Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/c809996a35432ee5d2c57b08033c57625f0562a9.roa
File:                     c809996a35432ee5d2c57b08033c57625f0562a9.roa (raw, json)
Hash identifier:          d7aEyszeNkaTCu76qX5rSExHb0Dw32XnSccFQYZjaBY=
Subject key identifier:   A1:64:4F:60:7F:E9:BE:60:EA:A0:26:89:23:8C:F6:A4:D0:B6:37:86
Certificate issuer:       /CN=46852e51a411e33b284cbd01be15ea19c9bee844
Certificate serial:       0CB7C0
Authority key identifier: 1E:3A:4D:97:5E:AC:E6:D0:E4:7D:29:BC:BD:A0:D0:4E:E3:92:CE:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46852e51a411e33b284cbd01be15ea19c9bee844.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/c809996a35432ee5d2c57b08033c57625f0562a9.roa
Signing time:             Fri 21 Jul 2023 14:59:32 +0000
ROA not before:           Thu 20 Jul 2023 14:59:32 +0000
ROA not after:            Mon 21 Jul 2025 14:59:32 +0000
asID:                     262589
IP address blocks:        2801:12:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833472 (0xcb7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46852e51a411e33b284cbd01be15ea19c9bee844
        Validity
            Not Before: Jul 20 14:59:32 2023 GMT
            Not After : Jul 21 14:59:32 2025 GMT
        Subject: CN=c809996a35432ee5d2c57b08033c57625f0562a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:f8:e8:04:a6:48:12:94:14:b7:cf:52:3c:
                    44:31:1a:d6:f4:f6:d0:03:ab:ea:fd:cb:46:35:c6:
                    51:71:e7:23:36:ed:8d:a4:5a:3c:37:9a:37:50:cb:
                    b9:28:c0:dc:93:c0:38:f3:ec:ec:7d:9c:82:0e:ea:
                    dc:2d:91:97:31:3b:b6:dd:52:93:77:2e:30:e8:e9:
                    0b:39:0b:d7:60:48:f1:1c:1d:87:0d:90:33:65:76:
                    d6:e1:e2:0b:bb:d0:e1:6e:56:bd:3b:c0:a0:f4:00:
                    81:6c:d0:53:04:d4:81:3f:fc:6d:34:b5:27:63:ee:
                    87:50:2a:70:8c:e0:b0:96:86:20:19:1a:43:21:7c:
                    b8:a1:cf:6e:d2:6a:4d:4b:a3:23:91:c1:b9:98:68:
                    a3:da:7e:bd:ed:72:0b:2f:5f:40:24:63:8c:1b:71:
                    95:f0:a8:1c:35:17:10:69:39:39:d1:a6:19:2b:28:
                    ff:92:5e:d4:e8:92:fe:a8:9e:3b:ac:4a:e9:8b:61:
                    00:a8:34:d9:e0:76:5a:3c:e3:09:24:2b:23:04:59:
                    ce:76:12:e3:ae:ba:80:69:7d:45:4b:02:8e:86:21:
                    42:87:ff:b0:c4:16:95:28:51:2e:7d:77:62:94:f4:
                    c6:0d:d9:e8:42:91:7d:01:61:97:7b:cf:ba:52:8e:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:64:4F:60:7F:E9:BE:60:EA:A0:26:89:23:8C:F6:A4:D0:B6:37:86
            X509v3 Authority Key Identifier:
