Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/f9c8a6a20abbb3b815f0878c6f37227e40310a58.roa
File:                     f9c8a6a20abbb3b815f0878c6f37227e40310a58.roa (raw, json)
Hash identifier:          rWmrk/o0yteZseELl+1AE6ixmRs5ybBzc+qlObBvylM=
Subject key identifier:   9E:B8:7A:BC:74:DB:87:CE:B1:88:33:07:F2:2B:93:DA:87:1D:4D:79
Certificate issuer:       /CN=ce135892fe8714b9faa36d773ec601408e44fc03
Certificate serial:       07C18D
Authority key identifier: 60:A9:BE:19:00:DE:53:7D:6D:B0:8A:B7:DC:9C:1C:BD:C6:E3:85:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce135892fe8714b9faa36d773ec601408e44fc03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/f9c8a6a20abbb3b815f0878c6f37227e40310a58.roa
Signing time:             Tue 07 Jun 2022 17:39:09 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     269880
IP address blocks:        2803:38e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508301 (0x7c18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce135892fe8714b9faa36d773ec601408e44fc03
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=f9c8a6a20abbb3b815f0878c6f37227e40310a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:29:9e:08:9f:a9:c3:a5:6a:28:9f:5d:61:
                    e8:1a:d8:38:70:49:ee:c5:16:72:b7:17:db:79:04:
                    d7:e7:71:26:9f:ce:6a:8d:15:35:57:b3:69:b0:65:
                    51:5d:b2:d4:bb:c7:d7:c8:77:6e:cb:22:78:c2:f4:
                    7f:73:e0:3f:07:77:06:b5:76:ef:b9:47:9c:12:29:
                    1c:f9:f4:ab:9f:e8:58:f5:2b:14:dc:6f:7c:2b:58:
                    bf:cf:01:f5:ac:88:e1:52:ab:ff:d9:72:34:bc:90:
                    11:03:a5:e5:78:6c:9a:aa:92:4e:aa:4d:d5:29:be:
                    f5:b5:93:c6:b3:48:6e:68:20:21:5a:60:63:6e:36:
                    0b:df:4b:65:02:02:97:55:b4:ea:51:f9:d1:2d:c2:
                    29:78:64:92:dd:70:be:19:c9:46:54:14:70:eb:70:
                    0c:e4:31:bd:62:c3:f4:83:82:82:9b:9f:90:64:74:
                    24:46:a4:b1:6e:0e:72:eb:aa:02:5b:6e:29:8f:16:
                    a6:5b:cd:93:04:74:d2:65:20:88:39:30:3e:9b:67:
                    89:77:aa:91:91:92:b5:bc:22:ad:ec:02:b3:8b:98:
                    91:05:a6:d2:fd:14:4c:b1:22:3c:70:55:26:4f:3f:
                    a2:34:fd:a3:56:81:10:4a:c6:f1:ba:ac:48:59:97:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B8:7A:BC:74:DB:87:CE:B1:88:33:07:F2:2B:93:DA:87:1D:4D:79
            X509v3 Authority Key Identifier:
                keyid:60:A9:BE:19:00:DE:53:7D:6D:B0:8A:B7:DC:9C:1C:BD:C6:E3:85:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce135892fe8714b9faa36d773ec601408e44fc03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/f9c8a6a20abbb3b815f0878c6f37227e40310a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb83da8f-4bab-4eb0-918b-ddd0a8221aae/ce135892fe8714b9faa36d773ec601408e44fc03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:38e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:52:ed:55:58:52:42:bc:c9:74:68:cf:63:1b:44:08:86:84:
         f5:2a:cf:9d:78:ad:71:c4:a2:c5:f7:dd:f7:88:36:31:74:6a:
         75:17:89:53:95:20:dc:76:69:5e:66:9e:45:15:70:78:b2:fd:
         05:dc:42:f4:1f:77:99:b5:f8:e3:75:67:4a:2e:4d:80:2d:fb:
         a6:46:bd:7f:0e:ec:d0:b4:c7:d8:81:b5:1d:d1:73:69:77:ec:
         e8:9f:08:f7:20:cb:9f:b7:f5:de:04:1b:ff:65:f6:d8:89:e4:
         f1:79:ed:e4:9c:e8:eb:57:0e:84:39:4e:1a:dc:5d:f6:e2:de:
         03:d9:6b:61:db:60:d9:f9:f3:ba:82:be:97:9e:0a:78:a5:15:
         8a:67:95:19:a8:99:95:83:51:46:83:c7:c5:a2:d0:0f:3e:f0:
         f7:52:28:54:0c:31:82:ff:43:a2:d9:ca:b1:73:9d:80:6f:0c:
         34:c6:f8:4b:8e:03:c3:a1:fc:39:d5:45:81:e0:11:9a:44:a9:
         86:86:f2:71:01:f3:7a:2a:80:6e:53:ca:7c:6d:a0:c0:1c:09:
         aa:36:aa:30:e9:e6:29:3f:ea:b0:9e:21:23:df:84:2c:73:c6:
         43:e3:cc:a3:94:70:2c:6b:24:77:09:f6:cc:a0:55:9f:68:7b:
         c6:61:8e:29
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDB8GNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MTM1ODkyZmU4NzE0YjlmYWEzNmQ3NzNlYzYwMTQwOGU0NGZjMDMwHhcNMjIwNjA3
MDMwMDAwWhcNMjQwNjA3MDMwMDAwWjAzMTEwLwYDVQQDEyhmOWM4YTZhMjBhYmJi
M2I4MTVmMDg3OGM2ZjM3MjI3ZTQwMzEwYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkfApngifqcOlaiifXWHoGtg4cEnuxRZytxfbeQTX53Emn85q
jRU1V7NpsGVRXbLUu8fXyHduyyJ4wvR/c+A/B3cGtXbvuUecEikc+fSrn+hY9SsU
3G98K1i/zwH1rIjhUqv/2XI0vJARA6XleGyaqpJOqk3VKb71tZPGs0huaCAhWmBj
bjYL30tlAgKXVbTqUfnRLcIpeGSS3XC+GclGVBRw63AM5DG9YsP0g4KCm5+QZHQk
RqSxbg5y66oCW24pjxamW82TBHTSZSCIOTA+m2eJd6qRkZK1vCKt7AKzi5iRBabS
/RRMsSI8cFUmTz+iNP2jVoEQSsbxuqxIWZckYQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJ64erx024fOsYgzB/Irk9qHHU15MB8GA1UdIwQYMBaAFGCpvhkA3lN9bbCK
t9ycHL3G44UCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UxMzU4
OTJmZTg3MTRiOWZhYTM2ZDc3M2VjNjAxNDA4ZTQ0ZmMwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWI4M2RhOGYtNGJhYi00ZWIwLTkxOGItZGRkMGE4
MjIxYWFlL2Y5YzhhNmEyMGFiYmIzYjgxNWYwODc4YzZmMzcyMjdlNDAzMTBhNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYjgzZGE4Zi00YmFiLTRlYjAtOTE4Yi1kZGQw
YTgyMjFhYWUvY2UxMzU4OTJmZTg3MTRiOWZhYTM2ZDc3M2VjNjAxNDA4ZTQ0ZmMw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDOOAwDQYJKoZIhvcNAQELBQADggEBAFJS7VVYUkK8yXRo
z2MbRAiGhPUqz514rXHEosX33feINjF0anUXiVOVINx2aV5mnkUVcHiy/QXcQvQf
d5m1+ON1Z0ouTYAt+6ZGvX8O7NC0x9iBtR3Rc2l37OifCPcgy5+39d4EG/9l9tiJ
5PF57eSc6OtXDoQ5ThrcXfbi3gPZa2HbYNn587qCvpeeCnilFYpnlRmomZWDUUaD
x8Wi0A8+8PdSKFQMMYL/Q6LZyrFznYBvDDTG+EuOA8Oh/DnVRYHgEZpEqYaG8nEB
83oqgG5TynxtoMAcCao2qjDp5ik/6rCeISPfhCxzxkPjzKOUcCxrJHcJ9sygVZ9o
e8Zhjik=
-----END CERTIFICATE-----