Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d77fbf0685dc1f807cb09daf5d8c09cca909171c.roa
File:                     d77fbf0685dc1f807cb09daf5d8c09cca909171c.roa (raw, json)
Hash identifier:          tUdPqL7fOzAxw2Qj9+bGt3Pi7xXk8JYyUXfNn4bjfDc=
Subject key identifier:   82:5D:09:A5:50:E5:4F:C1:C7:F0:C2:81:93:A1:A7:C4:A1:2D:CB:8F
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1CA9C6
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d77fbf0685dc1f807cb09daf5d8c09cca909171c.roa
Signing time:             Mon 11 Dec 2023 15:33:45 +0000
ROA not before:           Mon 11 Dec 2023 15:33:45 +0000
ROA not after:            Thu 11 Dec 2025 15:33:45 +0000
asID:                     28000
IP address blocks:        2800:700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878470 (0x1ca9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Dec 11 15:33:45 2023 GMT
            Not After : Dec 11 15:33:45 2025 GMT
        Subject: CN=d77fbf0685dc1f807cb09daf5d8c09cca909171c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:70:32:41:13:ab:25:e7:17:8a:cd:72:d9:
                    87:15:d2:0a:29:d5:a2:1a:ad:01:c8:2d:35:42:86:
                    93:36:45:a1:53:fc:68:34:fc:c7:20:d3:f1:f9:bc:
                    8a:2e:88:9c:72:20:e0:7e:d9:b2:73:72:61:ae:ea:
                    4a:13:46:b5:5e:4a:8c:00:6d:9b:dc:52:45:13:c4:
                    02:79:a7:6f:8c:fa:a3:53:31:96:a7:43:54:69:1a:
                    77:c1:ef:d1:1e:0e:13:37:a6:25:11:6e:17:16:d8:
                    f0:87:3e:4e:09:6b:c4:1e:63:21:75:ee:be:78:8b:
                    51:98:b5:1f:31:a2:fb:31:56:a5:75:38:26:be:bf:
                    6b:45:52:7f:ad:c8:b3:09:aa:24:20:9a:2b:b6:f8:
                    a8:f6:98:6e:d2:23:0b:f3:13:f8:b2:c0:bc:f1:f7:
                    35:fd:6e:68:21:d5:08:e5:31:19:4d:de:73:1c:83:
                    82:7d:96:bf:53:56:aa:8d:15:52:9b:81:40:98:b8:
                    05:56:16:bd:2c:11:87:a2:28:69:92:bb:0f:d7:87:
                    14:80:61:c7:71:96:f4:ca:b1:4f:fc:4f:dc:6c:db:
                    24:02:48:80:fb:06:ca:b8:dd:9b:32:2f:1d:6d:9e:
                    c9:c8:56:bc:60:cc:ce:3a:2d:1d:5d:b6:df:1e:a4:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:09:A5:50:E5:4F:C1:C7:F0:C2:81:93:A1:A7:C4:A1:2D:CB:8F
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/d77fbf0685dc1f807cb09daf5d8c09cca909171c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:71:92:d0:b1:82:61:80:0f:20:d2:8f:8b:ea:a3:f2:cc:dd:
         a5:2a:b0:73:57:7a:11:e7:e9:5f:a6:1f:91:08:be:37:c3:26:
         f0:e9:6f:6d:7c:29:b8:32:88:49:f4:4f:dc:b8:b6:32:ec:a6:
         70:5c:d6:51:e4:e0:d3:8b:1f:67:5b:a9:64:ff:8e:88:c2:8c:
         7a:b2:33:a5:09:73:89:1a:e3:18:b2:3f:48:20:da:3c:c0:6c:
         35:8f:80:a3:cd:59:2c:83:ae:f7:79:4f:a6:ba:df:ac:e0:3b:
         09:e9:6d:89:17:9b:99:bb:6e:40:23:db:82:46:33:58:56:10:
         77:15:c9:0a:83:12:8f:f8:1b:66:b0:43:5e:c5:b9:a3:c1:1a:
         f8:39:98:13:d1:c1:4d:a3:cc:be:f9:17:2c:cc:0c:38:aa:f7:
         79:cc:cc:62:30:5d:dd:37:90:20:47:6a:41:e1:3b:5f:cb:b1:
         98:a7:36:bc:77:99:e0:cf:b1:74:3f:73:f4:de:cd:8f:20:68:
         dd:cd:1a:72:e4:fd:e4:fe:e1:ff:6c:15:91:3e:74:a3:69:ee:
         4f:38:51:63:83:b5:b5:92:66:42:63:85:6b:6e:29:03:1d:06:
         2f:1b:12:35:36:ed:45:81:73:47:b6:4f:b3:75:48:87:90:a3:
         bf:8f:2c:88
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDHKnGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
YTE3MTU5NTgzMzMzOTgxNDYxNzlmZGJmMmU0ODVmZTY1MjU3NDIwHhcNMjMxMjEx
MTUzMzQ1WhcNMjUxMjExMTUzMzQ1WjAzMTEwLwYDVQQDEyhkNzdmYmYwNjg1ZGMx
ZjgwN2NiMDlkYWY1ZDhjMDljY2E5MDkxNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkHZwMkETqyXnF4rNctmHFdIKKdWiGq0ByC01QoaTNkWhU/xo
NPzHINPx+byKLoicciDgftmyc3JhrupKE0a1XkqMAG2b3FJFE8QCeadvjPqjUzGW
p0NUaRp3we/RHg4TN6YlEW4XFtjwhz5OCWvEHmMhde6+eItRmLUfMaL7MValdTgm
vr9rRVJ/rcizCaokIJortvio9phu0iML8xP4ssC88fc1/W5oIdUI5TEZTd5zHIOC
fZa/U1aqjRVSm4FAmLgFVha9LBGHoihpkrsP14cUgGHHcZb0yrFP/E/cbNskAkiA
+wbKuN2bMi8dbZ7JyFa8YMzOOi0dXbbfHqTXhwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFIJdCaVQ5U/Bx/DCgZOhp8ShLcuPMB8GA1UdIwQYMBaAFGCEYUh8NmTYlwrD
qaF0ZoCLrci/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhMTcx
NTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3L2Q3N2ZiZjA2ODVkYzFmODA3Y2IwOWRhZjVkOGMwOWNjYTkwOTE3MWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMmVhMTcxNTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABwAwDQYJKoZIhvcNAQELBQADggEBAEdxktCxgmGADyDS
j4vqo/LM3aUqsHNXehHn6V+mH5EIvjfDJvDpb218KbgyiEn0T9y4tjLspnBc1lHk
4NOLH2dbqWT/jojCjHqyM6UJc4ka4xiyP0gg2jzAbDWPgKPNWSyDrvd5T6a636zg
OwnpbYkXm5m7bkAj24JGM1hWEHcVyQqDEo/4G2awQ17FuaPBGvg5mBPRwU2jzL75
FyzMDDiq93nMzGIwXd03kCBHakHhO1/LsZinNrx3meDPsXQ/c/TezY8gaN3NGnLk
/eT+4f9sFZE+dKNp7k84UWODtbWSZkJjhWtuKQMdBi8bEjU27UWBc0e2T7N1SIeQ
o7+PLIg=
-----END CERTIFICATE-----