Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/664f7c2514761412a2954790b9ad3a1d9c4a51d4.roa
File:                     664f7c2514761412a2954790b9ad3a1d9c4a51d4.roa (raw, json)
Hash identifier:          o05JtsfWR0GuZDBomtwf/IJl8eR/0vBcTmgWsskByCw=
Subject key identifier:   E6:98:D9:BE:8F:BC:ED:0E:1A:86:7A:3E:7E:5A:53:CA:B9:5C:5A:0E
Certificate issuer:       /CN=9b724393a6646f8fb8db0763aeec256af2c3d779
Certificate serial:       04B4
Authority key identifier: 3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b724393a6646f8fb8db0763aeec256af2c3d779.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/664f7c2514761412a2954790b9ad3a1d9c4a51d4.roa
Signing time:             Tue 21 Feb 2023 19:03:11 +0000
ROA not before:           Mon 20 Feb 2023 19:01:17 +0000
ROA not after:            Fri 21 Feb 2025 19:01:17 +0000
asID:                     272867
IP address blocks:        2803:3290::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b724393a6646f8fb8db0763aeec256af2c3d779
        Validity
            Not Before: Feb 20 19:01:17 2023 GMT
            Not After : Feb 21 19:01:17 2025 GMT
        Subject: CN=664f7c2514761412a2954790b9ad3a1d9c4a51d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:88:f8:a7:d0:03:68:e8:3f:c9:14:28:ea:
                    03:15:0e:59:eb:78:1c:49:7a:09:3f:cf:50:7d:27:
                    22:7c:08:b0:e1:54:ff:e1:97:b7:7f:c3:60:91:40:
                    dd:71:5c:68:3b:92:e4:ba:9d:35:71:6a:b1:7e:71:
                    9d:c0:4d:8d:f7:c1:e5:b0:79:29:b5:59:5f:cc:b0:
                    4b:13:6c:aa:a0:0a:84:18:0c:b5:6d:b4:58:5c:91:
                    e1:d1:09:8c:40:db:ea:92:ab:07:a6:d1:72:b3:b8:
                    b2:ef:96:d0:41:93:51:95:88:18:03:22:17:94:54:
                    c3:46:78:0c:d8:6e:e1:30:f2:d7:74:b5:ad:c3:d8:
                    cc:9f:4c:eb:8a:cb:92:61:e6:ca:c4:74:77:2b:1f:
                    b8:7b:1f:b8:ae:f1:d0:b9:4e:bb:fb:74:21:8a:3f:
                    9b:5b:63:92:fc:13:ba:c1:9a:94:6f:7b:72:06:d5:
                    11:85:f3:1e:07:95:8c:ca:56:92:56:c5:8c:de:3e:
                    f7:aa:c6:b5:64:c4:e5:f1:f2:95:fa:06:08:62:a4:
                    56:46:81:36:43:67:3a:ec:cc:fa:01:0b:52:30:c5:
                    71:f5:70:d3:75:f1:9e:c2:99:11:e9:6c:f3:ea:8e:
                    a5:6d:64:95:c9:e0:6f:ab:5d:ac:52:ac:57:7e:c3:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:98:D9:BE:8F:BC:ED:0E:1A:86:7A:3E:7E:5A:53:CA:B9:5C:5A:0E
            X509v3 Authority Key Identifier:
                keyid:3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b724393a6646f8fb8db0763aeec256af2c3d779.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/664f7c2514761412a2954790b9ad3a1d9c4a51d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/9b724393a6646f8fb8db0763aeec256af2c3d779.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:6c:05:a0:9d:c8:00:7d:9d:cf:06:b2:2a:1e:32:6f:3c:
         11:c3:0e:f4:a0:68:3f:b4:86:d7:dc:3f:19:4a:9b:64:38:53:
         ed:00:da:79:40:a6:ad:31:80:31:ed:35:b6:35:6b:eb:fe:37:
         0c:4a:c1:4d:bc:70:aa:fa:01:8f:f7:49:44:b0:f0:2e:6c:4b:
         00:f3:42:7e:3f:a5:11:e0:90:60:b0:ff:27:ea:e4:e9:85:c5:
         e7:3d:68:f1:72:a3:78:fc:70:f6:fb:99:42:64:e7:07:cf:b7:
         5e:07:7c:b1:49:04:ff:f5:b2:7b:57:17:ac:4c:8c:6d:21:89:
         af:21:43:6a:c7:e4:9c:07:4a:91:01:73:9c:0d:b4:68:1c:cf:
         06:ff:bb:9d:4c:4d:4a:fe:9f:95:7a:a4:53:99:46:69:82:fd:
         c9:d0:f3:78:a9:fd:83:cf:49:23:06:09:47:f0:20:c9:58:05:
         53:41:a6:76:91:46:03:de:2c:1a:de:18:5e:f8:d0:67:49:a9:
         09:37:34:33:4f:48:5c:c3:e6:9b:cf:4f:97:d0:ad:e4:39:35:
         6b:01:7b:a1:b7:3c:ef:e8:a5:40:40:d5:31:8a:54:66:a6:ad:
         2f:f9:55:f5:b0:06:2c:f4:f4:f0:69:86:a4:e0:1d:50:29:f1:
         34:8a:6e:f0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOWI3
MjQzOTNhNjY0NmY4ZmI4ZGIwNzYzYWVlYzI1NmFmMmMzZDc3OTAeFw0yMzAyMjAx
OTAxMTdaFw0yNTAyMjExOTAxMTdaMDMxMTAvBgNVBAMTKDY2NGY3YzI1MTQ3NjE0
MTJhMjk1NDc5MGI5YWQzYTFkOWM0YTUxZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbVIj4p9ADaOg/yRQo6gMVDlnreBxJegk/z1B9JyJ8CLDhVP/h
l7d/w2CRQN1xXGg7kuS6nTVxarF+cZ3ATY33weWweSm1WV/MsEsTbKqgCoQYDLVt
tFhckeHRCYxA2+qSqwem0XKzuLLvltBBk1GViBgDIheUVMNGeAzYbuEw8td0ta3D
2MyfTOuKy5Jh5srEdHcrH7h7H7iu8dC5Trv7dCGKP5tbY5L8E7rBmpRve3IG1RGF
8x4HlYzKVpJWxYzePveqxrVkxOXx8pX6BghipFZGgTZDZzrszPoBC1IwxXH1cNN1
8Z7CmRHpbPPqjqVtZJXJ4G+rXaxSrFd+w9nrAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQU5pjZvo+87Q4ahno+flpTyrlcWg4wHwYDVR0jBBgwFoAUPtXo9rfJC8IcDrFp
R77Td2ZNaHkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85YjcyNDM5
M2E2NjQ2ZjhmYjhkYjA3NjNhZWVjMjU2YWYyYzNkNzc5LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wYWNjM2M0Mi1mNTgyLTQ5YjktYWIyZC03ZTgwNDY5
ZGQ2MjYvNjY0ZjdjMjUxNDc2MTQxMmEyOTU0NzkwYjlhZDNhMWQ5YzRhNTFkNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBhY2MzYzQyLWY1ODItNDliOS1hYjJkLTdlODA0
NjlkZDYyNi85YjcyNDM5M2E2NjQ2ZjhmYjhkYjA3NjNhZWVjMjU2YWYyYzNkNzc5
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAMykDANBgkqhkiG9w0BAQsFAAOCAQEAh8dsBaCdyAB9nc8G
sioeMm88EcMO9KBoP7SG19w/GUqbZDhT7QDaeUCmrTGAMe01tjVr6/43DErBTbxw
qvoBj/dJRLDwLmxLAPNCfj+lEeCQYLD/J+rk6YXF5z1o8XKjePxw9vuZQmTnB8+3
Xgd8sUkE//Wye1cXrEyMbSGJryFDasfknAdKkQFznA20aBzPBv+7nUxNSv6flXqk
U5lGaYL9ydDzeKn9g89JIwYJR/AgyVgFU0GmdpFGA94sGt4YXvjQZ0mpCTc0M09I
XMPmm89Pl9Ct5Dk1awF7obc87+ilQEDVMYpUZqatL/lV9bAGLPT08GmGpOAdUCnx
NIpu8A==
-----END CERTIFICATE-----