Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/81c1327130f9373859d009a7b2abb2f2adccba98.roa
File:                     81c1327130f9373859d009a7b2abb2f2adccba98.roa (raw, json)
Hash identifier:          7rrxV5Ui1HtOX4ZPt6RX+lGEcximSkQ0kXvxUemz6Qk=
Subject key identifier:   33:39:16:F5:C8:2A:B7:CD:5D:76:29:7C:45:48:E7:91:9C:A9:37:57
Certificate issuer:       /CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
Certificate serial:       C0AA
Authority key identifier: 88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/81c1327130f9373859d009a7b2abb2f2adccba98.roa
Signing time:             Thu 10 Aug 2023 20:47:51 +0000
ROA not before:           Wed 09 Aug 2023 20:47:50 +0000
ROA not after:            Sun 10 Aug 2025 20:47:50 +0000
asID:                     28114
IP address blocks:        2803:3c90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49322 (0xc0aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
        Validity
            Not Before: Aug  9 20:47:50 2023 GMT
            Not After : Aug 10 20:47:50 2025 GMT
        Subject: CN=81c1327130f9373859d009a7b2abb2f2adccba98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:7a:c2:31:6d:f1:20:e3:53:77:4e:bb:fa:
                    08:07:e6:66:bc:0e:55:25:c5:d1:70:01:00:02:40:
                    8f:3a:48:05:cb:ab:4a:b5:4f:1b:ee:68:53:85:84:
                    e6:92:d7:68:42:68:c3:ac:10:65:ce:99:43:36:c1:
                    2f:f5:19:e2:e1:8b:69:5c:dd:98:bf:7a:9d:6d:ac:
                    b8:c3:cc:28:de:10:3b:c5:9a:e4:31:1a:36:c7:5a:
                    f4:dc:80:75:0d:a7:25:f6:13:cf:b1:ea:bd:56:9f:
                    14:f5:93:ca:8f:97:7c:dc:75:69:6c:99:22:4a:bd:
                    e4:0b:e1:d1:6a:df:ad:ad:56:41:7d:a3:04:13:6e:
                    b6:b7:3b:8a:8a:f3:60:f6:aa:2b:ce:1a:a9:28:08:
                    a2:7c:20:bc:1f:92:71:da:de:82:bf:c0:5b:04:d8:
                    09:bc:fc:f8:fb:16:8f:05:80:89:4a:9a:69:b4:7f:
                    95:c2:e5:ca:9f:81:53:d4:12:3e:84:32:25:29:5a:
                    04:9f:07:ef:18:10:69:72:e9:63:5a:80:2a:8f:8c:
                    68:50:90:96:ae:c5:fc:ae:a1:c4:df:b5:89:2a:78:
                    db:29:80:11:2b:16:77:7b:ce:7e:9f:5a:49:29:de:
                    59:3c:d7:f5:a9:80:5a:68:4f:0c:d2:0f:3f:28:c9:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:39:16:F5:C8:2A:B7:CD:5D:76:29:7C:45:48:E7:91:9C:A9:37:57
            X509v3 Authority Key Identifier:
                keyid:88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/81c1327130f9373859d009a7b2abb2f2adccba98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:cb:a7:fe:42:e1:7a:ea:9b:a9:8c:6d:45:51:b3:d6:f4:de:
