Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/515ac77ac7d98ae58ecab87d1cca933a568eb914.roa
File:                     515ac77ac7d98ae58ecab87d1cca933a568eb914.roa (raw, json)
Hash identifier:          CefkfYAyh2CPUPtrtGRdk1LP49Kk3yLWEaHqRa/LEM0=
Subject key identifier:   21:2B:D9:5A:B8:7D:F8:3B:C7:9A:81:E4:58:82:91:B3:8F:54:A7:F4
Certificate issuer:       /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial:       21C98C
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/515ac77ac7d98ae58ecab87d1cca933a568eb914.roa
Signing time:             Wed 05 Jul 2023 02:05:00 +0000
ROA not before:           Tue 04 Jul 2023 02:05:00 +0000
ROA not after:            Sat 05 Jul 2025 02:05:00 +0000
asID:                     52468
IP address blocks:        2803:1c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214284 (0x21c98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
        Validity
            Not Before: Jul  4 02:05:00 2023 GMT
            Not After : Jul  5 02:05:00 2025 GMT
        Subject: CN=515ac77ac7d98ae58ecab87d1cca933a568eb914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:1c:c4:fe:f6:64:42:ca:6a:81:bc:9a:d3:
                    13:4c:ab:2c:13:39:f9:ca:22:c8:eb:5a:07:af:81:
                    02:63:2d:0f:5c:7a:bd:55:1c:04:f3:79:32:a9:34:
                    b4:9e:c5:0d:64:69:5b:35:08:74:fe:fb:b5:16:1f:
                    b5:eb:df:e6:49:e9:94:3c:d1:53:72:8a:fc:7f:e6:
                    9f:20:03:63:7f:3d:15:67:32:f0:cc:9d:7f:1d:4c:
                    65:54:3f:2e:df:73:17:6f:b0:e8:2f:2f:b3:f8:73:
                    cc:6c:32:e8:2b:bc:c3:c6:fd:c3:85:20:fc:0d:ca:
                    af:b8:d4:22:61:65:91:f4:24:fa:c7:4a:d8:94:61:
                    b9:d1:21:c7:37:6e:ad:94:cc:14:9b:4e:6c:25:21:
                    12:80:26:6a:fc:8c:26:a6:d3:88:b4:4f:ef:b6:3a:
                    3a:36:3c:69:fd:a2:9f:d6:94:39:47:2a:87:6b:34:
                    36:5b:8a:47:1d:50:1f:36:9f:ef:8e:1e:b1:c4:0c:
                    f1:30:cc:5a:5b:42:48:6e:c2:03:e2:fb:fc:c6:56:
                    a0:0a:de:c4:25:d0:5d:7c:8f:9a:2a:77:c9:98:b1:
                    2f:db:90:c4:a4:66:64:f7:e5:4d:2c:58:3a:ef:f5:
                    8b:d9:ad:f8:25:2a:11:65:5e:ea:e5:4b:03:89:7b:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:D9:5A:B8:7D:F8:3B:C7:9A:81:E4:58:82:91:B3:8F:54:A7:F4
            X509v3 Authority Key Identifier:
                keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/515ac77ac7d98ae58ecab87d1cca933a568eb914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:3b:91:8a:25:1f:6e:de:e1:c6:fc:ca:a0:de:18:1d:f1:
