Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/099add37-a8ed-43e2-940d-5a8fc2f2e095/1385319f4be3e414e45c4ce55cda66916e8afea4.roa
File:                     1385319f4be3e414e45c4ce55cda66916e8afea4.roa (raw, json)
Hash identifier:          mJIHqXFVHvkk1/MsktDzOi+s3HTlL4tfLxcRIY6/Ur0=
Subject key identifier:   D4:11:E9:83:8F:37:E9:5A:08:B5:4C:FA:FF:7E:20:DF:58:10:D3:48
Certificate issuer:       /CN=a7244098c53585cccfc80ee076adee74c828f867
Certificate serial:       09E9
Authority key identifier: 49:89:E7:54:62:A9:A1:36:26:6C:8F:B0:64:58:8B:5B:D0:74:1C:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7244098c53585cccfc80ee076adee74c828f867.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/099add37-a8ed-43e2-940d-5a8fc2f2e095/1385319f4be3e414e45c4ce55cda66916e8afea4.roa
Signing time:             Thu 15 Jun 2023 13:48:22 +0000
ROA not before:           Wed 14 Jun 2023 13:48:22 +0000
ROA not after:            Sun 15 Jun 2025 13:48:22 +0000
asID:                     273010
IP address blocks:        2803:fd90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244098c53585cccfc80ee076adee74c828f867
        Validity
            Not Before: Jun 14 13:48:22 2023 GMT
            Not After : Jun 15 13:48:22 2025 GMT
        Subject: CN=1385319f4be3e414e45c4ce55cda66916e8afea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:e2:e9:ae:10:ec:8f:d2:96:f3:cc:b9:df:
                    7c:76:f2:ba:43:35:24:d2:09:27:97:26:a0:8f:ad:
                    40:ef:ed:d2:68:e2:86:f3:2c:16:c0:e3:3b:6f:42:
                    f0:63:e8:65:31:68:5d:e8:ac:1c:8d:ca:ad:6b:f9:
                    bc:42:52:f3:49:c0:9c:46:2a:4c:b6:53:68:fe:ee:
                    38:30:66:17:74:8b:28:e3:6f:24:7d:73:03:2c:c3:
                    ae:0e:f3:e2:fa:90:33:87:5b:93:d0:dc:f7:35:80:
                    df:00:d4:a0:4b:03:ba:d1:ce:e9:83:e2:bb:13:21:
                    82:13:ae:63:17:e3:98:56:b2:aa:df:c4:3a:65:e7:
                    ef:38:60:3e:dc:3c:1e:6d:0c:7d:01:c1:ac:8c:0b:
                    8c:f5:d0:5c:63:c2:3d:8a:c7:46:26:29:20:7c:9a:
                    a3:2c:c8:20:2c:64:04:aa:2a:26:ab:92:d3:74:94:
                    48:99:6a:29:33:ac:b7:93:e5:99:78:40:a0:3b:1f:
                    de:c4:c6:9d:43:e0:bd:64:9c:9e:d8:1b:36:48:d7:
                    4f:dd:87:ba:fe:a3:27:38:bf:a1:25:7f:77:e3:1d:
                    6b:cf:02:48:98:a2:e8:b8:9a:a1:c6:41:6a:eb:8a:
                    62:56:ec:5a:6c:65:21:71:2e:7d:b6:a3:19:18:e2:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:11:E9:83:8F:37:E9:5A:08:B5:4C:FA:FF:7E:20:DF:58:10:D3:48
            X509v3 Authority Key Identifier:
