Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/ba48cb26e7b73e8479bd8b54a0a01775a6e474b2.roa
File:                     ba48cb26e7b73e8479bd8b54a0a01775a6e474b2.roa (raw, json)
Hash identifier:          YC6FwcgOSdRIzBwxSwzg2aDi6tz+BE2FlNGuG6cMpjg=
Subject key identifier:   06:5F:04:05:C5:74:B4:9B:1C:C2:EE:2B:7C:57:DB:28:A4:08:3A:A8
Certificate issuer:       /CN=50b2a8065c6a80ac82efdd878d9239a66cdd0356
Certificate serial:       253494
Authority key identifier: 0E:DE:97:DD:69:CE:E7:82:39:D8:22:2E:2D:0D:FC:3F:BB:7A:1F:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b2a8065c6a80ac82efdd878d9239a66cdd0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/ba48cb26e7b73e8479bd8b54a0a01775a6e474b2.roa
Signing time:             Fri 17 Nov 2023 15:17:45 +0000
ROA not before:           Fri 17 Nov 2023 15:17:45 +0000
ROA not after:            Mon 17 Nov 2025 15:17:45 +0000
asID:                     262146
IP address blocks:        2803:9080::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438292 (0x253494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b2a8065c6a80ac82efdd878d9239a66cdd0356
        Validity
            Not Before: Nov 17 15:17:45 2023 GMT
            Not After : Nov 17 15:17:45 2025 GMT
        Subject: CN=ba48cb26e7b73e8479bd8b54a0a01775a6e474b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:f5:d8:3d:35:18:ab:8c:d2:20:55:26:5a:
                    3b:a8:cc:c9:ca:2a:c9:46:95:03:a4:17:d3:43:99:
                    b5:15:40:a8:02:c8:81:ee:a4:f7:ff:0a:22:14:8d:
                    71:a1:c6:b2:c0:46:66:ce:3a:bb:8c:cd:90:f0:40:
                    da:67:65:8c:b8:b9:b8:98:52:f5:74:1b:c9:37:bd:
                    74:db:a5:6c:3f:8d:2c:c4:46:14:09:ea:e2:ac:25:
                    80:51:aa:13:46:21:c9:6f:b7:18:6d:c1:8e:ec:e0:
                    51:30:cb:12:70:65:20:8e:a9:21:ea:bf:3e:5a:0f:
                    d7:9b:2f:39:ab:d2:70:3a:b2:62:87:b9:00:b1:f0:
                    54:9e:62:ef:f5:d0:ad:f5:ca:32:05:6d:83:2e:ba:
                    43:52:6c:2e:bb:17:dc:c7:ca:8c:27:b7:81:3b:51:
                    ea:2d:a6:94:18:ce:f2:8b:ae:7c:8a:f0:47:ad:36:
                    3d:4e:49:a9:ce:06:bc:84:52:12:8a:2e:4f:be:54:
                    c1:bf:04:4c:df:ef:ad:83:38:9f:73:f4:87:48:d0:
                    18:af:2d:5d:53:55:85:18:55:11:ec:30:18:98:bf:
                    c0:fe:1e:57:64:24:bc:f5:8d:38:df:3b:0c:26:51:
                    8a:1f:89:2d:f7:27:1b:4a:f8:59:c7:07:4b:4a:85:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:04:05:C5:74:B4:9B:1C:C2:EE:2B:7C:57:DB:28:A4:08:3A:A8
            X509v3 Authority Key Identifier:
                keyid:0E:DE:97:DD:69:CE:E7:82:39:D8:22:2E:2D:0D:FC:3F:BB:7A:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b2a8065c6a80ac82efdd878d9239a66cdd0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/ba48cb26e7b73e8479bd8b54a0a01775a6e474b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/acd913f1-4827-4d25-b5c2-f390b8ee9e44/50b2a8065c6a80ac82efdd878d9239a66cdd0356.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9080::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:5a:ee:4b:98:d7:0b:4d:5c:f1:0d:92:c6:d9:62:fc:37:d2:
         35:8a:55:b9:e4:a2:5d:bf:78:0a:02:82:eb:87:fd:a6:89:1d:
         4d:d6:4b:77:85:d3:1f:81:dc:7c:23:66:fc:3d:82:50:5d:ca:
         8c:df:c3:ba:a3:3f:cf:14:6d:c6:1e:a2:d1:35:79:6e:d7:a3:
         36:45:6b:a9:2b:0b:0a:16:92:f1:65:27:fe:82:2f:9b:c0:b3:
         0b:b4:b7:fd:2b:34:18:58:cd:32:4b:24:7a:6a:aa:a3:93:37:
         90:ae:c1:af:2e:02:ea:e4:0a:7b:a6:37:b5:58:9b:87:c2:75:
         ff:3e:7e:2d:09:2e:ab:81:98:4a:3c:3e:0a:3d:06:00:00:cb:
         07:3c:25:f1:70:d1:b7:4d:f1:f6:a9:00:63:9a:9a:db:f0:c2:
         2a:eb:b1:00:12:a6:d4:25:70:c8:1e:06:88:a5:01:10:bc:20:
         c8:05:ef:60:a4:38:a6:8f:fd:fa:9f:4c:1d:e4:75:fd:8f:90:
         8a:e3:59:92:b6:86:0a:47:ab:7e:eb:f2:7b:4b:08:79:4b:8a:
         94:9a:8a:56:e1:08:82:24:05:a2:29:54:ae:9b:cd:0d:41:13:
         46:f3:c5:e9:92:f6:5a:8e:9c:83:64:d9:aa:05:42:c2:60:b4:
         69:20:24:de
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJTSUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
YjJhODA2NWM2YTgwYWM4MmVmZGQ4NzhkOTIzOWE2NmNkZDAzNTYwHhcNMjMxMTE3
MTUxNzQ1WhcNMjUxMTE3MTUxNzQ1WjAzMTEwLwYDVQQDEyhiYTQ4Y2IyNmU3Yjcz
ZTg0NzliZDhiNTRhMGEwMTc3NWE2ZTQ3NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmHz12D01GKuM0iBVJlo7qMzJyirJRpUDpBfTQ5m1FUCoAsiB
7qT3/woiFI1xocaywEZmzjq7jM2Q8EDaZ2WMuLm4mFL1dBvJN71026VsP40sxEYU
CerirCWAUaoTRiHJb7cYbcGO7OBRMMsScGUgjqkh6r8+Wg/Xmy85q9JwOrJih7kA
sfBUnmLv9dCt9coyBW2DLrpDUmwuuxfcx8qMJ7eBO1HqLaaUGM7yi658ivBHrTY9
Tkmpzga8hFISii5PvlTBvwRM3++tgzifc/SHSNAYry1dU1WFGFUR7DAYmL/A/h5X
ZCS89Y043zsMJlGKH4kt9ycbSvhZxwdLSoVS5QIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAZfBAXFdLSbHMLuK3xX2yikCDqoMB8GA1UdIwQYMBaAFA7el91pzueCOdgi
Li0N/D+7eh82MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTBiMmE4
MDY1YzZhODBhYzgyZWZkZDg3OGQ5MjM5YTY2Y2RkMDM1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNkOTEzZjEtNDgyNy00ZDI1LWI1YzItZjM5MGI4
ZWU5ZTQ0L2JhNDhjYjI2ZTdiNzNlODQ3OWJkOGI1NGEwYTAxNzc1YTZlNDc0YjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2Q5MTNmMS00ODI3LTRkMjUtYjVjMi1mMzkw
YjhlZTllNDQvNTBiMmE4MDY1YzZhODBhYzgyZWZkZDg3OGQ5MjM5YTY2Y2RkMDM1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDkIAwDQYJKoZIhvcNAQELBQADggEBALla7kuY1wtNXPEN
ksbZYvw30jWKVbnkol2/eAoCguuH/aaJHU3WS3eF0x+B3HwjZvw9glBdyozfw7qj
P88UbcYeotE1eW7XozZFa6krCwoWkvFlJ/6CL5vAswu0t/0rNBhYzTJLJHpqqqOT
N5Cuwa8uAurkCnumN7VYm4fCdf8+fi0JLquBmEo8Pgo9BgAAywc8JfFw0bdN8fap
AGOamtvwwirrsQASptQlcMgeBoilARC8IMgF72CkOKaP/fqfTB3kdf2PkIrjWZK2
hgpHq37r8ntLCHlLipSailbhCIIkBaIpVK6bzQ1BE0bzxemS9lqOnINk2aoFQsJg
tGkgJN4=
-----END CERTIFICATE-----