Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dfad883e-3b57-4996-b24a-13a36a869e44/f4dee2081784f483096a2f3c60b423cc46997da0.roa
File:                     f4dee2081784f483096a2f3c60b423cc46997da0.roa (raw, json)
Hash identifier:          P7eYU/el51dOQBbHVxZZfOvOwi8+FMuz3SWx7lL+yqw=
Subject key identifier:   66:C8:58:E8:F7:53:F9:52:A7:4D:C8:2D:78:54:81:0B:27:13:11:62
Certificate issuer:       /CN=c184201a028b28ed5826ace34e8b70be90a71ec6
Certificate serial:       0171A5
Authority key identifier: C9:BF:B6:DB:7D:9D:DE:CB:27:5B:4F:64:5D:A7:8C:8B:26:DE:88:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c184201a028b28ed5826ace34e8b70be90a71ec6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dfad883e-3b57-4996-b24a-13a36a869e44/f4dee2081784f483096a2f3c60b423cc46997da0.roa
Signing time:             Tue 13 Feb 2024 21:21:30 +0000
ROA not before:           Tue 13 Feb 2024 21:21:30 +0000
ROA not after:            Fri 13 Feb 2026 21:21:30 +0000
asID:                     273145
IP address blocks:        2803:ec50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94629 (0x171a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c184201a028b28ed5826ace34e8b70be90a71ec6
        Validity
            Not Before: Feb 13 21:21:30 2024 GMT
            Not After : Feb 13 21:21:30 2026 GMT
        Subject: CN=f4dee2081784f483096a2f3c60b423cc46997da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:cd:30:47:ef:ef:f4:2a:93:3d:c7:14:f0:
                    8f:56:52:3f:d3:b1:b9:55:9a:90:d6:ef:c8:09:ea:
                    87:a6:27:d4:8c:2b:a5:b0:4f:6c:fb:5b:9a:23:9b:
                    e4:88:b7:0c:b7:33:10:13:e4:d6:56:8e:ab:00:b6:
                    2b:90:8d:6b:a4:b7:e5:6b:0a:3f:86:1a:1f:0f:b8:
                    99:5e:56:4c:cb:5a:0c:a5:c0:ae:92:90:11:ba:f5:
                    40:76:69:e9:87:96:2f:4f:4c:e8:01:d8:de:d1:d4:
                    2f:e2:1b:d0:cf:0d:34:c4:74:8b:0a:01:55:a9:15:
                    01:f1:cb:30:f3:2d:91:57:84:fd:32:2f:9a:0f:86:
                    20:d3:58:c9:6a:36:22:79:6e:16:43:29:be:73:5c:
                    c2:1c:22:1c:39:43:2e:9b:b6:e3:2d:72:ff:79:85:
                    ae:83:bc:00:36:3c:89:1c:bd:64:8c:5c:98:8b:27:
                    7d:60:f2:d4:8b:1a:62:85:e2:2d:52:54:15:b7:f1:
                    97:11:0a:e8:cf:90:8c:69:6c:5d:fb:65:48:79:d8:
                    f3:ee:2a:f5:77:69:ee:42:05:29:f4:21:10:85:65:
                    53:f6:3e:7a:77:58:8b:6c:01:ca:da:9a:d1:f0:1c:
                    79:57:7e:80:03:e8:6c:38:de:d2:12:90:d0:79:6a:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C8:58:E8:F7:53:F9:52:A7:4D:C8:2D:78:54:81:0B:27:13:11:62
            X509v3 Authority Key Identifier:
