Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/40e77fd9693fd44c9e617ea1c903960098863a3e.roa
File:                     40e77fd9693fd44c9e617ea1c903960098863a3e.roa (raw, json)
Hash identifier:          +OVjiIH17MHw6NvonpyB2VxHybbXd0WoLFbvhRm7Pwc=
Subject key identifier:   CD:39:3E:FC:BC:9F:6B:63:7A:ED:D3:B9:90:56:90:21:32:35:8D:D6
Certificate issuer:       /CN=471b06a93ff238801ce6c8b4186977ced49f09f0
Certificate serial:       0B9B
Authority key identifier: 7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/40e77fd9693fd44c9e617ea1c903960098863a3e.roa
Signing time:             Tue 05 Sep 2023 03:52:06 +0000
ROA not before:           Mon 04 Sep 2023 03:52:06 +0000
ROA not after:            Fri 05 Sep 2025 03:52:06 +0000
asID:                     273072
IP address blocks:        2803:cf90:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971 (0xb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Validity
            Not Before: Sep  4 03:52:06 2023 GMT
            Not After : Sep  5 03:52:06 2025 GMT
        Subject: CN=40e77fd9693fd44c9e617ea1c903960098863a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:31:73:5c:18:17:29:b8:b8:fb:3a:d3:c5:
                    d8:b9:d8:d6:76:a3:8a:da:fa:17:70:37:7a:dd:1b:
                    4b:b1:e7:ba:85:e6:75:39:e1:18:17:9a:de:bc:5e:
                    52:d1:66:de:8a:1b:6f:43:c8:e7:31:2d:b5:11:da:
                    f7:1e:9d:a3:85:44:06:2e:16:b0:ac:1e:57:3f:fd:
                    23:19:49:a6:22:0a:be:b2:99:ac:35:e6:ab:2a:d4:
                    7a:2d:47:a2:2a:0f:13:b7:bf:90:af:72:9f:0a:e2:
                    0b:26:6b:66:3a:99:93:82:3c:0d:dc:72:4a:39:35:
                    98:af:95:4e:cd:21:bf:b0:e4:42:36:fb:f7:e9:89:
                    17:7a:75:0c:0c:9d:8b:c0:c3:84:ae:77:8c:b3:10:
                    4f:a3:b6:a2:c9:5a:bd:34:39:ca:1b:3e:85:40:73:
                    ce:0f:b0:eb:9f:81:a8:ef:b1:ad:1b:1c:df:69:9d:
                    c1:43:0d:40:6c:8c:b6:ba:05:2c:a8:b0:9e:73:87:
                    6b:a7:9d:d0:36:39:8e:93:7b:84:29:d7:ed:b7:28:
                    cf:19:ae:ac:7a:88:89:5f:71:dd:ab:69:b4:1f:8a:
                    be:f9:55:9d:98:e0:ee:6f:1f:39:8f:32:15:e5:b0:
                    86:bd:ba:ff:41:90:4c:10:f2:1d:d7:fa:44:b5:4f:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:3E:FC:BC:9F:6B:63:7A:ED:D3:B9:90:56:90:21:32:35:8D:D6
            X509v3 Authority Key Identifier:
                keyid:7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/40e77fd9693fd44c9e617ea1c903960098863a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:e5:aa:4a:a1:86:e8:cf:0d:54:b0:60:f1:de:0c:d2:95:
         c9:35:b4:45:09:a3:1e:6c:15:ed:b8:b9:30:0b:a1:94:3d:fe:
         f6:f0:9b:35:b3:a4:c6:5e:32:b0:2c:0e:92:dc:b0:c9:19:cb:
         ba:f3:10:43:b7:a0:1f:c8:e4:ed:2f:39:ff:db:9e:06:aa:91:
         11:58:1c:05:bb:6e:ce:d7:2a:66:93:0e:4e:1d:ad:0a:86:b9:
         5b:7c:b4:97:7f:dc:cd:50:33:23:64:67:c0:f3:23:a8:7a:9b:
         29:3f:a0:97:a9:b4:56:77:02:ae:05:02:c0:dc:2c:06:ab:c7:
         c5:b7:4f:de:c2:dc:0d:45:a0:7a:d8:e5:d7:04:dc:52:7f:58:
         39:d9:f9:8a:59:f7:09:7d:88:07:7f:9c:62:4b:74:78:af:09:
         d1:62:22:0f:87:f6:3d:b6:19:cc:8a:eb:b9:9a:78:4f:20:b6:
         51:7f:fd:93:18:c1:63:a9:e9:b4:2f:c2:69:08:f3:48:b4:09:
         52:2c:4c:1d:a3:4c:e6:a3:a8:78:12:1a:aa:37:11:4f:3b:48:
         af:49:c1:f4:77:b7:57:1d:a0:38:85:b5:20:07:21:84:4a:3b:
         78:76:3f:17:2e:1e:46:8d:2c:ba:ec:55:de:45:d7:24:13:8b:
         78:03:f4:98
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgICC5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDcx
YjA2YTkzZmYyMzg4MDFjZTZjOGI0MTg2OTc3Y2VkNDlmMDlmMDAeFw0yMzA5MDQw
MzUyMDZaFw0yNTA5MDUwMzUyMDZaMDMxMTAvBgNVBAMTKDQwZTc3ZmQ5NjkzZmQ0
NGM5ZTYxN2VhMWM5MDM5NjAwOTg4NjNhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdoTFzXBgXKbi4+zrTxdi52NZ2o4ra+hdwN3rdG0ux57qF5nU5
4RgXmt68XlLRZt6KG29DyOcxLbUR2vcenaOFRAYuFrCsHlc//SMZSaYiCr6ymaw1
5qsq1HotR6IqDxO3v5Cvcp8K4gsma2Y6mZOCPA3ccko5NZivlU7NIb+w5EI2+/fp
iRd6dQwMnYvAw4Sud4yzEE+jtqLJWr00OcobPoVAc84PsOufgajvsa0bHN9pncFD
DUBsjLa6BSyosJ5zh2unndA2OY6Te4Qp1+23KM8Zrqx6iIlfcd2rabQfir75VZ2Y
4O5vHzmPMhXlsIa9uv9BkEwQ8h3X+kS1T4jZAgMBAAGjggJdMIICWTAdBgNVHQ4E
FgQUzTk+/Lyfa2N67dO5kFaQITI1jdYwHwYDVR0jBBgwFoAUfiOZC8BIOjpOjvGS
BA9+CMEnaGQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80NzFiMDZh
OTNmZjIzODgwMWNlNmM4YjQxODY5NzdjZWQ0OWYwOWYwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wNzYzYmRmYi1hYzE5LTQwZWYtOGZiNC0wZTRmNDQ1
NmEwOWUvNDBlNzdmZDk2OTNmZDQ0YzllNjE3ZWExYzkwMzk2MDA5ODg2M2EzZS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzA3NjNiZGZiLWFjMTktNDBlZi04ZmI0LTBlNGY0
NDU2YTA5ZS80NzFiMDZhOTNmZjIzODgwMWNlNmM4YjQxODY5NzdjZWQ0OWYwOWYw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAOBAIAAjAIAwYAKAPPkAMwDQYJKoZIhvcNAQELBQADggEBAGXd5apKoYbozw1U
sGDx3gzSlck1tEUJox5sFe24uTALoZQ9/vbwmzWzpMZeMrAsDpLcsMkZy7rzEEO3
oB/I5O0vOf/bngaqkRFYHAW7bs7XKmaTDk4drQqGuVt8tJd/3M1QMyNkZ8DzI6h6
myk/oJeptFZ3Aq4FAsDcLAarx8W3T97C3A1FoHrY5dcE3FJ/WDnZ+YpZ9wl9iAd/
nGJLdHivCdFiIg+H9j22GcyK67maeE8gtlF//ZMYwWOp6bQvwmkI80i0CVIsTB2j
TOajqHgSGqo3EU87SK9JwfR3t1cdoDiFtSAHIYRKO3h2PxcuHkaNLLrsVd5F1yQT
i3gD9Jg=
-----END CERTIFICATE-----