Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/368025102d84c781b72fed5831190feed3fca11e.roa
File:                     368025102d84c781b72fed5831190feed3fca11e.roa (raw, json)
Hash identifier:          wOkqdajUSQVnbbZjWmr/pVCgWG/dm5JtvEG+dkhhnjM=
Subject key identifier:   6A:10:2C:6F:57:F5:3A:55:94:F7:BA:32:F4:B0:9B:AE:EC:0C:F6:2F
Certificate issuer:       /CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
Certificate serial:       04E6F5
Authority key identifier: AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/368025102d84c781b72fed5831190feed3fca11e.roa
Signing time:             Thu 02 Nov 2023 04:59:55 +0000
ROA not before:           Thu 02 Nov 2023 04:59:55 +0000
ROA not after:            Sun 02 Nov 2025 04:59:55 +0000
asID:                     273008
IP address blocks:        2803:b590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321269 (0x4e6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbafd64b264ae3fec9533d2c8d059b180e2685c0
        Validity
            Not Before: Nov  2 04:59:55 2023 GMT
            Not After : Nov  2 04:59:55 2025 GMT
        Subject: CN=368025102d84c781b72fed5831190feed3fca11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:0d:ee:77:b4:3f:00:a4:3b:d7:1c:20:65:
                    d2:1e:a9:16:5b:8d:0f:3e:a3:de:6a:9f:66:9f:18:
                    c4:b2:d2:96:d9:26:ad:3e:ce:93:d9:53:44:40:ed:
                    90:23:90:dd:d3:bf:c3:1f:77:7c:22:98:c2:44:33:
                    0f:41:45:70:3e:f9:2f:24:71:ac:a0:61:2b:22:27:
                    3b:9d:10:c4:1d:3b:46:08:37:7a:a2:a2:65:0e:68:
                    b8:3e:fc:99:22:c7:ce:2a:27:b1:9a:c5:31:9f:75:
                    1c:4b:30:c0:4e:7f:e3:2e:52:9d:ea:73:6c:84:b1:
                    eb:06:14:52:e8:f9:8a:fd:cd:37:62:d5:a1:7b:12:
                    c3:00:c4:07:93:e7:2f:0b:04:17:ea:c9:5a:e6:4c:
                    81:0b:ba:4f:26:29:fe:5e:bf:b4:8e:2c:e9:f8:07:
                    97:3c:8e:1a:75:7c:09:9c:fa:14:6d:38:05:19:6e:
                    ab:80:08:ed:3b:c0:2d:f1:9b:32:4b:d4:cc:a4:30:
                    13:1d:90:ad:80:6c:bb:82:87:09:1b:f6:24:b1:4f:
                    03:e4:1e:18:1b:ae:95:5c:77:7f:85:64:a4:33:e9:
                    f6:2f:99:d4:da:68:2e:c7:2b:38:36:0e:15:b5:47:
                    ad:f0:f1:70:26:ef:30:d9:a8:50:e3:ad:5d:6d:36:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:2C:6F:57:F5:3A:55:94:F7:BA:32:F4:B0:9B:AE:EC:0C:F6:2F
            X509v3 Authority Key Identifier:
                keyid:AD:C3:D3:62:BA:10:47:42:AB:94:BE:39:32:F1:9D:A3:B8:75:29:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbafd64b264ae3fec9533d2c8d059b180e2685c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/368025102d84c781b72fed5831190feed3fca11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12d605fb-c3a5-46b9-b100-b07d917912ef/cbafd64b264ae3fec9533d2c8d059b180e2685c0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:b2:8a:98:3f:75:77:9a:b6:86:30:ff:f6:ea:f9:a6:8c:
         57:d5:f5:55:93:79:f2:95:60:7c:e1:f6:50:19:0b:ca:76:a3:
         bf:34:84:0f:15:66:17:25:1c:5f:d6:e3:1a:5a:68:ae:16:2d:
         a8:67:27:69:da:0b:73:98:74:5f:dd:55:32:f5:9f:3f:bd:0c:
         f5:95:87:9f:e4:1e:7f:a8:b5:e3:09:af:c6:ec:6e:51:21:88:
         b2:9d:7d:f7:09:43:ae:48:b5:63:b0:fe:2e:3c:b2:72:73:e9:
         ad:1f:6e:8f:31:41:42:eb:86:43:20:8d:2d:03:d7:c3:56:34:
         87:19:68:a0:f2:cd:f9:41:37:15:84:d0:55:89:b3:12:52:0b:
         31:df:81:2b:7b:8f:03:8a:e3:b4:50:fd:5e:f2:c0:78:85:05:
         fb:7b:12:36:59:68:0d:a0:b7:87:b3:90:f2:72:c1:80:16:56:
         7f:38:9e:13:89:46:34:bc:da:32:5a:23:ef:29:43:a7:b7:79:
         bb:e5:7a:9c:65:ac:42:0a:3c:9e:09:73:0d:b3:b0:87:89:04:
         e2:33:c2:05:f6:ba:24:f7:f6:89:a0:89:da:b3:5b:99:7e:68:
         07:2a:e2:cb:d2:03:f0:b8:61:f1:04:40:60:ef:9f:7d:de:f1:
         6a:fe:ce:fc
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBOb1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNi
YWZkNjRiMjY0YWUzZmVjOTUzM2QyYzhkMDU5YjE4MGUyNjg1YzAwHhcNMjMxMTAy
MDQ1OTU1WhcNMjUxMTAyMDQ1OTU1WjAzMTEwLwYDVQQDEygzNjgwMjUxMDJkODRj
NzgxYjcyZmVkNTgzMTE5MGZlZWQzZmNhMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4lEN7ne0PwCkO9ccIGXSHqkWW40PPqPeap9mnxjEstKW2Sat
Ps6T2VNEQO2QI5Dd07/DH3d8IpjCRDMPQUVwPvkvJHGsoGErIic7nRDEHTtGCDd6
oqJlDmi4PvyZIsfOKiexmsUxn3UcSzDATn/jLlKd6nNshLHrBhRS6PmK/c03YtWh
exLDAMQHk+cvCwQX6sla5kyBC7pPJin+Xr+0jizp+AeXPI4adXwJnPoUbTgFGW6r
gAjtO8At8ZsyS9TMpDATHZCtgGy7gocJG/YksU8D5B4YG66VXHd/hWSkM+n2L5nU
2mguxys4Ng4VtUet8PFwJu8w2ahQ461dbTbVDQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGoQLG9X9TpVlPe6MvSwm67sDPYvMB8GA1UdIwQYMBaAFK3D02K6EEdCq5S+
OTLxnaO4dSlkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2JhZmQ2
NGIyNjRhZTNmZWM5NTMzZDJjOGQwNTliMTgwZTI2ODVjMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTJkNjA1ZmItYzNhNS00NmI5LWIxMDAtYjA3ZDkx
NzkxMmVmLzM2ODAyNTEwMmQ4NGM3ODFiNzJmZWQ1ODMxMTkwZmVlZDNmY2ExMWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMmQ2MDVmYi1jM2E1LTQ2YjktYjEwMC1iMDdk
OTE3OTEyZWYvY2JhZmQ2NGIyNjRhZTNmZWM5NTMzZDJjOGQwNTliMTgwZTI2ODVj
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDtZAwDQYJKoZIhvcNAQELBQADggEBAIzbsoqYP3V3mraG
MP/26vmmjFfV9VWTefKVYHzh9lAZC8p2o780hA8VZhclHF/W4xpaaK4WLahnJ2na
C3OYdF/dVTL1nz+9DPWVh5/kHn+oteMJr8bsblEhiLKdffcJQ65ItWOw/i48snJz
6a0fbo8xQULrhkMgjS0D18NWNIcZaKDyzflBNxWE0FWJsxJSCzHfgSt7jwOK47RQ
/V7ywHiFBft7EjZZaA2gt4ezkPJywYAWVn84nhOJRjS82jJaI+8pQ6e3ebvlepxl
rEIKPJ4Jcw2zsIeJBOIzwgX2uiT39omgidqzW5l+aAcq4svSA/C4YfEEQGDvn33e
8Wr+zvw=
-----END CERTIFICATE-----