE0NTRmM2Q4NDlm
ZDY3ZTA0MGQ1M2MyMjZmNWM2ODVjNjQ0MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiEbOXFs3ek3b/O6M7ElgwwNgQ6cahlGZZjEOG5SM/8izReBB
bCiEwi90FSgPLmRU8Jul7F4x+MTibjjWxYdp3vpStY24xIDPl2fVKS2I+blqI3p/
nd4nyl+gaFf8zdYJN9W1XLVcCvIB65VlRtDde5SF6Lczda1BEpkG5yUpKAqbvavR
MC4kLU+C2PAqrEVVQbSj8ylzwT/FZMtgBdd5PFquLgYGTyC+ToNVTEixGf1sNGJG
VofCiLwJPnCFXaGXf3+DDHB/i/FTHX+BMJsca4GD5GsC1Q8YpEOakvBo08cOsQ4V
WhIOfi70FtwSD3QXBpYm5S7UrNLW4lkNEIqozQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCFm34JSdY/iXUZ6NFD64S9DOqXGMB8GA1UdIwQYMBaAFFKFyG42MfBJmJb0
9axFXT4MV46HMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTk0ODk0
NzBhN2M0MWI3Yjk5NTk3MWZmYjJmNmUyZDdkMjI1MmExYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzAzN2EwZTgtMDYwNy00Mjg4LTg3MjItZTg4YjRj
MGZiNDQ3LzY4YTQ1NGYzZDg0OWZkNjdlMDQwZDUzYzIyNmY1YzY4NWM2NDQzOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMDM3YTBlOC0wNjA3LTQyODgtODcyMi1lODhi
NGMwZmI0NDcvOTk0ODk0NzBhN2M0MWI3Yjk5NTk3MWZmYjJmNmUyZDdkMjI1MmEx
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD/WAwDQYJKoZIhvcNAQELBQADggEBAFPwUr8A+TWGnIZD
uGdaRCPuvod1UiZJ4wFIsl1iJcghg77vyuVqdm/yBUOvo7UkU52VyB0NGJCKy6f2
OIvB6Ez98EAX5uKxAp+CWEzrnL9Oc5dPPFDygw0C/MVCZBVbZLqu1ly8qg2V5UYd
Y5OrR1SOLPCq1t6qAnHPBXHaDRCkz5Mqk22YWglMmAGlu9iuFwDArGIbamoABjKU
9p6o9nJllUGdFCOAHwQTGfc4tMmzla4j3IaRP0EBoroYFExuNMSlLdE9yeKENUrI
LOCfvxwezldVPeGFGY3JdMTvtZpgpV0+g+BCLj5IFu3DisxCCrjeYhPRCmckw2es
1Wqpm0I=
-----END CERTIFICATE-----