Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/6dfcfbf2120b048ea0b15bdc3b720a925f8d821f.roa
File:                     6dfcfbf2120b048ea0b15bdc3b720a925f8d821f.roa (raw, json)
Hash identifier:          0WqN7AzksjgJR/mh7UoxJTDaJy3HUa2FZ4XgUZwpz60=
Subject key identifier:   78:30:C0:11:16:77:A7:C2:2C:11:60:39:EE:E0:C9:4E:02:72:A3:82
Certificate issuer:       /CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
Certificate serial:       192291
Authority key identifier: D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/6dfcfbf2120b048ea0b15bdc3b720a925f8d821f.roa
Signing time:             Fri 17 Jun 2022 15:05:22 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Mon 17 Jun 2024 03:00:00 +0000
asID:                     265824
IP address blocks:        2803:d420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647249 (0x192291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2899ec2c192252a77a0bc2f7542a7ec0d2a389e
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2024 GMT
        Subject: CN=6dfcfbf2120b048ea0b15bdc3b720a925f8d821f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:f5:bf:d3:fb:62:92:02:27:20:ea:77:d6:
                    11:92:ba:30:18:9b:f7:59:62:9b:d3:b6:7f:aa:e6:
                    bb:d0:4d:f9:bf:54:24:1c:ad:ae:86:c3:fb:e9:5c:
                    17:e7:af:ce:b1:d0:3b:97:ba:bc:1d:4a:6a:ee:a3:
                    a4:80:1d:e4:27:72:1c:e6:c6:88:83:64:cd:25:f5:
                    26:20:b8:47:77:ed:4a:0a:7c:cb:4c:32:82:d9:0e:
                    8c:e3:92:f9:94:d3:89:20:95:5f:ce:c8:95:e1:9d:
                    d6:7e:cb:11:e0:86:f2:54:58:75:af:00:43:a0:a5:
                    1b:ca:9a:1c:fc:ca:54:af:2b:cb:0c:fd:dc:c8:bb:
                    59:f9:ff:8a:bd:81:b5:74:55:28:42:88:6b:9b:aa:
                    e9:8e:2d:70:73:89:de:90:9a:b5:4b:88:89:1c:d7:
                    87:0b:ab:16:36:f4:e9:99:69:f6:f3:0a:46:26:9f:
                    7d:65:b3:27:97:65:69:23:2f:19:41:bc:74:7b:24:
                    55:be:59:db:c7:0d:de:90:4d:10:57:a4:25:1b:dd:
                    52:3e:2c:7e:db:d9:31:ce:38:af:60:51:f7:8a:f5:
                    c6:c5:e3:b7:22:d3:0e:5e:31:2e:54:48:8e:4a:f7:
                    83:d3:01:1b:1d:04:af:74:e8:9f:b3:bc:6f:5a:c9:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:C0:11:16:77:A7:C2:2C:11:60:39:EE:E0:C9:4E:02:72:A3:82
            X509v3 Authority Key Identifier:
                keyid:D4:AA:94:08:1D:C1:00:B6:75:8A:10:6A:C2:52:78:09:74:93:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/6dfcfbf2120b048ea0b15bdc3b720a925f8d821f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e60a2d08-97b1-4966-9e76-f81d639cf0b8/d2899ec2c192252a77a0bc2f7542a7ec0d2a389e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d420::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:26:ea:4a:7a:5d:22:e8:8c:63:40:57:55:dd:10:28:7f:
         81:49:82:60:d4:e6:01:09:37:3d:bd:56:8d:03:c0:c3:92:57:
         9a:ee:22:db:02:03:60:03:e7:20:b6:af:f4:0d:8d:f3:ca:f8:
         40:30:34:bc:96:b6:e3:19:f8:19:f5:5b:c8:ca:47:e3:ba:6a:
         74:29:e0:17:da:1b:57:6b:c8:cf:6f:80:ce:6c:39:62:9e:97:
         d8:22:82:e8:86:60:67:5a:f2:68:18:39:3c:eb:80:28:62:f1:
         52:90:39:7a:de:f0:64:fa:49:d7:7f:01:4d:6d:10:f6:a9:c9:
         14:86:4a:3d:c5:65:01:99:d6:95:59:02:81:4b:bf:4f:40:df:
         96:e7:a3:25:e0:e1:dd:a6:ab:90:52:a1:64:46:9b:10:f1:b3:
         87:83:51:8a:b1:c4:3d:13:72:5e:c3:06:ed:12:02:eb:75:47:
         62:c5:10:d8:18:c5:80:db:40:ef:61:23:20:10:2b:37:15:0e:
         26:a9:6c:58:48:6b:34:9e:ce:39:a6:02:48:02:c7:f1:ef:c9:
         a7:e1:0a:b5:0e:44:5c:2c:f9:33:62:fe:8d:36:a2:54:ca:f6:
         27:6d:a2:34:f6:d2:26:b5:a2:db:c8:8d:89:96:c7:c8:d6:11:
         e3:d2:5b:a4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDGSKRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQy
ODk5ZWMyYzE5MjI1MmE3N2EwYmMyZjc1NDJhN2VjMGQyYTM4OWUwHhcNMjIwNjE3
MDMwMDAwWhcNMjQwNjE3MDMwMDAwWjAzMTEwLwYDVQQDEyg2ZGZjZmJmMjEyMGIw
NDhlYTBiMTViZGMzYjcyMGE5MjVmOGQ4MjFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnZv1v9P7YpICJyDqd9YRkrowGJv3WWKb07Z/qua70E35v1Qk
HK2uhsP76VwX56/OsdA7l7q8HUpq7qOkgB3kJ3Ic5saIg2TNJfUmILhHd+1KCnzL
TDKC2Q6M45L5lNOJIJVfzsiV4Z3WfssR4IbyVFh1rwBDoKUbypoc/MpUryvLDP3c
yLtZ+f+KvYG1dFUoQohrm6rpji1wc4nekJq1S4iJHNeHC6sWNvTpmWn28wpGJp99
ZbMnl2VpIy8ZQbx0eyRVvlnbxw3ekE0QV6QlG91SPix+29kxzjivYFH3ivXGxeO3
ItMOXjEuVEiOSveD0wEbHQSvdOifs7xvWsnpXwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHgwwBEWd6fCLBFgOe7gyU4CcqOCMB8GA1UdIwQYMBaAFNSqlAgdwQC2dYoQ
asJSeAl0k/MwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDI4OTll
YzJjMTkyMjUyYTc3YTBiYzJmNzU0MmE3ZWMwZDJhMzg5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTYwYTJkMDgtOTdiMS00OTY2LTllNzYtZjgxZDYz
OWNmMGI4LzZkZmNmYmYyMTIwYjA0OGVhMGIxNWJkYzNiNzIwYTkyNWY4ZDgyMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNjBhMmQwOC05N2IxLTQ5NjYtOWU3Ni1mODFk
NjM5Y2YwYjgvZDI4OTllYzJjMTkyMjUyYTc3YTBiYzJmNzU0MmE3ZWMwZDJhMzg5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD1CAwDQYJKoZIhvcNAQELBQADggEBAJXUJupKel0i6Ixj
QFdV3RAof4FJgmDU5gEJNz29Vo0DwMOSV5ruItsCA2AD5yC2r/QNjfPK+EAwNLyW
tuMZ+Bn1W8jKR+O6anQp4BfaG1dryM9vgM5sOWKel9giguiGYGda8mgYOTzrgChi
8VKQOXre8GT6Sdd/AU1tEPapyRSGSj3FZQGZ1pVZAoFLv09A35bnoyXg4d2mq5BS
oWRGmxDxs4eDUYqxxD0Tcl7DBu0SAut1R2LFENgYxYDbQO9hIyAQKzcVDiapbFhI
azSezjmmAkgCx/HvyafhCrUORFws+TNi/o02olTK9idtojT20ia1otvIjYmWx8jW
EePSW6Q=
-----END CERTIFICATE-----