                keyid:49:89:E7:54:62:A9:A1:36:26:6C:8F:B0:64:58:8B:5B:D0:74:1C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7244098c53585cccfc80ee076adee74c828f867.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/099add37-a8ed-43e2-940d-5a8fc2f2e095/1385319f4be3e414e45c4ce55cda66916e8afea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/099add37-a8ed-43e2-940d-5a8fc2f2e095/a7244098c53585cccfc80ee076adee74c828f867.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd90::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:cc:07:c7:56:2d:26:ed:19:c9:b5:29:5a:4f:5c:c5:a5:43:
         47:10:15:73:55:a0:6b:37:f6:c2:68:7a:4c:1b:d4:19:66:67:
         19:af:11:fd:0e:b3:10:6a:e4:15:d5:f5:e3:88:f5:57:a9:4a:
         45:33:71:38:71:5c:20:bf:21:3e:01:84:3a:ee:c4:b3:25:ac:
         3d:03:21:df:bf:b1:03:9e:53:09:7d:ac:2c:35:6b:6a:ae:d3:
         65:5f:bf:8b:22:58:aa:98:e2:53:29:4b:11:3f:fd:b6:d2:f5:
         84:83:74:a7:a1:84:87:73:d5:ff:89:2f:51:74:5a:b8:72:3e:
         d0:19:c5:c7:f9:31:74:68:63:0b:1c:dc:a8:9a:6d:0b:3f:d3:
         80:e5:d4:72:43:02:ed:de:b6:ad:05:de:1d:55:c6:e4:4a:19:
         c5:06:88:3d:e2:e7:72:cc:31:af:6f:81:5b:e0:99:cd:08:00:
         e7:c8:b1:25:4f:f9:ef:f3:54:2e:e8:6a:2c:b6:a6:bd:f3:ad:
         e9:da:29:e0:9b:f3:01:09:8d:65:9e:0b:3a:2e:76:f3:ba:cf:
         7c:58:4f:4e:79:c3:18:4a:66:5d:a9:14:3e:c6:a8:11:e1:0d:
         44:1e:e5:68:0a:f1:db:bc:0d:72:1c:ba:99:ff:63:f0:d0:b6:
         dc:98:73:83
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICCekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTcy
NDQwOThjNTM1ODVjY2NmYzgwZWUwNzZhZGVlNzRjODI4Zjg2NzAeFw0yMzA2MTQx
MzQ4MjJaFw0yNTA2MTUxMzQ4MjJaMDMxMTAvBgNVBAMTKDEzODUzMTlmNGJlM2U0
MTRlNDVjNGNlNTVjZGE2NjkxNmU4YWZlYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCRe+LprhDsj9KW88y533x28rpDNSTSCSeXJqCPrUDv7dJo4obz
LBbA4ztvQvBj6GUxaF3orByNyq1r+bxCUvNJwJxGKky2U2j+7jgwZhd0iyjjbyR9
cwMsw64O8+L6kDOHW5PQ3Pc1gN8A1KBLA7rRzumD4rsTIYITrmMX45hWsqrfxDpl
5+84YD7cPB5tDH0BwayMC4z10Fxjwj2Kx0YmKSB8mqMsyCAsZASqKiarktN0lEiZ
aikzrLeT5Zl4QKA7H97Exp1D4L1knJ7YGzZI10/dh7r+oyc4v6Elf3fjHWvPAkiY
oui4mqHGQWrrimJW7FpsZSFxLn22oxkY4m2rAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQU1BHpg4836VoItUz6/34g31gQ00gwHwYDVR0jBBgwFoAUSYnnVGKpoTYmbI+w
ZFiLW9B0HPswDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hNzI0NDA5
OGM1MzU4NWNjY2ZjODBlZTA3NmFkZWU3NGM4MjhmODY3LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wOTlhZGQzNy1hOGVkLTQzZTItOTQwZC01YThmYzJm
MmUwOTUvMTM4NTMxOWY0YmUzZTQxNGU0NWM0Y2U1NWNkYTY2OTE2ZThhZmVhNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzA5OWFkZDM3LWE4ZWQtNDNlMi05NDBkLTVhOGZj
MmYyZTA5NS9hNzI0NDA5OGM1MzU4NWNjY2ZjODBlZTA3NmFkZWU3NGM4MjhmODY3
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAP9kDANBgkqhkiG9w0BAQsFAAOCAQEARMwHx1YtJu0ZybUp
Wk9cxaVDRxAVc1Wgazf2wmh6TBvUGWZnGa8R/Q6zEGrkFdX144j1V6lKRTNxOHFc
IL8hPgGEOu7EsyWsPQMh37+xA55TCX2sLDVraq7TZV+/iyJYqpjiUylLET/9ttL1
hIN0p6GEh3PV/4kvUXRauHI+0BnFx/kxdGhjCxzcqJptCz/TgOXUckMC7d62rQXe
HVXG5EoZxQaIPeLncswxr2+BW+CZzQgA58ixJU/57/NULuhqLLamvfOt6dop4Jvz
AQmNZZ4LOi5287rPfFhPTnnDGEpmXakUPsaoEeENRB7laArx27wNchy6mf9j8NC2
3Jhzgw==
-----END CERTIFICATE-----