Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/a6fddb3a4c286d6240cc16ccd0a55c7c5cdfba5e.roa
File:                     a6fddb3a4c286d6240cc16ccd0a55c7c5cdfba5e.roa (raw, json)
Hash identifier:          uELtc/+QjjETRRE1hZCY0Aplgg5XgstgRz/xGc5c4co=
Subject key identifier:   47:7D:01:8E:26:3D:28:B4:A8:03:28:37:52:CF:FC:18:F3:10:38:57
Certificate issuer:       /CN=5acbc1040078c2c220281be4e4aebb06b6460703
Certificate serial:       19D460
Authority key identifier: 22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/a6fddb3a4c286d6240cc16ccd0a55c7c5cdfba5e.roa
Signing time:             Tue 13 Feb 2024 20:50:34 +0000
ROA not before:           Tue 13 Feb 2024 20:50:33 +0000
ROA not after:            Fri 13 Feb 2026 20:50:33 +0000
asID:                     262589
IP address blocks:        2801:1e:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692768 (0x19d460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acbc1040078c2c220281be4e4aebb06b6460703
        Validity
            Not Before: Feb 13 20:50:33 2024 GMT
            Not After : Feb 13 20:50:33 2026 GMT
        Subject: CN=a6fddb3a4c286d6240cc16ccd0a55c7c5cdfba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:c1:03:01:2b:b6:9f:b4:68:8b:0f:f0:71:
                    ee:c3:d5:70:a3:64:96:8d:99:39:a0:06:b1:ce:42:
                    ef:c0:20:8a:cb:31:ee:76:40:58:f0:5c:dd:20:80:
                    bd:7c:b4:88:c9:ff:01:8e:ce:b3:30:cd:17:7d:1e:
                    bb:ce:cd:cf:9e:cc:7d:b4:c7:0a:2f:cd:14:72:a1:
                    6d:ca:69:b8:96:93:54:5f:9d:92:95:5e:f8:a1:38:
                    e9:f0:59:2b:7d:f4:7d:5f:80:50:12:30:c6:bd:f1:
                    de:9f:b9:1a:c2:fb:2e:30:9d:48:22:ca:0a:74:7d:
                    99:77:c2:c0:a3:3f:96:f3:a4:f0:b4:4f:1e:eb:77:
                    e0:3d:cd:25:28:38:5b:12:19:e5:2e:e6:6d:66:aa:
                    cf:72:05:3e:8a:e2:33:7b:d8:4b:55:85:f7:3b:1b:
                    36:87:0c:64:6f:4e:1d:07:94:2b:9e:98:ca:46:c3:
                    e1:17:eb:19:90:e1:f3:65:62:89:53:15:62:c8:84:
                    b0:df:33:dd:71:99:99:68:f6:b6:22:63:6a:6a:c7:
                    54:72:e0:2f:18:e8:4e:fe:32:be:dd:0c:17:56:c7:
                    7c:6f:58:26:83:48:1f:e0:a0:40:85:fc:40:48:2c:
                    c5:48:0e:ca:d1:d7:33:3b:b3:32:70:14:8e:30:03:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:01:8E:26:3D:28:B4:A8:03:28:37:52:CF:FC:18:F3:10:38:57
            X509v3 Authority Key Identifier:
                keyid:22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/a6fddb3a4c286d6240cc16ccd0a55c7c5cdfba5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:fe:a3:02:73:74:e8:0a:f0:83:89:08:8e:17:74:1f:65:
