Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/8785b56983c329ad31ff91f9b43d116f9cd88a7f.roa
File:                     8785b56983c329ad31ff91f9b43d116f9cd88a7f.roa (raw, json)
Hash identifier:          brmWcE9qG6QH1huUfIpvY7yERbbGpwVISOg/YbmF8do=
Subject key identifier:   E2:63:6B:39:70:2E:4F:92:D4:46:95:0D:B0:5C:A3:F4:24:D0:A2:46
Certificate issuer:       /CN=9b724393a6646f8fb8db0763aeec256af2c3d779
Certificate serial:       0177C9
Authority key identifier: 3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b724393a6646f8fb8db0763aeec256af2c3d779.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/8785b56983c329ad31ff91f9b43d116f9cd88a7f.roa
Signing time:             Fri 28 Apr 2023 12:06:45 +0000
ROA not before:           Thu 27 Apr 2023 12:06:44 +0000
ROA not after:            Mon 28 Apr 2025 12:06:44 +0000
asID:                     272867
IP address blocks:        2803:3290::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96201 (0x177c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b724393a6646f8fb8db0763aeec256af2c3d779
        Validity
            Not Before: Apr 27 12:06:44 2023 GMT
            Not After : Apr 28 12:06:44 2025 GMT
        Subject: CN=8785b56983c329ad31ff91f9b43d116f9cd88a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:81:8b:0b:f5:26:1e:5d:6c:46:b9:e5:87:
                    93:4c:dc:b3:3c:28:84:c2:3b:27:91:c8:49:3e:98:
                    20:e2:1e:13:33:b3:ea:2a:fc:f5:70:f9:f3:2d:6e:
                    60:bc:8d:73:95:cb:2d:25:45:68:0e:1e:51:8e:0e:
                    45:6b:78:a6:11:36:b3:40:fa:52:c4:5e:97:9c:05:
                    05:2a:1d:42:ae:04:02:f9:5c:19:b7:42:d2:47:f8:
                    38:e4:fa:87:bc:7d:ad:4a:f4:81:42:f1:89:43:b1:
                    52:ff:87:cb:95:be:c7:20:ee:86:30:eb:4f:80:ae:
                    12:1f:c6:fe:0b:bb:d6:f6:8a:ab:98:19:83:82:ff:
                    15:71:53:d8:6b:13:5e:2a:e5:42:05:9d:df:d3:0b:
                    ab:22:72:43:cf:a2:fa:0a:4e:c3:8d:f8:08:d3:10:
                    52:a5:f4:54:4f:30:5d:70:39:cf:52:c8:e9:28:2e:
                    a3:57:22:78:77:1a:d2:71:0a:48:72:9b:4e:04:89:
                    8a:18:2c:7f:61:07:83:50:c6:84:8b:f6:29:4c:c8:
                    bd:19:9f:a6:8c:37:f8:7c:26:02:da:10:63:63:a3:
                    e9:78:bb:88:9a:ca:e1:43:48:e2:17:eb:b7:9c:74:
                    aa:5a:7a:02:62:f8:65:78:c4:85:1f:ec:6d:7d:5d:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:63:6B:39:70:2E:4F:92:D4:46:95:0D:B0:5C:A3:F4:24:D0:A2:46
            X509v3 Authority Key Identifier:
                keyid:3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b724393a6646f8fb8db0763aeec256af2c3d779.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/8785b56983c329ad31ff91f9b43d116f9cd88a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/9b724393a6646f8fb8db0763aeec256af2c3d779.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3290::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:cb:ee:d1:30:25:b4:75:2a:62:5d:f8:e4:6f:36:cd:6b:7e:
         cb:ba:d1:0d:a9:bc:e3:51:50:32:97:22:8c:13:f8:f1:bd:05:
         39:30:25:dd:19:a8:df:5e:82:55:34:2d:37:4e:69:c6:cd:46:
         85:71:93:54:40:d4:e8:97:32:e4:4c:90:eb:ef:b8:3b:ca:7c:
         50:33:a6:e6:61:dd:f4:8b:c8:9e:4e:69:00:14:bf:d5:94:84:
         bc:24:98:76:ca:35:9d:55:bb:fe:eb:67:85:bd:c1:3f:85:bf:
         ce:8a:9d:35:69:73:30:8c:a8:1d:8a:48:a0:09:09:2a:62:45:
         be:7d:d8:ff:25:dd:2b:56:6d:54:7f:81:3e:d5:08:10:47:ee:
         9d:86:49:60:16:cf:88:9e:33:cd:a1:b9:4c:04:3e:5f:31:44:
         e5:95:cd:da:84:54:5f:c9:8f:76:2a:da:9b:aa:7a:18:65:41:
         30:98:2b:0e:d4:ce:9d:5d:fb:b4:bd:d9:9d:e4:91:82:f3:2c:
         84:e0:1b:02:ab:45:d5:c1:7b:24:86:4f:3f:68:36:7e:8d:4c:
         32:fb:db:6e:25:9f:4f:45:c4:f7:6c:9f:06:74:98:37:16:05:
         3d:fa:60:22:59:b8:3b:7f:82:80:5d:30:2f:9c:05:11:69:07:
         02:b9:58:e9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAXfJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
NzI0MzkzYTY2NDZmOGZiOGRiMDc2M2FlZWMyNTZhZjJjM2Q3NzkwHhcNMjMwNDI3
MTIwNjQ0WhcNMjUwNDI4MTIwNjQ0WjAzMTEwLwYDVQQDEyg4Nzg1YjU2OTgzYzMy
OWFkMzFmZjkxZjliNDNkMTE2ZjljZDg4YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoPGBiwv1Jh5dbEa55YeTTNyzPCiEwjsnkchJPpgg4h4TM7Pq
Kvz1cPnzLW5gvI1zlcstJUVoDh5Rjg5Fa3imETazQPpSxF6XnAUFKh1CrgQC+VwZ
t0LSR/g45PqHvH2tSvSBQvGJQ7FS/4fLlb7HIO6GMOtPgK4SH8b+C7vW9oqrmBmD
gv8VcVPYaxNeKuVCBZ3f0wurInJDz6L6Ck7DjfgI0xBSpfRUTzBdcDnPUsjpKC6j
VyJ4dxrScQpIcptOBImKGCx/YQeDUMaEi/YpTMi9GZ+mjDf4fCYC2hBjY6PpeLuI
msrhQ0jiF+u3nHSqWnoCYvhleMSFH+xtfV1hfQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFOJjazlwLk+S1EaVDbBco/Qk0KJGMB8GA1UdIwQYMBaAFD7V6Pa3yQvCHA6x
aUe+03dmTWh5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWI3MjQz
OTNhNjY0NmY4ZmI4ZGIwNzYzYWVlYzI1NmFmMmMzZDc3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGFjYzNjNDItZjU4Mi00OWI5LWFiMmQtN2U4MDQ2
OWRkNjI2Lzg3ODViNTY5ODNjMzI5YWQzMWZmOTFmOWI0M2QxMTZmOWNkODhhN2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYWNjM2M0Mi1mNTgyLTQ5YjktYWIyZC03ZTgw
NDY5ZGQ2MjYvOWI3MjQzOTNhNjY0NmY4ZmI4ZGIwNzYzYWVlYzI1NmFmMmMzZDc3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDMpAwDQYJKoZIhvcNAQELBQADggEBAHbL7tEwJbR1KmJd
+ORvNs1rfsu60Q2pvONRUDKXIowT+PG9BTkwJd0ZqN9eglU0LTdOacbNRoVxk1RA
1OiXMuRMkOvvuDvKfFAzpuZh3fSLyJ5OaQAUv9WUhLwkmHbKNZ1Vu/7rZ4W9wT+F
v86KnTVpczCMqB2KSKAJCSpiRb592P8l3StWbVR/gT7VCBBH7p2GSWAWz4ieM82h
uUwEPl8xROWVzdqEVF/Jj3Yq2puqehhlQTCYKw7Uzp1d+7S92Z3kkYLzLITgGwKr
RdXBeySGTz9oNn6NTDL7224ln09FxPdsnwZ0mDcWBT36YCJZuDt/goBdMC+cBRFp
BwK5WOk=
-----END CERTIFICATE-----