         dd:6a:33:87:4d:ad:9a:3c:7e:c2:f9:d9:c8:d5:c0:20:a7:76:
         c1:a7:61:3c:b8:f3:76:3a:5a:f0:cc:a9:d5:97:d8:2c:58:65:
         f7:ef:1b:52:e7:c7:5d:78:35:30:7e:f2:ec:9a:e0:c6:dc:7f:
         49:14:02:6c:87:a5:0d:e8:b9:b5:bd:b8:a4:b1:a1:96:77:79:
         5e:7f:47:09:09:84:92:f5:93:03:cf:82:b1:5b:72:e3:97:bf:
         02:e3:3d:d9:26:40:de:66:39:6e:7c:45:62:0d:6d:62:1c:b6:
         36:e5:93:95:c0:22:5c:9c:8e:cf:68:38:13:31:6e:bc:36:07:
         ca:26:57:5e:c4:bc:cf:85:26:7f:03:c9:20:45:64:83:90:c8:
         c2:58:fa:e6:0d:ff:00:de:e2:89:20:a6:8c:33:d2:ea:53:dc:
         e6:09:f0:cc:0b:48:61:5b:df:ec:a0:1a:1e:a5:ee:89:55:0a:
         49:4e:87:b9:b0:d9:d6:89:af:b3:17:be:01:4b:53:89:85:33:
         fa:cf:86:5a:7f:3f:27:15:44:2f:29:db:e2:65:00:80:e3:b2:
         4d:ce:62:80:2c:ef:35:49:2e:cf:cf:11:38:f3:e7:f5:da:c1:
         3e:d9:4c:7c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIcmMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
MWI1MzFiMDFjZDU0NDY0NTMxNzliMzRhNWMxMWM4NzEzMWQ4ZGYwHhcNMjMwNzA0
MDIwNTAwWhcNMjUwNzA1MDIwNTAwWjAzMTEwLwYDVQQDEyg1MTVhYzc3YWM3ZDk4
YWU1OGVjYWI4N2QxY2NhOTMzYTU2OGViOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr5EcxP72ZELKaoG8mtMTTKssEzn5yiLI61oHr4ECYy0PXHq9
VRwE83kyqTS0nsUNZGlbNQh0/vu1Fh+169/mSemUPNFTcor8f+afIANjfz0VZzLw
zJ1/HUxlVD8u33MXb7DoLy+z+HPMbDLoK7zDxv3DhSD8DcqvuNQiYWWR9CT6x0rY
lGG50SHHN26tlMwUm05sJSESgCZq/IwmptOItE/vtjo6Njxp/aKf1pQ5RyqHazQ2
W4pHHVAfNp/vjh6xxAzxMMxaW0JIbsID4vv8xlagCt7EJdBdfI+aKnfJmLEv25DE
pGZk9+VNLFg67/WL2a34JSoRZV7q5UsDiXu1GwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFCEr2Vq4ffg7x5qB5FiCkbOPVKf0MB8GA1UdIwQYMBaAFOGZSj+kvs+ad1x3
d2P/52v6LKS6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGExYjUz
MWIwMWNkNTQ0NjQ1MzE3OWIzNGE1YzExYzg3MTMxZDhkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcyNjE1ZTUtNTU1Yi00YTdjLTkzYWItY2U4YTk2
M2E3Yzc1LzUxNWFjNzdhYzdkOThhZTU4ZWNhYjg3ZDFjY2E5MzNhNTY4ZWI5MTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzI2MTVlNS01NTViLTRhN2MtOTNhYi1jZThh
OTYzYTdjNzUvNGExYjUzMWIwMWNkNTQ0NjQ1MzE3OWIzNGE1YzExYzg3MTMxZDhk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDHCAwDQYJKoZIhvcNAQELBQADggEBAHCeO5GKJR9u3uHG
/Mqg3hgd8d1qM4dNrZo8fsL52cjVwCCndsGnYTy483Y6WvDMqdWX2CxYZffvG1Ln
x114NTB+8uya4Mbcf0kUAmyHpQ3oubW9uKSxoZZ3eV5/RwkJhJL1kwPPgrFbcuOX
vwLjPdkmQN5mOW58RWINbWIctjblk5XAIlycjs9oOBMxbrw2B8omV17EvM+FJn8D
ySBFZIOQyMJY+uYN/wDe4okgpowz0upT3OYJ8MwLSGFb3+ygGh6l7olVCklOh7mw
2daJr7MXvgFLU4mFM/rPhlp/PycVRC8p2+JlAIDjsk3OYoAs7zVJLs/PETjz5/Xa
wT7ZTHw=
-----END CERTIFICATE-----