Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e7ee3309746666913a4f15a4cd7baedcb0de2da7.roa
File:                     e7ee3309746666913a4f15a4cd7baedcb0de2da7.roa (raw, json)
Hash identifier:          SLSojO+0HV7lcfJMkSWBY9Uuy5NA9ejBdKlZUDfR4Zs=
Subject key identifier:   BC:6C:F7:C2:85:32:11:62:0F:E0:B1:F2:82:6E:A7:30:A5:CC:FE:9D
Certificate issuer:       /CN=905377f2c89ca66131e9c301a5406e6e9fbb8bda
Certificate serial:       01C662
Authority key identifier: 25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e7ee3309746666913a4f15a4cd7baedcb0de2da7.roa
Signing time:             Fri 07 Jul 2023 17:49:21 +0000
ROA not before:           Thu 06 Jul 2023 17:49:21 +0000
ROA not after:            Mon 07 Jul 2025 17:49:21 +0000
asID:                     270174
IP address blocks:        2806:3ee::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116322 (0x1c662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905377f2c89ca66131e9c301a5406e6e9fbb8bda
        Validity
            Not Before: Jul  6 17:49:21 2023 GMT
            Not After : Jul  7 17:49:21 2025 GMT
        Subject: CN=e7ee3309746666913a4f15a4cd7baedcb0de2da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:2e:14:18:94:e9:65:6a:03:2c:c5:5b:fe:
                    f1:8b:d1:28:90:82:7f:fa:99:0e:e1:9b:90:fe:11:
                    20:df:48:b1:03:4d:0e:77:64:e7:ee:ab:ee:d3:b2:
                    d6:3e:e1:a3:b6:51:ff:7f:d1:d9:bc:50:d6:ac:cb:
                    42:2a:03:23:ba:20:18:5e:2d:59:a9:56:dc:d2:4e:
                    04:f6:15:dd:7c:9d:e3:f9:6a:09:a8:b7:16:05:75:
                    a8:82:49:da:48:84:5e:71:a1:85:2f:5d:1b:a1:d1:
                    ac:b8:27:a1:70:ad:78:76:30:4d:50:db:22:74:34:
                    0f:86:ef:dd:71:e6:fb:db:db:9a:ab:16:67:a1:8f:
                    f0:cf:2a:36:3d:f8:4b:a1:7a:8e:bc:a9:cb:c9:9c:
                    fa:0e:a6:d0:97:6b:3b:df:8f:11:f4:97:f4:46:fa:
                    59:70:2c:44:dd:18:ff:59:93:63:a4:cf:27:83:7f:
                    1b:c4:61:fc:b7:58:8a:a9:17:f0:f3:2f:dc:f1:fb:
                    fa:05:b9:fe:89:30:12:d7:17:09:fb:51:d8:3c:d2:
                    3d:a1:5a:45:31:41:3f:a5:ad:6c:4b:96:c0:b7:04:
                    86:80:da:a2:de:d1:33:6a:d2:d0:46:dd:e5:81:87:
                    86:17:4d:27:6d:8b:d8:8a:11:89:39:5e:2d:f3:99:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:F7:C2:85:32:11:62:0F:E0:B1:F2:82:6E:A7:30:A5:CC:FE:9D
            X509v3 Authority Key Identifier:
                keyid:25:87:C8:0F:16:E1:FE:BE:35:77:35:95:7B:C9:98:6D:30:83:55:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905377f2c89ca66131e9c301a5406e6e9fbb8bda.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/e7ee3309746666913a4f15a4cd7baedcb0de2da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1229a59c-4242-4d86-a1f2-a144ff2c2578/905377f2c89ca66131e9c301a5406e6e9fbb8bda.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ee::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:b7:43:d2:7f:28:86:45:5f:6f:60:05:97:4e:02:ff:43:
         49:93:45:83:e8:fc:62:fb:b4:b7:29:c7:c1:a2:29:ca:e5:e3:
         cc:0b:7d:fa:39:e2:fc:07:63:37:1f:39:a1:6d:19:0b:2a:32:
         0f:61:ba:26:9f:3b:4e:aa:5a:f0:f5:e5:85:8d:2b:53:7c:29:
         18:4e:83:54:83:d8:60:ee:0e:98:07:c0:0e:80:19:63:3f:fa:
         70:fa:fb:3b:04:9b:15:70:e3:61:c1:be:cb:e0:ee:5b:29:3a:
         b8:88:a9:86:fa:2c:91:83:40:fe:16:d7:0f:7e:b0:69:67:ca:
         98:09:da:03:98:b5:0d:aa:23:68:6e:ff:cc:8e:c5:e7:71:45:
         f3:15:80:5d:6c:65:9a:4f:0c:c3:2a:af:a4:70:1c:0f:a9:eb:
         93:e9:bf:54:d8:a6:eb:8c:b2:ac:7a:0c:45:3a:8c:ce:34:3e:
         77:c7:e9:74:e9:14:a5:a9:87:91:ab:98:76:9e:24:ba:0c:0f:
         d5:b3:d5:3b:83:a4:a2:2b:bf:9f:1c:3c:7d:8e:a7:97:46:27:
         78:b7:5e:8f:63:90:14:96:f5:70:e7:d3:54:44:8d:65:b8:a3:
         e4:3c:2f:4f:82:36:f2:3e:5e:70:c3:8c:f8:c4:b8:0b:9e:f4:
         a5:4d:21:b3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAcZiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
NTM3N2YyYzg5Y2E2NjEzMWU5YzMwMWE1NDA2ZTZlOWZiYjhiZGEwHhcNMjMwNzA2
MTc0OTIxWhcNMjUwNzA3MTc0OTIxWjAzMTEwLwYDVQQDEyhlN2VlMzMwOTc0NjY2
NjkxM2E0ZjE1YTRjZDdiYWVkY2IwZGUyZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApr8uFBiU6WVqAyzFW/7xi9EokIJ/+pkO4ZuQ/hEg30ixA00O
d2Tn7qvu07LWPuGjtlH/f9HZvFDWrMtCKgMjuiAYXi1ZqVbc0k4E9hXdfJ3j+WoJ
qLcWBXWogknaSIRecaGFL10bodGsuCehcK14djBNUNsidDQPhu/dceb729uaqxZn
oY/wzyo2PfhLoXqOvKnLyZz6DqbQl2s7348R9Jf0RvpZcCxE3Rj/WZNjpM8ng38b
xGH8t1iKqRfw8y/c8fv6Bbn+iTAS1xcJ+1HYPNI9oVpFMUE/pa1sS5bAtwSGgNqi
3tEzatLQRt3lgYeGF00nbYvYihGJOV4t85m8IwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFLxs98KFMhFiD+Cx8oJupzClzP6dMB8GA1UdIwQYMBaAFCWHyA8W4f6+NXc1
lXvJmG0wg1X/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTA1Mzc3
ZjJjODljYTY2MTMxZTljMzAxYTU0MDZlNmU5ZmJiOGJkYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTIyOWE1OWMtNDI0Mi00ZDg2LWExZjItYTE0NGZm
MmMyNTc4L2U3ZWUzMzA5NzQ2NjY2OTEzYTRmMTVhNGNkN2JhZWRjYjBkZTJkYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjI5YTU5Yy00MjQyLTRkODYtYTFmMi1hMTQ0
ZmYyYzI1NzgvOTA1Mzc3ZjJjODljYTY2MTMxZTljMzAxYTU0MDZlNmU5ZmJiOGJk
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgGA+4wDQYJKoZIhvcNAQELBQADggEBACMut0PSfyiGRV9v
YAWXTgL/Q0mTRYPo/GL7tLcpx8GiKcrl48wLffo54vwHYzcfOaFtGQsqMg9huiaf
O06qWvD15YWNK1N8KRhOg1SD2GDuDpgHwA6AGWM/+nD6+zsEmxVw42HBvsvg7lsp
OriIqYb6LJGDQP4W1w9+sGlnypgJ2gOYtQ2qI2hu/8yOxedxRfMVgF1sZZpPDMMq
r6RwHA+p65Ppv1TYpuuMsqx6DEU6jM40PnfH6XTpFKWph5GrmHaeJLoMD9Wz1TuD
pKIrv58cPH2Op5dGJ3i3Xo9jkBSW9XDn01REjWW4o+Q8L0+CNvI+XnDDjPjEuAue
9KVNIbM=
-----END CERTIFICATE-----