Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/b2e93bfbdc42c9565285c7d466e9c92db5abb7e4.roa
File:                     b2e93bfbdc42c9565285c7d466e9c92db5abb7e4.roa (raw, json)
Hash identifier:          dScpXBdvD871lnSUxzrm2xVpCtqCqt+afKRVvCfNhj4=
Subject key identifier:   74:99:A7:4F:3E:12:2A:7F:79:96:02:F6:BE:DD:6D:3E:46:FF:37:B5
Certificate issuer:       /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial:       1ED6EA
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/b2e93bfbdc42c9565285c7d466e9c92db5abb7e4.roa
Signing time:             Tue 28 Feb 2023 18:26:00 +0000
ROA not before:           Mon 27 Feb 2023 18:25:35 +0000
ROA not after:            Fri 28 Feb 2025 18:25:35 +0000
asID:                     266698
IP address blocks:        2803:4d20:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021098 (0x1ed6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
        Validity
            Not Before: Feb 27 18:25:35 2023 GMT
            Not After : Feb 28 18:25:35 2025 GMT
        Subject: CN=b2e93bfbdc42c9565285c7d466e9c92db5abb7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:89:9a:3a:5c:4b:02:50:52:82:72:11:68:33:
                    d5:00:5f:c6:81:ab:f2:26:7c:16:35:81:39:e5:4d:
                    18:2f:a8:48:f9:8c:ba:50:dc:9e:ef:42:9c:15:1b:
                    a5:4d:49:cf:73:9d:3a:42:95:6e:57:06:28:72:32:
                    24:13:ff:73:17:0c:1b:a0:ff:9f:36:24:67:a2:45:
                    27:9e:b4:dd:bf:a5:19:d3:20:11:d6:a6:52:8c:bb:
                    23:1e:b2:56:66:32:17:bb:c9:f6:b7:f9:4c:29:67:
                    8b:a3:29:c4:66:af:3d:fa:78:c5:73:a7:98:ae:e2:
                    f3:01:0e:2a:1b:d8:bd:55:1d:25:35:6b:83:27:08:
                    cf:42:c0:89:6e:2c:c3:00:86:3b:b2:37:fe:5d:cb:
                    c9:26:6a:f5:61:d4:5a:13:69:6a:31:a3:87:79:02:
                    98:41:7a:79:5f:53:f6:b0:79:3f:7d:4c:02:29:46:
                    5e:67:ad:95:d2:06:09:7e:78:85:80:c2:64:cf:0d:
                    6b:26:2a:70:df:10:e0:1c:f7:cc:98:38:a9:e4:e9:
                    4c:a8:85:cd:9b:81:73:8d:23:4e:75:4a:45:bc:bf:
                    ad:68:e0:8c:73:22:c4:03:a3:8d:e8:e6:81:cb:f1:
                    94:41:ab:88:33:91:20:04:91:92:a0:93:e4:7d:1b:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:A7:4F:3E:12:2A:7F:79:96:02:F6:BE:DD:6D:3E:46:FF:37:B5
            X509v3 Authority Key Identifier:
                keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/b2e93bfbdc42c9565285c7d466e9c92db5abb7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4d20:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:73:49:51:59:3b:00:4a:f4:d4:af:64:70:ba:a1:68:01:
         f5:c9:82:39:ec:5a:2b:d4:f1:14:eb:73:13:27:71:a6:85:ae:
         1a:8b:aa:0d:a1:2b:0c:58:1d:87:b0:de:7d:f6:77:1e:b9:6c:
         29:12:35:fd:4e:ad:a2:cf:7e:94:a6:a4:cc:00:3d:b4:c7:fc:
         8b:e6:03:79:2b:65:ff:12:c7:07:a7:cb:86:36:c0:bf:af:ce:
         e5:29:81:f8:6a:27:37:9c:09:f8:a3:47:b8:91:fa:3c:d0:fc:
         fb:1d:0c:e8:b5:11:42:d3:83:c0:5d:37:d1:66:b6:ba:46:9b:
         72:54:74:16:77:38:9e:79:54:fb:b2:0a:3a:7f:25:35:90:a1:
         8a:25:b6:2e:23:b9:20:aa:fc:cd:23:e8:c4:1f:9d:04:c0:95:
         f5:84:b2:1f:83:8d:1e:ce:be:8e:a5:5e:75:bc:75:6b:3c:46:
         e6:77:93:e4:08:79:fc:0e:b4:4a:30:7e:0e:09:7a:68:70:0f:
         1d:32:6e:51:e0:8a:ba:c2:c9:2e:77:eb:0c:cc:3f:b4:f3:65:
         79:cd:64:8e:72:3d:53:b9:1b:78:9e:54:e8:1f:5a:41:e7:28:
         a2:a9:c1:6a:af:51:5a:51:71:1b:26:da:09:8e:4f:72:70:b1:
         d4:c6:b8:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDHtbqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
MGM2Y2E1NjdhNjIxYWMzNjMwYzcxZDg5YTMyNjA3MWNlNzI0YzgwHhcNMjMwMjI3
MTgyNTM1WhcNMjUwMjI4MTgyNTM1WjAzMTEwLwYDVQQDEyhiMmU5M2JmYmRjNDJj
OTU2NTI4NWM3ZDQ2NmU5YzkyZGI1YWJiN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjomaOlxLAlBSgnIRaDPVAF/GgavyJnwWNYE55U0YL6hI+Yy6
UNye70KcFRulTUnPc506QpVuVwYocjIkE/9zFwwboP+fNiRnokUnnrTdv6UZ0yAR
1qZSjLsjHrJWZjIXu8n2t/lMKWeLoynEZq89+njFc6eYruLzAQ4qG9i9VR0lNWuD
JwjPQsCJbizDAIY7sjf+XcvJJmr1YdRaE2lqMaOHeQKYQXp5X1P2sHk/fUwCKUZe
Z62V0gYJfniFgMJkzw1rJipw3xDgHPfMmDip5OlMqIXNm4FzjSNOdUpFvL+taOCM
cyLEA6ON6OaBy/GUQauIM5EgBJGSoJPkfRswGwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHSZp08+Eip/eZYC9r7dbT5G/ze1MB8GA1UdIwQYMBaAFPK9FC47nNrXEMWC
hQw5ygV9jfC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2YwYzZj
YTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTc4YmMzYTItZmVhNy00ZDlhLWI0ZjgtNTc2ODI0
MjU2MWEyL2IyZTkzYmZiZGM0MmM5NTY1Mjg1YzdkNDY2ZTljOTJkYjVhYmI3ZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzhiYzNhMi1mZWE3LTRkOWEtYjRmOC01NzY4
MjQyNTYxYTIvN2YwYzZjYTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDTSAAAjANBgkqhkiG9w0BAQsFAAOCAQEAQExzSVFZOwBK
9NSvZHC6oWgB9cmCOexaK9TxFOtzEydxpoWuGouqDaErDFgdh7DeffZ3HrlsKRI1
/U6tos9+lKakzAA9tMf8i+YDeStl/xLHB6fLhjbAv6/O5SmB+GonN5wJ+KNHuJH6
PND8+x0M6LURQtODwF030Wa2ukabclR0Fnc4nnlU+7IKOn8lNZChiiW2LiO5IKr8
zSPoxB+dBMCV9YSyH4ONHs6+jqVedbx1azxG5neT5Ah5/A60SjB+Dgl6aHAPHTJu
UeCKusLJLnfrDMw/tPNlec1kjnI9U7kbeJ5U6B9aQecooqnBaq9RWlFxGybaCY5P
cnCx1Ma46Q==
-----END CERTIFICATE-----