Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e5e1fe5-ba3b-4444-882f-7cb91b59b8a7/65e7f112bafaa8ec30573376651fc4c981c389ca.roa
File:                     65e7f112bafaa8ec30573376651fc4c981c389ca.roa (raw, json)
Hash identifier:          17NSClHf8SAzO9yvzVfNtEljkxDwz+gcoMwexnTAnos=
Subject key identifier:   3D:F1:66:7C:6C:B8:3D:87:68:C0:D2:4A:A7:CB:C7:7A:66:F4:F1:BC
Certificate issuer:       /CN=ad81a9cd5a901e083b37f621fa60731e8c233c15
Certificate serial:       0905
Authority key identifier: 72:05:DA:A8:3B:3A:53:DD:F0:61:1F:F1:1D:2F:0B:E0:C6:AC:7A:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad81a9cd5a901e083b37f621fa60731e8c233c15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e5e1fe5-ba3b-4444-882f-7cb91b59b8a7/65e7f112bafaa8ec30573376651fc4c981c389ca.roa
Signing time:             Wed 13 Dec 2023 20:55:25 +0000
ROA not before:           Wed 13 Dec 2023 20:55:25 +0000
ROA not after:            Sat 13 Dec 2025 20:55:25 +0000
asID:                     265586
IP address blocks:        2806:33b::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309 (0x905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad81a9cd5a901e083b37f621fa60731e8c233c15
        Validity
            Not Before: Dec 13 20:55:25 2023 GMT
            Not After : Dec 13 20:55:25 2025 GMT
        Subject: CN=65e7f112bafaa8ec30573376651fc4c981c389ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:a3:33:3d:79:1e:c1:f5:50:bd:1b:a7:74:
                    85:1c:dd:79:71:f0:ef:3b:3c:48:70:86:16:7f:9b:
                    0e:f8:47:85:bf:66:84:e3:05:a1:dd:d3:f8:45:d6:
                    fd:f7:02:6f:8f:b0:7d:59:e9:70:26:eb:db:67:81:
                    ce:c4:ed:26:8f:29:d0:fd:19:83:6d:98:94:07:3c:
                    cd:98:f5:3e:ef:d1:45:2c:da:a3:42:07:94:3a:8d:
                    4b:46:b8:c8:24:03:a8:e2:a6:28:06:b1:c6:20:a0:
                    91:d1:de:eb:17:71:7d:89:2a:cc:0c:39:85:47:c8:
                    cc:67:1f:d2:1f:8d:f6:16:f6:e1:0c:2b:d5:f1:2e:
                    19:23:10:a9:98:55:9e:7b:82:c5:7f:96:e5:51:28:
                    98:b8:0e:75:09:bb:1a:9d:10:d8:f7:2d:36:91:2b:
                    d0:c8:8b:41:19:d0:d5:43:ba:1a:f4:d7:d7:3e:38:
                    99:2e:c9:f3:55:2f:f6:65:61:ec:11:61:41:ac:cb:
                    c7:2b:4a:9a:6c:dd:9c:58:5e:d3:e8:20:29:02:81:
                    bc:b9:67:f7:92:a3:fa:b5:5b:5d:68:01:a2:9c:f1:
                    42:9d:6b:a3:8c:da:7d:f5:dc:f3:53:44:92:1d:88:
                    de:43:5a:8d:63:a2:b6:22:6c:4a:3d:93:38:50:e5:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:66:7C:6C:B8:3D:87:68:C0:D2:4A:A7:CB:C7:7A:66:F4:F1:BC
            X509v3 Authority Key Identifier:
                keyid:72:05:DA:A8:3B:3A:53:DD:F0:61:1F:F1:1D:2F:0B:E0:C6:AC:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad81a9cd5a901e083b37f621fa60731e8c233c15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e5e1fe5-ba3b-4444-882f-7cb91b59b8a7/65e7f112bafaa8ec30573376651fc4c981c389ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e5e1fe5-ba3b-4444-882f-7cb91b59b8a7/ad81a9cd5a901e083b37f621fa60731e8c233c15.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:33b::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:ab:d3:59:fb:64:35:83:bb:11:6e:6c:9c:89:77:ea:d0:01:
         31:eb:8d:c2:62:bd:bf:0b:c9:48:84:98:95:5a:16:c0:6a:dc:
         e9:7d:2e:4b:d4:68:ce:1e:69:59:da:d2:c8:2f:b7:17:0b:0c:
         c8:23:e0:83:f8:1d:23:a8:08:8b:8a:4d:3b:8d:6b:f4:62:e4:
         12:d0:5a:c9:da:1a:66:02:ac:5d:a5:a5:33:35:3d:7f:fd:23:
         e9:59:93:b9:26:b8:91:33:c0:bb:be:b3:68:1f:12:5a:4f:73:
         07:c1:4c:85:31:52:96:5e:ce:da:ba:49:24:a7:24:dd:19:1f:
         98:ad:55:2b:ea:e9:3f:cc:2a:26:cc:20:ee:33:8a:f7:22:e8:
         f9:bc:98:3f:5c:31:d3:89:d4:4d:b4:46:14:c6:7d:92:ee:23:
         10:b5:c0:5f:4b:66:8b:f9:3c:20:88:27:48:5b:c5:83:a9:a4:
         4b:0b:aa:bf:58:9c:4a:80:d1:6b:ac:9a:a4:19:f9:15:13:63:
         21:f8:f6:da:aa:68:04:2e:57:64:e3:2b:c8:6c:83:28:29:95:
         eb:7a:48:7b:8c:f4:86:59:e8:1e:7e:57:55:89:34:59:28:52:
         80:a9:6b:41:ed:b8:28:33:c2:72:cb:a0:a7:0d:2e:c0:ee:e6:
         e0:f1:17:a4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYWQ4
MWE5Y2Q1YTkwMWUwODNiMzdmNjIxZmE2MDczMWU4YzIzM2MxNTAeFw0yMzEyMTMy
MDU1MjVaFw0yNTEyMTMyMDU1MjVaMDMxMTAvBgNVBAMTKDY1ZTdmMTEyYmFmYWE4
ZWMzMDU3MzM3NjY1MWZjNGM5ODFjMzg5Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCY8qMzPXkewfVQvRundIUc3Xlx8O87PEhwhhZ/mw74R4W/ZoTj
BaHd0/hF1v33Am+PsH1Z6XAm69tngc7E7SaPKdD9GYNtmJQHPM2Y9T7v0UUs2qNC
B5Q6jUtGuMgkA6jipigGscYgoJHR3usXcX2JKswMOYVHyMxnH9IfjfYW9uEMK9Xx
LhkjEKmYVZ57gsV/luVRKJi4DnUJuxqdENj3LTaRK9DIi0EZ0NVDuhr019c+OJku
yfNVL/ZlYewRYUGsy8crSpps3ZxYXtPoICkCgby5Z/eSo/q1W11oAaKc8UKda6OM
2n313PNTRJIdiN5DWo1jorYibEo9kzhQ5YKXAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQUPfFmfGy4PYdowNJKp8vHemb08bwwHwYDVR0jBBgwFoAUcgXaqDs6U93wYR/x
HS8L4MaseucwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hZDgxYTlj
ZDVhOTAxZTA4M2IzN2Y2MjFmYTYwNzMxZThjMjMzYzE1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8xZTVlMWZlNS1iYTNiLTQ0NDQtODgyZi03Y2I5MWI1
OWI4YTcvNjVlN2YxMTJiYWZhYThlYzMwNTczMzc2NjUxZmM0Yzk4MWMzODljYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzFlNWUxZmU1LWJhM2ItNDQ0NC04ODJmLTdjYjkx
YjU5YjhhNy9hZDgxYTljZDVhOTAxZTA4M2IzN2Y2MjFmYTYwNzMxZThjMjMzYzE1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAYDOzANBgkqhkiG9w0BAQsFAAOCAQEAXKvTWftkNYO7EW5s
nIl36tABMeuNwmK9vwvJSISYlVoWwGrc6X0uS9Rozh5pWdrSyC+3FwsMyCPgg/gd
I6gIi4pNO41r9GLkEtBaydoaZgKsXaWlMzU9f/0j6VmTuSa4kTPAu76zaB8SWk9z
B8FMhTFSll7O2rpJJKck3RkfmK1VK+rpP8wqJswg7jOK9yLo+byYP1wx04nUTbRG
FMZ9ku4jELXAX0tmi/k8IIgnSFvFg6mkSwuqv1icSoDRa6yapBn5FRNjIfj22qpo
BC5XZOMryGyDKCmV63pIe4z0hlnoHn5XVYk0WShSgKlrQe24KDPCcsugpw0uwO7m
4PEXpA==
-----END CERTIFICATE-----