         62:d5:e0:f1:5b:eb:7f:b3:fe:d5:ef:21:65:92:d4:11:02:ce:
         6a:23:83:54:87:cb:c3:9e:8e:0f:13:12:9f:08:c4:0c:65:af:
         e0:a5:af:33:93:e1:d5:db:62:a5:a8:00:3d:a3:bd:6a:11:b8:
         0e:23:37:92:e9:15:64:92:15:e3:d3:ea:79:d0:1e:37:94:28:
         ee:d4:38:6f:f1:75:da:15:c9:b4:7a:03:db:c9:18:fb:7b:be:
         91:f4:59:ed:d2:57:ca:26:5c:4e:95:66:a4:76:1d:86:5f:d0:
         9c:36:4b:0b:78:13:53:cd:0e:18:69:ea:97:b1:be:bc:5c:80:
         6d:be:62:7f:01:39:3a:6d:ad:ea:c5:ae:12:c2:eb:b5:0c:ec:
         0c:6e:34:07:6c:f2:09:21:60:67:83:2c:e9:04:15:59:a3:82:
         ba:d9:01:d5:d4:2a:a3:15:7b:22:74:fc:d0:0d:ce:2e:d0:1e:
         98:77:f1:2b:fb:8f:1c:6d:19:94:2d:e2:1c:2f:e1:b3:6f:eb:
         77:f6:44:15:64:f5:5f:18:ab:6d:8e:35:fb:4d:be:6a:f3:e8:
         cc:58:46:43:f7:13:06:f7:a4:5c:cd:1f:1b:ad:9a:5f:6b:61:
         8c:56:6e:af
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAMCqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzczZTA3ZmMxZWVmMDdlMDkwOTJiMTNiZDllMmUzNzUzY2NhN2YwHhcNMjMwODA5
MjA0NzUwWhcNMjUwODEwMjA0NzUwWjAzMTEwLwYDVQQDEyg4MWMxMzI3MTMwZjkz
NzM4NTlkMDA5YTdiMmFiYjJmMmFkY2NiYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAii16wjFt8SDjU3dOu/oIB+ZmvA5VJcXRcAEAAkCPOkgFy6tK
tU8b7mhThYTmktdoQmjDrBBlzplDNsEv9Rni4YtpXN2Yv3qdbay4w8wo3hA7xZrk
MRo2x1r03IB1Dacl9hPPseq9Vp8U9ZPKj5d83HVpbJkiSr3kC+HRat+trVZBfaME
E262tzuKivNg9qorzhqpKAiifCC8H5Jx2t6Cv8BbBNgJvPz4+xaPBYCJSppptH+V
wuXKn4FT1BI+hDIlKVoEnwfvGBBpculjWoAqj4xoUJCWrsX8rqHE37WJKnjbKYAR
KxZ3e85+n1pJKd5ZPNf1qYBaaE8M0g8/KMkB5wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDM5FvXIKrfNXXYpfEVI55GcqTdXMB8GA1UdIwQYMBaAFIiRZG4KozTaUKRu
h8RC7VWlPG11MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzNzNl
MDdmYzFlZWYwN2UwOTA5MmIxM2JkOWUyZTM3NTNjY2E3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDJiMDkxNzEtMmU3Ny00NTc5LWI4YmMtZDE4ZjU2
ZTc2OGRmLzgxYzEzMjcxMzBmOTM3Mzg1OWQwMDlhN2IyYWJiMmYyYWRjY2JhOTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMmIwOTE3MS0yZTc3LTQ1NzktYjhiYy1kMThm
NTZlNzY4ZGYvYWIzNzNlMDdmYzFlZWYwN2UwOTA5MmIxM2JkOWUyZTM3NTNjY2E3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDPJAwDQYJKoZIhvcNAQELBQADggEBAGnLp/5C4Xrqm6mM
bUVRs9b03mLV4PFb63+z/tXvIWWS1BECzmojg1SHy8Oejg8TEp8IxAxlr+ClrzOT
4dXbYqWoAD2jvWoRuA4jN5LpFWSSFePT6nnQHjeUKO7UOG/xddoVybR6A9vJGPt7
vpH0We3SV8omXE6VZqR2HYZf0Jw2Swt4E1PNDhhp6pexvrxcgG2+Yn8BOTptrerF
rhLC67UM7AxuNAds8gkhYGeDLOkEFVmjgrrZAdXUKqMVeyJ0/NANzi7QHph38Sv7
jxxtGZQt4hwv4bNv63f2RBVk9V8Yq22ONftNvmrz6MxYRkP3Ewb3pFzNHxutml9r
YYxWbq8=
-----END CERTIFICATE-----