Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/17138d8755e9de42b97aba75d7a52dc67196afd4.roa
File:                     17138d8755e9de42b97aba75d7a52dc67196afd4.roa (raw, json)
Hash identifier:          GZRNl+03hXz9Q6NRJMQk9kl2eppUHK/BuWbv6zvlHKk=
Subject key identifier:   C8:5D:36:C5:C1:60:90:9E:25:E4:DE:C9:AE:B0:20:E0:97:22:5C:E2
Certificate issuer:       /CN=2bee98b52bf99165b867835f5390295e9317bb56
Certificate serial:       169080
Authority key identifier: 87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/17138d8755e9de42b97aba75d7a52dc67196afd4.roa
Signing time:             Thu 14 Apr 2022 01:09:36 +0000
ROA not before:           Wed 13 Apr 2022 03:00:00 +0000
ROA not after:            Sat 13 Apr 2024 03:00:00 +0000
asID:                     266841
IP address blocks:        2803:52c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478784 (0x169080)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bee98b52bf99165b867835f5390295e9317bb56
        Validity
            Not Before: Apr 13 03:00:00 2022 GMT
            Not After : Apr 13 03:00:00 2024 GMT
        Subject: CN=17138d8755e9de42b97aba75d7a52dc67196afd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:5d:95:cd:57:96:98:58:1f:fc:15:2b:04:
                    ad:43:d7:78:94:77:73:bf:a4:ae:e3:6a:8f:bd:33:
                    24:af:b0:68:85:dc:4e:95:9a:82:2b:0a:a8:e2:c2:
                    27:20:87:a8:26:7b:f1:4d:f2:96:6a:a2:4b:21:e3:
                    60:d0:17:cf:de:ff:dd:dc:9c:a9:47:58:cd:ae:87:
                    86:2d:08:c3:52:c4:3b:15:16:92:59:e6:f7:4a:17:
                    8a:be:0b:48:0d:b0:5e:89:96:42:83:51:68:6e:13:
                    a3:65:8b:4e:63:42:2b:a4:7c:f5:3c:46:05:f1:96:
                    9e:26:8d:6f:29:5e:ea:a8:3b:1c:95:df:13:85:46:
                    c3:7f:a7:86:10:05:b3:f9:16:30:f1:4e:aa:dd:5a:
                    f5:32:b5:c8:ef:09:9d:ca:25:f3:72:85:8c:92:4f:
                    4e:ae:25:8b:42:ba:33:08:fa:f8:50:8d:10:a7:8c:
                    a6:e8:e4:e5:6d:90:26:14:f7:17:2b:1b:53:fd:bd:
                    9f:22:9d:fa:73:26:2e:1c:b3:0c:61:cb:be:11:e1:
                    22:87:58:72:df:e9:8a:0b:06:7b:1e:32:53:ef:a2:
                    80:83:a6:85:3f:42:6d:34:af:06:b6:c9:a1:47:c4:
                    5a:9b:5a:9e:f1:45:af:e3:77:76:e9:a0:6b:96:80:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5D:36:C5:C1:60:90:9E:25:E4:DE:C9:AE:B0:20:E0:97:22:5C:E2
            X509v3 Authority Key Identifier:
                keyid:87:A5:C2:9F:E4:B7:C1:E4:BD:3A:BD:43:2B:17:A8:47:60:1D:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bee98b52bf99165b867835f5390295e9317bb56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/17138d8755e9de42b97aba75d7a52dc67196afd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f72ad821-846b-4ddd-a5dc-f877d37a31dc/2bee98b52bf99165b867835f5390295e9317bb56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:52c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:06:77:f0:35:6c:d8:9e:44:e0:71:d7:7e:a9:73:a2:bb:
         b6:de:57:54:fd:ce:c0:9d:2f:f4:14:dd:23:08:33:91:ee:cf:
         7f:83:57:ae:4e:d6:55:ad:e1:7f:a0:e8:83:b5:40:c1:09:07:
         2b:ab:84:f6:89:5f:68:d4:5b:f1:cd:6d:7a:4a:cc:2e:63:85:
         c8:0a:44:8c:9b:55:a1:7a:00:d2:f5:e1:b9:cc:ef:ea:31:9d:
         16:60:29:b5:84:38:1c:a4:67:9a:8d:71:b7:04:5d:07:f3:81:
         4e:d3:df:9f:f2:8c:14:20:da:1d:0f:5e:51:fe:8e:36:26:74:
         10:10:b6:fd:a3:13:77:67:13:f3:21:ac:d4:ec:f0:51:de:35:
         e7:88:4f:a2:b5:c0:0b:23:02:eb:bb:0b:2a:37:94:aa:e8:f6:
         83:6c:e8:ff:eb:f2:64:4e:a6:f2:b5:47:fb:83:72:cb:26:6b:
         c8:2e:cc:e2:44:c3:8a:5b:25:cf:cc:19:3c:3b:37:e6:3c:87:
         10:94:ca:35:c6:9b:4b:a0:07:71:e7:75:aa:e5:67:92:c3:95:
         1f:cf:e0:20:e6:ad:cc:d8:a7:1e:5e:ba:90:ff:9f:44:1c:33:
         8f:2b:e5:9a:18:07:40:93:dd:7c:ec:7b:42:ce:ea:cf:86:5c:
         bb:c9:cd:f8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDFpCAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
ZWU5OGI1MmJmOTkxNjViODY3ODM1ZjUzOTAyOTVlOTMxN2JiNTYwHhcNMjIwNDEz
MDMwMDAwWhcNMjQwNDEzMDMwMDAwWjAzMTEwLwYDVQQDEygxNzEzOGQ4NzU1ZTlk
ZTQyYjk3YWJhNzVkN2E1MmRjNjcxOTZhZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhGNdlc1XlphYH/wVKwStQ9d4lHdzv6Su42qPvTMkr7BohdxO
lZqCKwqo4sInIIeoJnvxTfKWaqJLIeNg0BfP3v/d3JypR1jNroeGLQjDUsQ7FRaS
Web3SheKvgtIDbBeiZZCg1FobhOjZYtOY0IrpHz1PEYF8ZaeJo1vKV7qqDscld8T
hUbDf6eGEAWz+RYw8U6q3Vr1MrXI7wmdyiXzcoWMkk9OriWLQrozCPr4UI0Qp4ym
6OTlbZAmFPcXKxtT/b2fIp36cyYuHLMMYcu+EeEih1hy3+mKCwZ7HjJT76KAg6aF
P0JtNK8GtsmhR8Ram1qe8UWv43d26aBrloARuQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMhdNsXBYJCeJeTeya6wIOCXIlziMB8GA1UdIwQYMBaAFIelwp/kt8HkvTq9
QysXqEdgHU65MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmJlZTk4
YjUyYmY5OTE2NWI4Njc4MzVmNTM5MDI5NWU5MzE3YmI1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjcyYWQ4MjEtODQ2Yi00ZGRkLWE1ZGMtZjg3N2Qz
N2EzMWRjLzE3MTM4ZDg3NTVlOWRlNDJiOTdhYmE3NWQ3YTUyZGM2NzE5NmFmZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNzJhZDgyMS04NDZiLTRkZGQtYTVkYy1mODc3
ZDM3YTMxZGMvMmJlZTk4YjUyYmY5OTE2NWI4Njc4MzVmNTM5MDI5NWU5MzE3YmI1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDUsAwDQYJKoZIhvcNAQELBQADggEBAEDCBnfwNWzYnkTg
cdd+qXOiu7beV1T9zsCdL/QU3SMIM5Huz3+DV65O1lWt4X+g6IO1QMEJByurhPaJ
X2jUW/HNbXpKzC5jhcgKRIybVaF6ANL14bnM7+oxnRZgKbWEOBykZ5qNcbcEXQfz
gU7T35/yjBQg2h0PXlH+jjYmdBAQtv2jE3dnE/MhrNTs8FHeNeeIT6K1wAsjAuu7
Cyo3lKro9oNs6P/r8mROpvK1R/uDcssma8guzOJEw4pbJc/MGTw7N+Y8hxCUyjXG
m0ugB3HndarlZ5LDlR/P4CDmrczYpx5eupD/n0QcM48r5ZoYB0CT3Xzse0LO6s+G
XLvJzfg=
-----END CERTIFICATE-----