         d6:1f:77:63:e9:eb:95:56:30:24:ba:0c:0d:3e:d3:58:95:7c:
         a5:71:24:35:eb:6a:ce:30:b3:a1:91:79:7d:98:9d:49:bd:84:
         ae:bb:b7:2e:f6:cc:98:60:43:52:22:03:11:cd:49:86:c0:b3:
         3f:b6:aa:47:f3:e3:e7:81:1c:a2:81:e6:f4:28:75:7c:48:c2:
         14:a2:ce:94:08:22:3f:64:80:07:e9:89:ee:3e:72:df:c4:f4:
         5d:84:72:84:62:1a:a0:d5:61:bc:b4:ad:e4:12:4c:65:98:e1:
         77:d2:32:92:d8:2b:71:52:c7:a2:af:14:0c:54:b9:6d:20:fd:
         bd:ea:a9:16:72:51:2a:4e:37:20:8c:a9:ae:7c:bd:f1:b3:01:
         1d:1a:bf:3b:6c:90:0c:3a:3b:0d:e1:b3:46:63:8b:a3:2f:4f:
         ac:23:31:90:6f:04:cd:70:e3:f8:91:b4:e5:5f:ef:2c:b6:de:
         66:37:5e:4f:43:f2:2c:a7:15:1e:4e:73:a0:54:06:b8:1c:e6:
         9b:d5:8d:af:c7:e7:73:c8:23:17:37:28:34:57:9c:9f:dd:ce:
         6d:14:69:89:24:27:a6:b3:d2:cc:f2:04:17:1c:e9:31:07:43:
         a7:63:44:a3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGdRgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
Y2JjMTA0MDA3OGMyYzIyMDI4MWJlNGU0YWViYjA2YjY0NjA3MDMwHhcNMjQwMjEz
MjA1MDMzWhcNMjYwMjEzMjA1MDMzWjAzMTEwLwYDVQQDEyhhNmZkZGIzYTRjMjg2
ZDYyNDBjYzE2Y2NkMGE1NWM3YzVjZGZiYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnffBAwErtp+0aIsP8HHuw9Vwo2SWjZk5oAaxzkLvwCCKyzHu
dkBY8FzdIIC9fLSIyf8Bjs6zMM0XfR67zs3Pnsx9tMcKL80UcqFtymm4lpNUX52S
lV74oTjp8FkrffR9X4BQEjDGvfHen7kawvsuMJ1IIsoKdH2Zd8LAoz+W86TwtE8e
63fgPc0lKDhbEhnlLuZtZqrPcgU+iuIze9hLVYX3Oxs2hwxkb04dB5QrnpjKRsPh
F+sZkOHzZWKJUxViyISw3zPdcZmZaPa2ImNqasdUcuAvGOhO/jK+3QwXVsd8b1gm
g0gf4KBAhfxASCzFSA7K0dczO7MycBSOMAOyvwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEd9AY4mPSi0qAMoN1LP/BjzEDhXMB8GA1UdIwQYMBaAFCK9Zy9Dhy1dRs7D
KW1cxcbBeCQvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWFjYmMx
MDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmJhZTI0NjMtZTNlOS00ZGZkLTk1ZGUtNTMzOWNj
NWQxNDk4L2E2ZmRkYjNhNGMyODZkNjI0MGNjMTZjY2QwYTU1YzdjNWNkZmJhNWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYmFlMjQ2My1lM2U5LTRkZmQtOTVkZS01MzM5
Y2M1ZDE0OTgvNWFjYmMxMDQwMDc4YzJjMjIwMjgxYmU0ZTRhZWJiMDZiNjQ2MDcw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB5oADANBgkqhkiG9w0BAQsFAAOCAQEAPsT+owJzdOgK
8IOJCI4XdB9l1h93Y+nrlVYwJLoMDT7TWJV8pXEkNetqzjCzoZF5fZidSb2Erru3
LvbMmGBDUiIDEc1JhsCzP7aqR/Pj54EcooHm9Ch1fEjCFKLOlAgiP2SAB+mJ7j5y
38T0XYRyhGIaoNVhvLSt5BJMZZjhd9IyktgrcVLHoq8UDFS5bSD9veqpFnJRKk43
IIyprny98bMBHRq/O2yQDDo7DeGzRmOLoy9PrCMxkG8EzXDj+JG05V/vLLbeZjde
T0PyLKcVHk5zoFQGuBzmm9WNr8fnc8gjFzcoNFecn93ObRRpiSQnprPSzPIEFxzp
MQdDp2NEow==
-----END CERTIFICATE-----