                keyid:C9:BF:B6:DB:7D:9D:DE:CB:27:5B:4F:64:5D:A7:8C:8B:26:DE:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c184201a028b28ed5826ace34e8b70be90a71ec6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dfad883e-3b57-4996-b24a-13a36a869e44/f4dee2081784f483096a2f3c60b423cc46997da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dfad883e-3b57-4996-b24a-13a36a869e44/c184201a028b28ed5826ace34e8b70be90a71ec6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:8d:a6:39:1d:84:0b:ea:13:50:da:f1:ae:05:2b:a1:f8:
         b6:a5:21:57:42:76:1a:bf:83:d3:6e:f3:4c:57:27:18:3b:23:
         eb:37:64:c4:26:b3:df:f8:96:d5:52:f7:52:84:f7:b8:a7:0f:
         13:d6:73:76:f3:b9:55:a3:86:60:9a:72:c8:bd:c0:a2:56:31:
         4c:ec:91:8a:0f:71:1d:ab:61:fb:06:bd:43:9e:1f:9a:ea:ed:
         43:fa:dd:a8:16:12:45:82:73:db:5f:b6:4d:5a:dc:6d:1b:e1:
         8c:63:20:b3:a3:55:4e:bf:bc:4e:00:d2:c0:66:b3:b7:b1:4d:
         f6:6c:d3:f1:70:13:55:ad:3c:03:2e:67:81:de:0b:13:75:75:
         fd:6d:5d:3d:00:3f:97:8c:3d:ca:8e:aa:13:5b:97:9d:eb:f6:
         a5:e0:ed:ab:b2:08:e9:f9:37:51:5a:84:79:03:a8:37:26:17:
         86:06:2b:c0:ba:ee:c4:bb:89:80:bd:a6:58:e3:bb:08:51:de:
         f4:29:8b:9f:4b:7a:d6:90:ac:79:c1:95:73:c3:ca:b5:c4:49:
         d2:a0:cf:24:f2:bc:02:c5:31:c1:03:92:de:26:5c:cc:be:7d:
         3e:94:3c:07:ba:b8:06:45:a5:66:25:72:34:7d:09:a4:69:21:
         a2:82:6e:4b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAXGlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ODQyMDFhMDI4YjI4ZWQ1ODI2YWNlMzRlOGI3MGJlOTBhNzFlYzYwHhcNMjQwMjEz
MjEyMTMwWhcNMjYwMjEzMjEyMTMwWjAzMTEwLwYDVQQDEyhmNGRlZTIwODE3ODRm
NDgzMDk2YTJmM2M2MGI0MjNjYzQ2OTk3ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnZLNMEfv7/Qqkz3HFPCPVlI/07G5VZqQ1u/ICeqHpifUjCul
sE9s+1uaI5vkiLcMtzMQE+TWVo6rALYrkI1rpLflawo/hhofD7iZXlZMy1oMpcCu
kpARuvVAdmnph5YvT0zoAdje0dQv4hvQzw00xHSLCgFVqRUB8csw8y2RV4T9Mi+a
D4Yg01jJajYieW4WQym+c1zCHCIcOUMum7bjLXL/eYWug7wANjyJHL1kjFyYiyd9
YPLUixpiheItUlQVt/GXEQroz5CMaWxd+2VIedjz7ir1d2nuQgUp9CEQhWVT9j56
d1iLbAHK2prR8Bx5V36AA+hsON7SEpDQeWqr7wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGbIWOj3U/lSp03ILXhUgQsnExFiMB8GA1UdIwQYMBaAFMm/ttt9nd7LJ1tP
ZF2njIsm3ohlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzE4NDIw
MWEwMjhiMjhlZDU4MjZhY2UzNGU4YjcwYmU5MGE3MWVjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGZhZDg4M2UtM2I1Ny00OTk2LWIyNGEtMTNhMzZh
ODY5ZTQ0L2Y0ZGVlMjA4MTc4NGY0ODMwOTZhMmYzYzYwYjQyM2NjNDY5OTdkYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZmFkODgzZS0zYjU3LTQ5OTYtYjI0YS0xM2Ez
NmE4NjllNDQvYzE4NDIwMWEwMjhiMjhlZDU4MjZhY2UzNGU4YjcwYmU5MGE3MWVj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD7FAwDQYJKoZIhvcNAQELBQADggEBAKPbjaY5HYQL6hNQ
2vGuBSuh+LalIVdCdhq/g9Nu80xXJxg7I+s3ZMQms9/4ltVS91KE97inDxPWc3bz
uVWjhmCacsi9wKJWMUzskYoPcR2rYfsGvUOeH5rq7UP63agWEkWCc9tftk1a3G0b
4YxjILOjVU6/vE4A0sBms7exTfZs0/FwE1WtPAMuZ4HeCxN1df1tXT0AP5eMPcqO
qhNbl53r9qXg7auyCOn5N1FahHkDqDcmF4YGK8C67sS7iYC9pljjuwhR3vQpi59L
etaQrHnBlXPDyrXESdKgzyTyvALFMcEDkt4mXMy+fT6UPAe6uAZFpWYlcjR9CaRp
IaKCbks=
-----END CERTIFICATE-----