Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/6b55d1c73068d37b7220c1a99cc863b1d910b69e.roa
File:                     6b55d1c73068d37b7220c1a99cc863b1d910b69e.roa (raw, json)
Hash identifier:          ftbu518wDVll6bGMXLUZW7+h0O+g1drZJO7F/n2WgwU=
Subject key identifier:   02:F2:52:7D:9F:DD:1D:6E:95:01:F5:84:8C:1F:C8:02:01:82:03:5C
Certificate issuer:       /CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
Certificate serial:       246D8E
Authority key identifier: F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/6b55d1c73068d37b7220c1a99cc863b1d910b69e.roa
Signing time:             Mon 18 Sep 2023 13:12:52 +0000
ROA not before:           Sun 17 Sep 2023 13:12:51 +0000
ROA not after:            Thu 18 Sep 2025 13:12:51 +0000
asID:                     28009
IP address blocks:        2803:4440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387342 (0x246d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
        Validity
            Not Before: Sep 17 13:12:51 2023 GMT
            Not After : Sep 18 13:12:51 2025 GMT
        Subject: CN=6b55d1c73068d37b7220c1a99cc863b1d910b69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:6e:84:06:9f:df:bc:8e:b4:aa:b9:ac:3e:
                    85:e2:e1:23:ce:93:3d:3a:61:1f:07:ed:f8:a7:86:
                    e6:f6:54:29:ad:01:a4:d6:c1:17:bc:c4:32:35:a7:
                    5e:46:be:58:fd:b0:3e:66:d1:e8:f0:d5:60:8f:a7:
                    0f:4d:c8:71:70:ca:fc:14:42:8c:b3:15:fb:ae:d8:
                    32:12:1b:55:33:b8:4c:29:67:33:34:ca:07:88:7c:
                    39:d2:8b:d6:f2:98:8a:15:69:32:6f:3d:51:4b:83:
                    c1:b7:20:9e:fe:ba:9f:fd:ff:3d:6f:e6:cd:68:fb:
                    12:1e:b3:be:b0:16:53:47:47:28:c7:b7:f7:be:a8:
                    2e:7e:70:f9:1e:a2:17:da:23:6c:6a:be:4d:98:81:
                    57:00:e5:eb:c8:d3:bd:22:19:91:04:e3:1a:7b:ca:
                    a9:12:39:7f:0f:4b:49:aa:36:31:05:80:c3:84:7e:
                    dd:7e:7a:36:a9:97:cf:4c:b7:c1:4d:37:80:d2:24:
                    2a:e5:e4:b1:43:f5:0d:05:5e:0e:25:45:2e:95:fe:
                    10:b4:90:69:4b:5f:51:c8:36:e9:f6:69:ad:ec:00:
                    5d:3d:43:c8:4c:5f:c0:69:bc:16:33:4e:3d:88:c8:
                    d3:40:a7:22:fa:d6:ef:1c:29:40:94:35:8b:8b:10:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F2:52:7D:9F:DD:1D:6E:95:01:F5:84:8C:1F:C8:02:01:82:03:5C
            X509v3 Authority Key Identifier:
                keyid:F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/6b55d1c73068d37b7220c1a99cc863b1d910b69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/0d5340d79102b793331c752f0dbbe0ddca1e18f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4440::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:61:d8:65:02:f4:9d:aa:a7:cf:a6:02:ab:91:4c:3d:2a:
