Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a9daea2fea039f14a248434ae44f15055d532d6a.roa
File:                     a9daea2fea039f14a248434ae44f15055d532d6a.roa (raw, json)
Hash identifier:          RzjTixDd3W5rpq3RmkKdiZn0RlvhCY4EZO9PYZbUwMs=
Subject key identifier:   07:D0:8E:D9:E3:05:14:05:B9:35:F5:8B:73:7C:91:CE:FA:68:FC:00
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       1C25A4
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a9daea2fea039f14a248434ae44f15055d532d6a.roa
Signing time:             Wed 12 Oct 2022 15:43:00 +0000
ROA not before:           Wed 12 Oct 2022 15:42:02 +0000
ROA not after:            Sat 12 Oct 2024 15:42:02 +0000
asID:                     3573
IP address blocks:        2801:1f0:4018::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844644 (0x1c25a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Oct 12 15:42:02 2022 GMT
            Not After : Oct 12 15:42:02 2024 GMT
        Subject: CN=a9daea2fea039f14a248434ae44f15055d532d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:8a:a9:69:31:b6:c6:a9:cf:7a:6e:85:d3:
                    66:33:78:ec:4f:0f:67:c1:a0:6c:4f:2b:cc:de:98:
                    fc:b7:2c:f2:28:95:34:f4:c4:02:ba:9f:d6:29:08:
                    d4:69:d8:49:b4:60:1f:99:75:31:52:0f:17:a7:b3:
                    b8:82:9c:9d:3d:3c:63:9e:9d:c8:75:80:6f:90:84:
                    26:15:34:60:78:b0:63:19:d4:a1:31:c9:08:b7:b6:
                    4a:28:44:78:98:65:52:0a:59:ea:2f:14:f0:42:55:
                    dd:d0:9a:f8:25:15:55:00:fe:e2:b9:a6:de:7c:d3:
                    28:35:89:47:20:b3:d3:83:13:c7:3e:01:05:79:1b:
                    ea:f8:30:31:b7:0e:d0:2f:03:d7:d1:74:4f:1d:f6:
                    5c:f6:80:96:bc:a1:21:b2:97:d0:78:3d:eb:de:2e:
                    10:0b:22:cf:89:8b:f2:ff:16:7d:47:ee:b3:a4:c2:
                    b7:e3:3a:98:12:5d:53:3e:78:a3:0e:cb:b3:d2:f8:
                    3d:89:be:0a:3b:6c:d3:b2:76:d5:e7:43:88:80:9e:
                    b9:1a:5b:90:39:62:aa:c5:b4:98:5e:0e:9a:d7:c4:
                    ca:72:98:2b:86:9a:97:17:d6:f8:78:b4:9f:f3:ea:
                    4c:97:3c:5a:03:2f:84:1c:19:0e:52:84:c8:0c:e2:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D0:8E:D9:E3:05:14:05:B9:35:F5:8B:73:7C:91:CE:FA:68:FC:00
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a9daea2fea039f14a248434ae44f15055d532d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4018::/47

    Signature Algorithm: sha256WithRSAEncryption
         de:5c:1f:1f:d1:a4:7f:b6:25:ad:8a:14:0d:c7:70:eb:fe:cb:
         b4:8f:16:96:17:95:82:f1:bb:51:ce:52:d0:7e:08:df:f1:3d:
         92:af:3a:90:b8:55:e4:9f:07:f8:14:fd:ee:a9:40:99:c2:ea:
         23:83:2b:f5:8f:fd:60:3b:f1:10:d1:c1:e5:ca:ba:7a:9c:72:
         9a:4c:d1:e8:6b:6b:45:e5:93:2d:c5:d1:41:85:02:60:2a:77:
         ad:49:a8:54:79:23:46:12:47:de:9e:4d:62:c5:5b:ac:94:aa:
         84:4f:58:61:48:10:39:13:bf:89:96:03:6a:bf:6a:3a:fb:64:
         e6:31:30:4c:63:26:ef:62:dd:68:fe:ba:10:f7:6c:63:6c:a0:
         fa:b5:66:a7:62:5e:a8:3b:ae:13:3d:65:a8:86:8b:3c:43:e0:
         70:e2:fd:1c:a6:42:d4:cf:c6:d9:e0:4a:2a:55:e8:a2:65:95:
         13:e5:b2:56:0a:ac:42:63:f1:a7:ff:8f:36:60:df:17:56:fb:
         79:ed:6b:32:ec:4e:4c:ef:0e:91:d1:d6:c8:f7:2e:f5:28:fa:
         89:12:5a:3d:e0:85:ae:81:57:0d:b0:ca:92:be:7f:a8:ca:33:
         55:95:11:a7:4a:b2:f1:2c:16:d9:c0:45:c5:fe:b1:ee:21:32:
         bf:0e:e4:8b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDHCWkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
Zjg5YjVjODA4NGEwOTM5ZGM4ZTIyMGY0ZTEwMmNkY2YzM2UyYWMwHhcNMjIxMDEy
MTU0MjAyWhcNMjQxMDEyMTU0MjAyWjAzMTEwLwYDVQQDEyhhOWRhZWEyZmVhMDM5
ZjE0YTI0ODQzNGFlNDRmMTUwNTVkNTMyZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgKeKqWkxtsapz3puhdNmM3jsTw9nwaBsTyvM3pj8tyzyKJU0
9MQCup/WKQjUadhJtGAfmXUxUg8Xp7O4gpydPTxjnp3IdYBvkIQmFTRgeLBjGdSh
MckIt7ZKKER4mGVSClnqLxTwQlXd0Jr4JRVVAP7iuabefNMoNYlHILPTgxPHPgEF
eRvq+DAxtw7QLwPX0XRPHfZc9oCWvKEhspfQeD3r3i4QCyLPiYvy/xZ9R+6zpMK3
4zqYEl1TPnijDsuz0vg9ib4KO2zTsnbV50OIgJ65GluQOWKqxbSYXg6a18TKcpgr
hpqXF9b4eLSf8+pMlzxaAy+EHBkOUoTIDOJHgwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFAfQjtnjBRQFuTX1i3N8kc76aPwAMB8GA1UdIwQYMBaAFDu1FREwK4uamhon
KcN2MbuBvoyUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFmODli
NWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJhYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGMyNDU3YTktZjViMC00ZjMwLWI5MmItZTRjNTdh
OWM4MTJmL2E5ZGFlYTJmZWEwMzlmMTRhMjQ4NDM0YWU0NGYxNTA1NWQ1MzJkNmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYzI0NTdhOS1mNWIwLTRmMzAtYjkyYi1lNGM1
N2E5YzgxMmYvNjFmODliNWM4MDg0YTA5MzlkYzhlMjIwZjRlMTAyY2RjZjMzZTJh
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHASgBAfBAGDANBgkqhkiG9w0BAQsFAAOCAQEA3lwfH9Gkf7Yl
rYoUDcdw6/7LtI8WlheVgvG7Uc5S0H4I3/E9kq86kLhV5J8H+BT97qlAmcLqI4Mr
9Y/9YDvxENHB5cq6epxymkzR6GtrReWTLcXRQYUCYCp3rUmoVHkjRhJH3p5NYsVb
rJSqhE9YYUgQORO/iZYDar9qOvtk5jEwTGMm72LdaP66EPdsY2yg+rVmp2JeqDuu
Ez1lqIaLPEPgcOL9HKZC1M/G2eBKKlXoomWVE+WyVgqsQmPxp/+PNmDfF1b7ee1r
MuxOTO8OkdHWyPcu9Sj6iRJaPeCFroFXDbDKkr5/qMozVZURp0qy8SwW2cBFxf6x
7iEyvw7kiw==
-----END CERTIFICATE-----