                keyid:1E:3A:4D:97:5E:AC:E6:D0:E4:7D:29:BC:BD:A0:D0:4E:E3:92:CE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/46852e51a411e33b284cbd01be15ea19c9bee844.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/c809996a35432ee5d2c57b08033c57625f0562a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/336a742a-d46c-45c2-9eac-5499fac9f012/46852e51a411e33b284cbd01be15ea19c9bee844.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:93:b1:31:dc:17:87:e2:67:69:65:b0:71:e9:5f:da:f3:
         1b:8c:ca:fb:0c:42:20:dd:71:a2:57:7d:7d:fc:a4:43:4a:50:
         6b:3f:52:e7:d8:88:5c:3d:46:b9:f6:e0:8a:a8:20:55:a5:de:
         fe:f1:60:a7:d7:fe:7f:4d:95:6a:91:9c:d0:a9:fe:5f:b4:4b:
         e6:32:47:2e:be:b3:4e:02:73:05:9d:9e:60:34:35:f2:8a:5a:
         8e:0c:d3:22:4f:2f:2f:85:8d:6b:b2:65:7e:3e:15:a4:12:74:
         6d:46:ad:e8:5c:b0:1c:82:b2:2e:27:1e:53:df:e5:8b:94:06:
         fb:84:26:f1:47:01:46:e1:ca:40:17:fa:f7:5f:1d:b1:38:dd:
         e0:3c:03:d7:aa:eb:fb:74:94:2f:ff:ac:6a:63:9b:21:22:59:
         05:2d:49:a1:c3:45:4b:a3:25:fa:ee:43:60:33:98:36:d8:74:
         06:d1:19:d1:24:ed:58:45:82:e7:c7:76:f1:d9:47:8a:b8:bc:
         b8:42:33:16:39:b5:5a:6d:d7:ca:34:d9:ec:ab:a2:86:43:5d:
         c8:f2:31:01:ea:7d:a3:ff:d3:8e:7d:94:83:2d:64:a1:aa:ac:
         b1:9a:84:5f:7e:d5:df:f7:fa:9a:61:2a:71:fe:2c:52:68:f3:
         39:ea:f1:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDLfAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
ODUyZTUxYTQxMWUzM2IyODRjYmQwMWJlMTVlYTE5YzliZWU4NDQwHhcNMjMwNzIw
MTQ1OTMyWhcNMjUwNzIxMTQ1OTMyWjAzMTEwLwYDVQQDEyhjODA5OTk2YTM1NDMy
ZWU1ZDJjNTdiMDgwMzNjNTc2MjVmMDU2MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArXz46ASmSBKUFLfPUjxEMRrW9PbQA6vq/ctGNcZRcecjNu2N
pFo8N5o3UMu5KMDck8A48+zsfZyCDurcLZGXMTu23VKTdy4w6OkLOQvXYEjxHB2H
DZAzZXbW4eILu9Dhbla9O8Cg9ACBbNBTBNSBP/xtNLUnY+6HUCpwjOCwloYgGRpD
IXy4oc9u0mpNS6MjkcG5mGij2n697XILL19AJGOMG3GV8KgcNRcQaTk50aYZKyj/
kl7U6JL+qJ47rErpi2EAqDTZ4HZaPOMJJCsjBFnOdhLjrrqAaX1FSwKOhiFCh/+w
xBaVKFEufXdilPTGDdnoQpF9AWGXe8+6Uo7IvQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFKFkT2B/6b5g6qAmiSOM9qTQtjeGMB8GA1UdIwQYMBaAFB46TZderObQ5H0p
vL2g0E7jks7zMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY4NTJl
NTFhNDExZTMzYjI4NGNiZDAxYmUxNWVhMTljOWJlZTg0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzM2YTc0MmEtZDQ2Yy00NWMyLTllYWMtNTQ5OWZh
YzlmMDEyL2M4MDk5OTZhMzU0MzJlZTVkMmM1N2IwODAzM2M1NzYyNWYwNTYyYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMzZhNzQyYS1kNDZjLTQ1YzItOWVhYy01NDk5
ZmFjOWYwMTIvNDY4NTJlNTFhNDExZTMzYjI4NGNiZDAxYmUxNWVhMTljOWJlZTg0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBABKYADANBgkqhkiG9w0BAQsFAAOCAQEAjeKTsTHcF4fi
Z2llsHHpX9rzG4zK+wxCIN1xold9ffykQ0pQaz9S59iIXD1GufbgiqggVaXe/vFg
p9f+f02VapGc0Kn+X7RL5jJHLr6zTgJzBZ2eYDQ18opajgzTIk8vL4WNa7Jlfj4V
pBJ0bUat6FywHIKyLiceU9/li5QG+4Qm8UcBRuHKQBf6918dsTjd4DwD16rr+3SU
L/+samObISJZBS1JocNFS6Ml+u5DYDOYNth0BtEZ0STtWEWC58d28dlHiri8uEIz
Fjm1Wm3XyjTZ7KuihkNdyPIxAep9o//Tjn2Ugy1koaqssZqEX37V3/f6mmEqcf4s
UmjzOerx6Q==
-----END CERTIFICATE-----