Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/0a4c243d29d01852e28abb1d034c486f7478c7ef.roa
File:                     0a4c243d29d01852e28abb1d034c486f7478c7ef.roa (raw, json)
Hash identifier:          iajpNzH77hY7dNG/upPxhCDe+EeghGIX6iknqnRBGgg=
Subject key identifier:   69:A2:28:A8:F4:C1:9C:0D:C6:D9:18:A7:0A:A3:05:E8:5D:CE:C9:22
Certificate issuer:       /CN=5494bd71484d106b75c5bedf4263f48281a4e409
Certificate serial:       24294A
Authority key identifier: 4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/0a4c243d29d01852e28abb1d034c486f7478c7ef.roa
Signing time:             Thu 21 Sep 2023 16:59:49 +0000
ROA not before:           Wed 20 Sep 2023 16:59:48 +0000
ROA not after:            Sun 21 Sep 2025 16:59:48 +0000
asID:                     264684
IP address blocks:        2001:1388::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369866 (0x24294a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5494bd71484d106b75c5bedf4263f48281a4e409
        Validity
            Not Before: Sep 20 16:59:48 2023 GMT
            Not After : Sep 21 16:59:48 2025 GMT
        Subject: CN=0a4c243d29d01852e28abb1d034c486f7478c7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:57:6e:db:06:5d:b5:2a:77:77:3d:96:99:
                    ff:93:6c:e0:6a:6c:95:6b:97:b5:bd:1b:df:ef:d5:
                    2f:80:90:44:e7:69:3a:f7:72:ae:e3:5f:24:52:44:
                    64:8e:9e:73:c4:3f:fc:61:5f:ac:83:4c:82:53:76:
                    43:b0:6a:84:5a:55:f8:58:6e:b6:25:0c:0d:be:a4:
                    c9:ff:95:f7:60:6c:88:b6:59:34:ca:26:a6:1d:39:
                    1b:dd:bb:ad:b3:05:b0:98:4b:71:f3:2a:f2:65:f4:
                    9d:9b:99:24:a8:de:3b:b2:f1:b6:b1:f4:de:9c:a8:
                    31:8f:a2:09:6b:14:f4:38:a5:50:24:49:74:f4:35:
                    a2:47:dd:77:44:c4:e6:dc:f9:f8:c6:57:c2:41:d5:
                    2b:0d:64:de:11:47:2b:fa:b5:32:f4:d8:bf:72:88:
                    04:46:65:46:39:4e:a1:bf:21:29:9c:f7:7f:c2:5a:
                    55:ac:85:b3:b3:51:58:cb:b8:26:c9:a1:4d:f5:1f:
                    46:6a:b4:08:54:7a:11:fd:04:f1:a3:4e:a7:74:e0:
                    cd:c6:b1:67:97:35:ca:39:e7:dd:cf:ac:41:19:d9:
                    bd:02:71:72:6f:4c:58:bd:69:61:4c:e1:4d:3c:b4:
                    0f:fa:43:ac:db:2a:01:6a:10:6f:c6:55:01:33:ad:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:28:A8:F4:C1:9C:0D:C6:D9:18:A7:0A:A3:05:E8:5D:CE:C9:22
            X509v3 Authority Key Identifier:
                keyid:4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/0a4c243d29d01852e28abb1d034c486f7478c7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1388::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:8c:40:39:9a:b6:14:c6:e9:c2:d1:13:ec:9e:b5:f9:a9:
         2b:94:37:82:91:f8:51:5b:c3:de:82:02:fc:9c:2c:a1:06:6a:
         d6:c5:59:24:d9:be:23:49:2b:98:c2:40:91:a5:11:df:88:67:
         a9:b9:68:13:f9:7d:ce:60:dd:21:5c:ac:11:c7:40:04:f8:a8:
         26:05:51:b9:d6:1f:27:d5:f4:cb:e0:30:51:12:e0:e5:68:a1:
         4e:b4:5e:53:54:3e:41:ad:ec:6b:b0:07:e1:7d:cd:53:a3:c7:
         34:0f:e8:c8:4b:96:05:b6:18:a4:c7:db:8a:cd:ff:fd:30:58:
         85:65:b0:4a:d2:cc:31:64:f9:a6:a0:f7:33:ce:46:18:48:6b:
         0f:a3:ff:54:0b:4f:bf:db:82:2d:27:07:44:68:d4:01:6d:db:
         c4:ab:6c:aa:ac:cc:29:aa:4b:e0:54:35:ac:de:42:16:9a:e6:
         1d:27:ed:af:2c:e4:b3:68:34:42:bb:54:13:74:47:02:44:16:
         02:25:b6:5f:d6:71:d9:ca:9c:d9:9d:a9:64:a0:83:84:a4:c0:
         1f:3b:4f:d5:f0:cd:17:8a:20:aa:31:62:ff:cb:3e:cf:0c:91:
         f5:e5:2d:4e:46:07:cd:dc:ec:47:26:4c:4f:30:28:6e:59:36:
         9d:be:b8:3c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDJClKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU0
OTRiZDcxNDg0ZDEwNmI3NWM1YmVkZjQyNjNmNDgyODFhNGU0MDkwHhcNMjMwOTIw
MTY1OTQ4WhcNMjUwOTIxMTY1OTQ4WjAzMTEwLwYDVQQDEygwYTRjMjQzZDI5ZDAx
ODUyZTI4YWJiMWQwMzRjNDg2Zjc0NzhjN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAietXbtsGXbUqd3c9lpn/k2zgamyVa5e1vRvf79UvgJBE52k6
93Ku418kUkRkjp5zxD/8YV+sg0yCU3ZDsGqEWlX4WG62JQwNvqTJ/5X3YGyItlk0
yiamHTkb3butswWwmEtx8yryZfSdm5kkqN47svG2sfTenKgxj6IJaxT0OKVQJEl0
9DWiR913RMTm3Pn4xlfCQdUrDWTeEUcr+rUy9Ni/cogERmVGOU6hvyEpnPd/wlpV
rIWzs1FYy7gmyaFN9R9GarQIVHoR/QTxo06ndODNxrFnlzXKOefdz6xBGdm9AnFy
b0xYvWlhTOFNPLQP+kOs2yoBahBvxlUBM611AQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGmiKKj0wZwNxtkYpwqjBehdzskiMB8GA1UdIwQYMBaAFEy2vsd4QZnsyvAx
E4rJmi5mq4PdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTQ5NGJk
NzE0ODRkMTA2Yjc1YzViZWRmNDI2M2Y0ODI4MWE0ZTQwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjc5N2IyZjAtZTVkYS00MTZjLWE4ZDYtYTYxZGMx
MDJhNDQxLzBhNGMyNDNkMjlkMDE4NTJlMjhhYmIxZDAzNGM0ODZmNzQ3OGM3ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNzk3YjJmMC1lNWRhLTQxNmMtYThkNi1hNjFk
YzEwMmE0NDEvNTQ5NGJkNzE0ODRkMTA2Yjc1YzViZWRmNDI2M2Y0ODI4MWE0ZTQw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACABE4gwDQYJKoZIhvcNAQELBQADggEBACxijEA5mrYUxunC
0RPsnrX5qSuUN4KR+FFbw96CAvycLKEGatbFWSTZviNJK5jCQJGlEd+IZ6m5aBP5
fc5g3SFcrBHHQAT4qCYFUbnWHyfV9MvgMFES4OVooU60XlNUPkGt7GuwB+F9zVOj
xzQP6MhLlgW2GKTH24rN//0wWIVlsErSzDFk+aag9zPORhhIaw+j/1QLT7/bgi0n
B0Ro1AFt28SrbKqszCmqS+BUNazeQhaa5h0n7a8s5LNoNEK7VBN0RwJEFgIltl/W
cdnKnNmdqWSgg4SkwB87T9XwzReKIKoxYv/LPs8MkfXlLU5GB83c7EcmTE8wKG5Z
Np2+uDw=
-----END CERTIFICATE-----