Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/30e41d24d540255e40f0218f2d7d921cf6a9425c.roa
File:                     30e41d24d540255e40f0218f2d7d921cf6a9425c.roa (raw, json)
Hash identifier:          IgTjyZfeKaaSbXXdYyqMS9A9g7NjBjhb71zJb6VV/eE=
Subject key identifier:   36:79:1D:73:7A:BB:75:CA:AE:EE:E0:D8:E5:03:BB:0A:4F:98:43:A6
Certificate issuer:       /CN=d669f1619ed478965c98d9a134f5fd106be561a4
Certificate serial:       015CE9
Authority key identifier: F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/30e41d24d540255e40f0218f2d7d921cf6a9425c.roa
Signing time:             Fri 16 Jun 2023 18:43:09 +0000
ROA not before:           Thu 15 Jun 2023 18:43:09 +0000
ROA not after:            Mon 16 Jun 2025 18:43:09 +0000
asID:                     28451
IP address blocks:        2806:3f9::/33 maxlen: 33
                          2806:3f9:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89321 (0x15ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d669f1619ed478965c98d9a134f5fd106be561a4
        Validity
            Not Before: Jun 15 18:43:09 2023 GMT
            Not After : Jun 16 18:43:09 2025 GMT
        Subject: CN=30e41d24d540255e40f0218f2d7d921cf6a9425c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:72:af:29:5c:16:7e:a1:3f:df:b3:bd:9a:
                    ed:59:0f:d1:69:db:8c:7d:11:ec:fa:3f:39:74:e8:
                    30:5f:b0:b7:ca:3d:50:1c:8e:38:b6:75:84:25:20:
                    d0:59:16:b9:df:5f:a5:69:30:ef:8f:33:2e:76:84:
                    82:8c:9c:73:2e:da:ac:e1:42:97:f4:12:f5:30:38:
                    f7:fe:7d:dd:db:26:c4:e7:a3:31:aa:27:0e:bb:dd:
                    63:da:2a:99:aa:97:88:ba:93:d1:97:cf:95:0a:ac:
                    2e:ea:b1:ea:41:2c:62:cb:f0:9f:42:58:3a:17:39:
                    e6:42:2c:3e:fb:46:d3:6e:50:2c:01:40:85:e9:f9:
                    c7:b6:c4:2a:cf:b6:13:e9:73:1e:61:32:bf:12:8e:
                    30:02:7c:04:4b:83:ef:bf:af:84:2f:6e:dc:90:e9:
                    f8:0a:17:88:ab:21:26:d7:b7:e5:46:4a:49:52:17:
                    d0:8e:31:ac:a0:4b:db:4a:50:7f:52:2e:1e:b3:4e:
                    61:2d:82:9d:7b:92:40:30:6e:b7:98:40:12:cb:d4:
                    a9:d7:c1:51:4c:ef:fe:ea:17:cf:c8:76:20:14:04:
                    0a:e4:30:3b:86:38:63:d5:21:d0:00:5e:d8:35:4b:
                    10:46:e2:85:0e:a4:18:3f:8d:28:8c:ea:4f:c9:c5:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:79:1D:73:7A:BB:75:CA:AE:EE:E0:D8:E5:03:BB:0A:4F:98:43:A6
            X509v3 Authority Key Identifier:
                keyid:F1:CF:A8:DD:82:81:99:5F:BF:34:09:EC:89:9C:57:90:5C:16:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d669f1619ed478965c98d9a134f5fd106be561a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/30e41d24d540255e40f0218f2d7d921cf6a9425c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cfcad58f-faea-4ad5-9e24-2dd942015441/d669f1619ed478965c98d9a134f5fd106be561a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f9::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:b7:5f:24:80:a5:6a:70:d0:6b:a6:96:d1:78:bb:f2:fa:74:
         79:07:0f:02:8c:fb:c0:c8:9d:6b:5f:67:bf:b4:0b:b0:ec:c0:
         9d:cf:0b:25:57:7e:77:8e:f1:1b:d2:45:02:4c:d1:cd:31:f1:
         3a:38:69:1a:f5:ac:1e:b3:1a:be:92:9d:0f:66:74:07:a9:94:
         69:7e:c7:d2:d6:a0:d0:28:d5:53:52:68:d8:a1:0c:1a:7a:3a:
         b9:2b:fa:04:2d:84:90:80:d7:eb:f8:9f:6c:e9:dd:95:c5:6a:
         08:e5:ff:c3:e8:5c:3a:c7:e2:85:d5:7e:e0:16:3b:8d:b4:dd:
         f5:90:63:38:5e:40:ee:45:fc:66:58:8e:31:ec:63:c2:96:dc:
         89:a4:37:fb:4d:22:17:ce:31:9f:a7:6e:c5:7a:d9:98:5a:d8:
         49:47:83:89:ff:25:d8:35:65:5a:a2:c3:4a:39:ee:80:3e:10:
         e0:4d:e3:23:8e:7c:00:e7:62:e8:cd:91:17:46:03:44:22:e1:
         55:20:93:da:4a:5a:46:57:6a:2a:c5:15:96:fd:da:8c:c1:9a:
         f3:86:a4:a5:80:a9:81:86:11:b1:e0:21:f1:e9:22:3d:0a:d0:
         47:c2:1e:04:9e:d3:ff:08:d8:31:e5:77:f0:48:55:a8:e1:c7:
         fb:c1:89:0d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAVzpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
NjlmMTYxOWVkNDc4OTY1Yzk4ZDlhMTM0ZjVmZDEwNmJlNTYxYTQwHhcNMjMwNjE1
MTg0MzA5WhcNMjUwNjE2MTg0MzA5WjAzMTEwLwYDVQQDEygzMGU0MWQyNGQ1NDAy
NTVlNDBmMDIxOGYyZDdkOTIxY2Y2YTk0MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuhFyrylcFn6hP9+zvZrtWQ/RaduMfRHs+j85dOgwX7C3yj1Q
HI44tnWEJSDQWRa531+laTDvjzMudoSCjJxzLtqs4UKX9BL1MDj3/n3d2ybE56Mx
qicOu91j2iqZqpeIupPRl8+VCqwu6rHqQSxiy/CfQlg6FznmQiw++0bTblAsAUCF
6fnHtsQqz7YT6XMeYTK/Eo4wAnwES4Pvv6+EL27ckOn4CheIqyEm17flRkpJUhfQ
jjGsoEvbSlB/Ui4es05hLYKde5JAMG63mEASy9Sp18FRTO/+6hfPyHYgFAQK5DA7
hjhj1SHQAF7YNUsQRuKFDqQYP40ojOpPycXlWwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDZ5HXN6u3XKru7g2OUDuwpPmEOmMB8GA1UdIwQYMBaAFPHPqN2CgZlfvzQJ
7ImcV5BcFvo7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY2OWYx
NjE5ZWQ0Nzg5NjVjOThkOWExMzRmNWZkMTA2YmU1NjFhNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2ZjYWQ1OGYtZmFlYS00YWQ1LTllMjQtMmRkOTQy
MDE1NDQxLzMwZTQxZDI0ZDU0MDI1NWU0MGYwMjE4ZjJkN2Q5MjFjZjZhOTQyNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZmNhZDU4Zi1mYWVhLTRhZDUtOWUyNC0yZGQ5
NDIwMTU0NDEvZDY2OWYxNjE5ZWQ0Nzg5NjVjOThkOWExMzRmNWZkMTA2YmU1NjFh
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgGA/kwDQYJKoZIhvcNAQELBQADggEBAHm3XySApWpw0Gum
ltF4u/L6dHkHDwKM+8DInWtfZ7+0C7DswJ3PCyVXfneO8RvSRQJM0c0x8To4aRr1
rB6zGr6SnQ9mdAeplGl+x9LWoNAo1VNSaNihDBp6Orkr+gQthJCA1+v4n2zp3ZXF
agjl/8PoXDrH4oXVfuAWO4203fWQYzheQO5F/GZYjjHsY8KW3ImkN/tNIhfOMZ+n
bsV62Zha2ElHg4n/Jdg1ZVqiw0o57oA+EOBN4yOOfADnYujNkRdGA0Qi4VUgk9pK
WkZXairFFZb92ozBmvOGpKWAqYGGEbHgIfHpIj0K0EfCHgSe0/8I2DHld/BIVajh
x/vBiQ0=
-----END CERTIFICATE-----