Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0c62380cddc3c3a870f1d2da4aafd29535e209a6.roa
File:                     0c62380cddc3c3a870f1d2da4aafd29535e209a6.roa (raw, json)
Hash identifier:          aFxQZMqW3KWHPA4VdKxI/8gUX4vfURY1w3yRZNLjFo4=
Subject key identifier:   DB:07:0A:E8:59:0D:3D:1D:31:A7:0E:2C:0C:25:6A:C0:6C:FF:98:54
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       179C4C
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0c62380cddc3c3a870f1d2da4aafd29535e209a6.roa
Signing time:             Tue 10 May 2022 23:36:03 +0000
ROA not before:           Tue 10 May 2022 03:00:00 +0000
ROA not after:            Wed 10 May 2028 03:00:00 +0000
asID:                     14618
IP address blocks:        2801:0:60::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547340 (0x179c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: May 10 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2028 GMT
        Subject: CN=0c62380cddc3c3a870f1d2da4aafd29535e209a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:bd:65:be:8f:f0:c3:02:d1:7d:87:7d:4e:
                    d5:bd:a3:8e:90:e5:d3:e9:96:55:6a:16:8e:85:c1:
                    3b:b0:84:69:0c:b7:3b:5b:ec:af:6f:07:83:06:eb:
                    0a:67:f6:c9:c1:70:74:74:9c:7c:85:fc:00:7b:63:
                    33:98:36:32:ff:59:26:3c:60:15:4f:09:94:b4:7e:
                    30:45:ed:48:22:34:bb:a5:44:5c:26:1d:48:8f:32:
                    4b:26:79:8e:29:cd:7d:8f:1c:42:f6:ee:88:23:5f:
                    4a:3d:51:9b:37:88:87:b1:2d:ec:83:ed:90:98:ca:
                    26:ff:be:0e:8f:ca:77:e1:d1:91:aa:e9:87:1d:3e:
                    b6:d3:c7:26:f0:8e:a5:e0:7a:ec:08:01:d4:ef:0e:
                    d7:7f:85:f4:e7:21:f9:9d:b0:d0:64:d4:53:a3:51:
                    80:07:e5:91:1d:ed:f2:27:e6:e7:3f:3c:48:43:ad:
                    1b:b0:5e:14:c8:e1:bb:b8:4d:9f:74:68:e1:b4:fe:
                    e2:64:78:8f:c5:77:c4:eb:d5:05:b3:d4:a2:35:e3:
                    16:a5:16:6d:ce:4e:1a:56:41:5e:95:69:38:9b:10:
                    a7:b7:8e:2f:5d:19:f0:88:6c:7e:85:cb:63:c0:77:
                    53:3a:dd:76:b7:e0:d4:76:fa:95:9a:e7:d3:fc:f2:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:0A:E8:59:0D:3D:1D:31:A7:0E:2C:0C:25:6A:C0:6C:FF:98:54
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0c62380cddc3c3a870f1d2da4aafd29535e209a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:1a:d4:59:5e:0d:db:a0:7e:45:52:24:e8:ab:36:ee:74:
         b4:31:69:af:8d:4e:de:4d:d8:21:b2:39:b3:eb:2b:59:d9:27:
         3f:3a:c7:b8:c6:3f:af:8d:ab:d1:c4:c0:65:bb:a3:e4:59:74:
         73:f8:9c:f0:58:e7:89:a1:20:ba:08:99:05:59:b0:c1:fd:c8:
         da:bf:43:a3:e3:7b:16:4e:67:b0:b2:54:0a:59:70:23:35:1a:
         07:60:05:7c:9f:8d:64:4d:f7:f6:a0:7c:75:77:99:b0:1c:db:
         98:46:11:08:1f:7f:59:79:96:e0:df:58:a6:1a:5b:c7:9f:9f:
         c3:87:39:88:31:11:2e:2a:18:10:21:34:33:c6:ed:d1:08:95:
         bb:56:28:36:5a:53:7d:f3:56:b8:0a:9b:af:ea:8a:33:f2:40:
         12:4f:80:c2:45:79:86:61:93:64:9b:62:8c:a5:11:26:aa:29:
         db:2f:f9:74:53:5b:27:9d:64:0a:c4:c5:c0:f5:f5:bc:8d:14:
         7a:0f:03:b2:40:d7:15:2a:f5:5f:71:c2:8b:34:e2:d3:f3:e4:
         77:57:4b:fa:98:17:69:a5:6c:f7:30:32:ff:a8:db:ba:19:1a:
         7b:90:35:06:10:48:a1:39:3a:3a:be:cf:da:aa:22:8f:8c:a2:
         71:92:d5:ea
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDF5xMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc3
MjM1ZjY2YjZjNWQ1YzMxODY5MDY2YzRkNDA1ZDY3MDYyMDEyY2YwHhcNMjIwNTEw
MDMwMDAwWhcNMjgwNTEwMDMwMDAwWjAzMTEwLwYDVQQDEygwYzYyMzgwY2RkYzNj
M2E4NzBmMWQyZGE0YWFmZDI5NTM1ZTIwOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAutu9Zb6P8MMC0X2HfU7VvaOOkOXT6ZZVahaOhcE7sIRpDLc7
W+yvbweDBusKZ/bJwXB0dJx8hfwAe2MzmDYy/1kmPGAVTwmUtH4wRe1IIjS7pURc
Jh1IjzJLJnmOKc19jxxC9u6II19KPVGbN4iHsS3sg+2QmMom/74Oj8p34dGRqumH
HT6208cm8I6l4HrsCAHU7w7Xf4X05yH5nbDQZNRTo1GAB+WRHe3yJ+bnPzxIQ60b
sF4UyOG7uE2fdGjhtP7iZHiPxXfE69UFs9SiNeMWpRZtzk4aVkFelWk4mxCnt44v
XRnwiGx+hctjwHdTOt12t+DUdvqVmufT/PJUawIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNsHCuhZDT0dMacOLAwlasBs/5hUMB8GA1UdIwQYMBaAFApKuQWFaUAQZND2
lJ83MylyBt0yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzcyMzVm
NjZiNmM1ZDVjMzE4NjkwNjZjNGQ0MDVkNjcwNjIwMTJjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTIyYzM3NzMtOTc3My00ZWI2LTk4M2YtNGJjMGVh
OGM5MzJiLzBjNjIzODBjZGRjM2MzYTg3MGYxZDJkYTRhYWZkMjk1MzVlMjA5YTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMjJjMzc3My05NzczLTRlYjYtOTgzZi00YmMw
ZWE4YzkzMmIvNzcyMzVmNjZiNmM1ZDVjMzE4NjkwNjZjNGQ0MDVkNjcwNjIwMTJj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAAAAYDANBgkqhkiG9w0BAQsFAAOCAQEAHVMa1FleDdug
fkVSJOirNu50tDFpr41O3k3YIbI5s+srWdknPzrHuMY/r42r0cTAZbuj5Fl0c/ic
8FjniaEgugiZBVmwwf3I2r9Do+N7Fk5nsLJUCllwIzUaB2AFfJ+NZE339qB8dXeZ
sBzbmEYRCB9/WXmW4N9Yphpbx5+fw4c5iDERLioYECE0M8bt0QiVu1YoNlpTffNW
uAqbr+qKM/JAEk+AwkV5hmGTZJtijKURJqop2y/5dFNbJ51kCsTFwPX1vI0Ueg8D
skDXFSr1X3HCizTi0/Pkd1dL+pgXaaVs9zAy/6jbuhkae5A1BhBIoTk6Or7P2qoi
j4yicZLV6g==
-----END CERTIFICATE-----