         6e:16:01:8a:9d:e7:73:55:0a:71:bd:67:9b:44:88:6b:d6:90:
         35:fb:0f:25:26:ae:b1:67:0e:05:c5:ac:89:f6:c1:ff:f6:ab:
         e6:2b:ad:5a:76:28:ed:52:74:4b:2f:c9:cc:03:ce:f7:da:21:
         0c:0a:c7:59:3f:93:6a:0b:f4:70:28:70:6f:99:80:40:2a:1a:
         46:78:da:6e:54:f0:ba:2e:01:1e:55:31:dd:f7:79:a8:26:0b:
         6d:82:2a:8a:42:9f:1c:2f:57:ba:12:4e:24:2a:fa:f6:10:5d:
         6f:5d:4d:72:77:63:56:27:2d:dd:73:d1:7d:d1:02:ba:e8:22:
         0c:51:74:2a:09:c8:51:00:fc:eb:42:ce:50:88:6d:bc:60:3b:
         4a:b4:46:c9:e4:3f:8d:80:86:a4:6e:ee:79:97:d6:9b:c7:8c:
         20:12:17:70:cd:3b:29:2c:bb:62:0f:32:36:cc:25:fa:be:a3:
         75:df:14:eb:97:60:df:37:4e:5b:38:35:4c:eb:d0:36:6f:8b:
         41:72:d1:d8:0d:a8:2b:f9:10:bf:89:3e:55:c8:48:d0:1e:36:
         47:42:fd:c5:f7:69:67:f5:3b:38:95:fa:b8:c9:56:8b:ec:7c:
         9b:5e:0b:6f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJG2OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBk
NTM0MGQ3OTEwMmI3OTMzMzFjNzUyZjBkYmJlMGRkY2ExZTE4ZjYwHhcNMjMwOTE3
MTMxMjUxWhcNMjUwOTE4MTMxMjUxWjAzMTEwLwYDVQQDEyg2YjU1ZDFjNzMwNjhk
MzdiNzIyMGMxYTk5Y2M4NjNiMWQ5MTBiNjllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3BBuhAaf37yOtKq5rD6F4uEjzpM9OmEfB+34p4bm9lQprQGk
1sEXvMQyNadeRr5Y/bA+ZtHo8NVgj6cPTchxcMr8FEKMsxX7rtgyEhtVM7hMKWcz
NMoHiHw50ovW8piKFWkybz1RS4PBtyCe/rqf/f89b+bNaPsSHrO+sBZTR0cox7f3
vqgufnD5HqIX2iNsar5NmIFXAOXryNO9IhmRBOMae8qpEjl/D0tJqjYxBYDDhH7d
fno2qZfPTLfBTTeA0iQq5eSxQ/UNBV4OJUUulf4QtJBpS19RyDbp9mmt7ABdPUPI
TF/AabwWM049iMjTQKci+tbvHClAlDWLixBLJQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFALyUn2f3R1ulQH1hIwfyAIBggNcMB8GA1UdIwQYMBaAFPaG7xKCLfyUgoa0
XCIxMlXBdeJgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGQ1MzQw
ZDc5MTAyYjc5MzMzMWM3NTJmMGRiYmUwZGRjYTFlMThmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNkNTE3Y2MtMWY1Yy00Y2ZkLTliOTItYjdlOTBj
ZjY5NzRlLzZiNTVkMWM3MzA2OGQzN2I3MjIwYzFhOTljYzg2M2IxZDkxMGI2OWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2Q1MTdjYy0xZjVjLTRjZmQtOWI5Mi1iN2U5
MGNmNjk3NGUvMGQ1MzQwZDc5MTAyYjc5MzMzMWM3NTJmMGRiYmUwZGRjYTFlMThm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDREAwDQYJKoZIhvcNAQELBQADggEBABPEYdhlAvSdqqfP
pgKrkUw9Km4WAYqd53NVCnG9Z5tEiGvWkDX7DyUmrrFnDgXFrIn2wf/2q+YrrVp2
KO1SdEsvycwDzvfaIQwKx1k/k2oL9HAocG+ZgEAqGkZ42m5U8LouAR5VMd33eagm
C22CKopCnxwvV7oSTiQq+vYQXW9dTXJ3Y1YnLd1z0X3RArroIgxRdCoJyFEA/OtC
zlCIbbxgO0q0RsnkP42AhqRu7nmX1pvHjCASF3DNOyksu2IPMjbMJfq+o3XfFOuX
YN83Tls4NUzr0DZvi0Fy0dgNqCv5EL+JPlXISNAeNkdC/cX3aWf1OziV+rjJVovs
fJteC28=
-----END CERTIFICATE-----