Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/a69b962bb2149cc67c59cedee00269a23f9834ef.roa
File:                     a69b962bb2149cc67c59cedee00269a23f9834ef.roa (raw, json)
Hash identifier:          hfTTXSNOtRP40achBdls+IOBF4Hl/jhWj1K5nEB/i8Y=
Subject key identifier:   0C:76:00:75:46:6C:54:E2:EA:4F:D5:A8:6B:38:F9:D9:E3:A6:AC:31
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       234712
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/a69b962bb2149cc67c59cedee00269a23f9834ef.roa
Signing time:             Sat 08 Jul 2023 05:04:50 +0000
ROA not before:           Fri 07 Jul 2023 05:04:49 +0000
ROA not after:            Tue 08 Jul 2025 05:04:49 +0000
asID:                     61461
IP address blocks:        2803:d700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311954 (0x234712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:04:49 2023 GMT
            Not After : Jul  8 05:04:49 2025 GMT
        Subject: CN=a69b962bb2149cc67c59cedee00269a23f9834ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:a3:b4:fa:34:ad:f6:e4:fb:9e:c4:e1:8d:
                    dc:6a:e3:cd:86:15:20:ce:ef:36:29:77:0a:9d:2d:
                    54:79:a3:42:89:ab:1a:3e:cb:79:c5:44:f3:dd:56:
                    06:2c:5b:dd:2b:be:40:30:95:90:32:bf:04:b0:78:
                    42:81:85:b3:a7:15:3b:d2:c5:45:d9:8f:a5:10:24:
                    0a:9d:28:af:fd:85:db:d6:eb:3d:cf:34:69:fe:cc:
                    39:63:95:76:ae:b1:aa:ad:65:96:8e:2c:83:a6:2d:
                    4d:a7:3f:a2:0a:08:fa:ae:6e:6f:f0:d7:2d:8a:43:
                    2a:2a:e3:94:b9:8a:81:33:85:19:5c:f8:0c:61:b1:
                    b2:0d:2d:ea:29:9f:3d:8c:07:c4:b2:a8:d8:9c:2c:
                    0c:58:b0:e0:fe:ff:db:04:61:e3:71:98:55:c2:2e:
                    bb:66:69:fc:b4:be:5e:77:07:eb:08:3d:69:f1:4a:
                    6e:43:38:9c:21:1a:f1:f8:1d:b5:61:c6:0c:12:f7:
                    fb:10:13:09:3c:2d:32:9e:2f:ed:03:62:38:6d:0c:
                    0c:6b:ac:99:92:ea:bb:49:38:1f:83:09:75:49:a7:
                    11:0d:45:d4:bd:31:1b:0a:12:a5:0c:33:b3:b9:4f:
                    60:a7:e4:f3:15:48:21:e9:7a:7e:fc:82:e8:e8:ef:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:76:00:75:46:6C:54:E2:EA:4F:D5:A8:6B:38:F9:D9:E3:A6:AC:31
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/a69b962bb2149cc67c59cedee00269a23f9834ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:be:84:8f:7f:0a:59:98:96:62:06:de:ee:fd:05:c6:cd:
         11:86:e3:c7:43:90:f6:d7:80:13:e3:08:58:c6:2f:af:5b:1f:
         73:1b:78:33:ff:6c:9c:8b:17:96:ae:6c:72:1c:f9:0b:ca:31:
         b8:35:41:df:e4:fc:50:a9:28:bf:e1:ed:9f:c4:a9:9a:a7:26:
         a6:8e:c0:22:ae:dc:c9:d1:92:12:e1:66:cd:56:91:cc:68:df:
         f3:63:52:72:20:97:93:75:a8:f5:65:8e:1b:cf:60:f1:cb:6e:
         dc:75:69:85:09:3d:f2:86:89:11:83:b4:a4:de:b3:f2:10:11:
         fd:04:9f:fc:f4:23:64:7d:b7:41:f8:73:f9:17:ab:1f:11:23:
         86:81:ee:85:d0:3e:27:a9:7f:b9:d4:36:f0:dd:8a:c2:21:f9:
         ec:ae:c0:be:07:0d:25:01:dd:ec:82:48:62:32:88:d3:b5:e8:
         24:0c:96:23:69:45:14:f6:79:9f:20:9a:0d:8f:f0:35:d4:37:
         14:05:e4:29:ac:be:07:d0:ad:69:d3:d4:07:62:3a:53:a2:c0:
         df:fe:07:2b:fb:4b:af:8f:33:9a:73:c9:b6:61:a4:65:f1:46:
         0c:e5:3b:e3:29:ed:c8:9b:62:c5:9e:f7:43:88:c3:62:23:f9:
         91:7d:c2:25
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDI0cSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNzA3
MDUwNDQ5WhcNMjUwNzA4MDUwNDQ5WjAzMTEwLwYDVQQDEyhhNjliOTYyYmIyMTQ5
Y2M2N2M1OWNlZGVlMDAyNjlhMjNmOTgzNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApv+jtPo0rfbk+57E4Y3cauPNhhUgzu82KXcKnS1UeaNCiasa
Pst5xUTz3VYGLFvdK75AMJWQMr8EsHhCgYWzpxU70sVF2Y+lECQKnSiv/YXb1us9
zzRp/sw5Y5V2rrGqrWWWjiyDpi1Npz+iCgj6rm5v8NctikMqKuOUuYqBM4UZXPgM
YbGyDS3qKZ89jAfEsqjYnCwMWLDg/v/bBGHjcZhVwi67Zmn8tL5edwfrCD1p8Upu
QzicIRrx+B21YcYMEvf7EBMJPC0yni/tA2I4bQwMa6yZkuq7STgfgwl1SacRDUXU
vTEbChKlDDOzuU9gp+TzFUgh6Xp+/ILo6O8rCQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFAx2AHVGbFTi6k/VqGs4+dnjpqwxMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1L2E2OWI5NjJiYjIxNDljYzY3YzU5Y2VkZWUwMDI2OWEyM2Y5ODM0ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD1wAwDQYJKoZIhvcNAQELBQADggEBAGCuvoSPfwpZmJZi
Bt7u/QXGzRGG48dDkPbXgBPjCFjGL69bH3MbeDP/bJyLF5aubHIc+QvKMbg1Qd/k
/FCpKL/h7Z/EqZqnJqaOwCKu3MnRkhLhZs1Wkcxo3/NjUnIgl5N1qPVljhvPYPHL
btx1aYUJPfKGiRGDtKTes/IQEf0En/z0I2R9t0H4c/kXqx8RI4aB7oXQPiepf7nU
NvDdisIh+eyuwL4HDSUB3eyCSGIyiNO16CQMliNpRRT2eZ8gmg2P8DXUNxQF5Cms
vgfQrWnT1AdiOlOiwN/+Byv7S6+PM5pzybZhpGXxRgzlO+Mp7cibYsWe90OIw2Ij
+ZF9wiU=
-----END CERTIFICATE-----