Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/807d7309e9acc2013bd4542f45dced804fa524aa.roa
File:                     807d7309e9acc2013bd4542f45dced804fa524aa.roa (raw, json)
Hash identifier:          1lbjFwW8DkFXbyZm9iA7OHtQjWPNODPflLdTls5ENwI=
Subject key identifier:   86:9D:32:DA:F7:22:F7:C6:E2:49:98:96:80:AE:12:43:9C:4D:40:DF
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       236C02
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/807d7309e9acc2013bd4542f45dced804fa524aa.roa
Signing time:             Sat 08 Jul 2023 05:16:29 +0000
ROA not before:           Fri 07 Jul 2023 05:16:29 +0000
ROA not after:            Tue 08 Jul 2025 05:16:29 +0000
asID:                     61461
IP address blocks:        2803:d700:8a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321410 (0x236c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:16:29 2023 GMT
            Not After : Jul  8 05:16:29 2025 GMT
        Subject: CN=807d7309e9acc2013bd4542f45dced804fa524aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:df:96:f4:5b:4e:59:19:ad:ab:da:db:17:
                    61:72:98:cd:43:2d:34:91:ad:17:06:59:3c:73:89:
                    78:57:c6:94:2a:d1:00:d3:c8:de:ab:be:eb:53:60:
                    27:18:27:d2:95:af:cd:4f:dc:b2:69:36:5e:ff:19:
                    34:52:6e:3e:b3:1d:95:bc:95:a6:42:b3:bb:70:62:
                    aa:c2:75:59:36:8f:19:b3:20:a8:cd:8b:0e:3b:21:
                    83:73:dc:70:5d:1b:51:c0:8c:fa:09:ba:49:b1:13:
                    41:df:05:dd:34:4b:4d:cc:03:0c:0c:d4:55:1f:57:
                    54:0f:b8:47:38:6f:71:e5:9c:4d:4f:24:e9:33:76:
                    67:40:1d:3e:e3:3c:8f:f5:f5:1c:5d:60:77:85:32:
                    a6:7f:34:64:7e:c5:86:dd:75:1c:23:74:1a:a3:6f:
                    25:63:2f:92:13:a0:b4:a8:a9:42:a6:e1:22:51:30:
                    98:66:a2:a2:aa:8f:7a:72:90:e8:f8:df:85:d6:a6:
                    16:23:91:91:9f:77:33:7f:ae:3b:d2:99:64:dc:82:
                    30:83:2a:b4:98:99:25:22:b2:d9:35:46:53:8f:9a:
                    7a:a6:9d:7a:f3:3e:57:85:ad:c4:71:36:81:29:e8:
                    71:03:05:72:73:a8:d9:79:38:42:fa:51:fd:33:e2:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:32:DA:F7:22:F7:C6:E2:49:98:96:80:AE:12:43:9C:4D:40:DF
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/807d7309e9acc2013bd4542f45dced804fa524aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:a2:ee:12:16:d3:36:dd:6c:5a:63:9c:f9:af:94:15:e3:
         1d:19:d7:db:da:0a:08:7e:75:d4:e3:a7:7f:3f:65:7c:61:41:
         f1:90:09:da:53:d6:f8:07:15:4a:5f:bb:fb:58:9e:54:51:69:
         5a:16:fa:7b:c1:76:b4:9c:02:b2:38:a3:54:74:9b:2a:73:e5:
         b6:43:cb:8e:69:4d:98:62:b6:a7:aa:1f:db:78:40:bb:9a:17:
         e3:1a:ef:2e:2a:2a:3d:75:ed:24:16:0b:9e:e2:8e:f2:1f:b3:
         b6:e5:8c:e1:aa:26:02:fa:0d:7f:72:4b:6b:fb:b3:ac:e7:e2:
         62:b4:a8:20:b3:ba:8f:db:36:2c:08:46:7a:a5:e2:82:f2:98:
         46:47:5a:72:de:e4:cd:1c:cf:5f:5d:63:a7:87:50:d2:71:36:
         dc:02:f8:17:32:0e:fa:f9:26:09:b6:14:30:28:f5:ce:e0:9c:
         f7:86:ce:b9:ca:bb:9c:ea:54:15:21:ea:db:3a:94:e6:d4:7d:
         4c:41:9c:75:3f:d4:07:da:e1:c7:82:eb:60:6c:ca:d4:ea:9d:
         3b:ad:31:63:eb:40:53:77:8e:ce:a9:86:6a:c8:2c:9b:37:f7:
         9a:1e:a7:86:c9:af:5a:5d:e8:fd:4b:18:de:b2:f6:24:c5:47:
         84:88:b8:33
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDI2wCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNzA3
MDUxNjI5WhcNMjUwNzA4MDUxNjI5WjAzMTEwLwYDVQQDEyg4MDdkNzMwOWU5YWNj
MjAxM2JkNDU0MmY0NWRjZWQ4MDRmYTUyNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiOPflvRbTlkZrava2xdhcpjNQy00ka0XBlk8c4l4V8aUKtEA
08jeq77rU2AnGCfSla/NT9yyaTZe/xk0Um4+sx2VvJWmQrO7cGKqwnVZNo8ZsyCo
zYsOOyGDc9xwXRtRwIz6CbpJsRNB3wXdNEtNzAMMDNRVH1dUD7hHOG9x5ZxNTyTp
M3ZnQB0+4zyP9fUcXWB3hTKmfzRkfsWG3XUcI3Qao28lYy+SE6C0qKlCpuEiUTCY
ZqKiqo96cpDo+N+F1qYWI5GRn3czf6470plk3IIwgyq0mJklIrLZNUZTj5p6pp16
8z5Xha3EcTaBKehxAwVyc6jZeThC+lH9M+JqdwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFIadMtr3IvfG4kmYloCuEkOcTUDfMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1LzgwN2Q3MzA5ZTlhY2MyMDEzYmQ0NTQyZjQ1ZGNlZDgwNGZhNTI0YWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgD1wCKMA0GCSqGSIb3DQEBCwUAA4IBAQAsDqLuEhbTNt1s
WmOc+a+UFeMdGdfb2goIfnXU46d/P2V8YUHxkAnaU9b4BxVKX7v7WJ5UUWlaFvp7
wXa0nAKyOKNUdJsqc+W2Q8uOaU2YYranqh/beEC7mhfjGu8uKio9de0kFgue4o7y
H7O25YzhqiYC+g1/cktr+7Os5+JitKggs7qP2zYsCEZ6peKC8phGR1py3uTNHM9f
XWOnh1DScTbcAvgXMg76+SYJthQwKPXO4Jz3hs65yruc6lQVIerbOpTm1H1MQZx1
P9QH2uHHgutgbMrU6p07rTFj60BTd47OqYZqyCybN/eaHqeGya9aXej9SxjesvYk
xUeEiLgz
-----END CERTIFICATE-----