Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/1df764a15c7305a5c8e3e30c6d881e82d584c0b6.roa
File:                     1df764a15c7305a5c8e3e30c6d881e82d584c0b6.roa (raw, json)
Hash identifier:          LswfhK2Ottt9PnUTjMlfnAwFW/2MRPo9eEW2bJ0OeyU=
Subject key identifier:   CB:D8:B0:B2:19:B4:34:83:EE:75:4B:3B:96:B3:7C:8A:6D:89:CB:18
Certificate issuer:       /CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
Certificate serial:       204B7A
Authority key identifier: A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/1df764a15c7305a5c8e3e30c6d881e82d584c0b6.roa
Signing time:             Fri 28 Jul 2023 17:52:39 +0000
ROA not before:           Thu 27 Jul 2023 17:52:39 +0000
ROA not after:            Mon 28 Jul 2025 17:52:39 +0000
asID:                     269783
IP address blocks:        2803:a360::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116474 (0x204b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c012e30dc831b6875f6cfcb5639d3f391769b7
        Validity
            Not Before: Jul 27 17:52:39 2023 GMT
            Not After : Jul 28 17:52:39 2025 GMT
        Subject: CN=1df764a15c7305a5c8e3e30c6d881e82d584c0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:fc:f3:70:de:34:be:6d:58:bf:cc:11:c6:
                    83:53:6f:df:4e:45:ba:37:ef:45:e5:a8:d5:c8:07:
                    a6:aa:da:cd:dc:ce:0e:7c:bc:ab:25:c9:c1:c0:bc:
                    0d:00:b5:6c:b7:05:26:2a:ba:5b:30:0c:2b:c1:81:
                    ba:d1:ed:7d:20:21:63:ed:8e:91:9d:0e:16:8f:e0:
                    d6:33:a9:36:bd:b8:9f:bc:35:28:87:89:bf:3c:a6:
                    04:12:5a:cc:6b:b7:53:27:02:30:48:24:06:39:fd:
                    ce:09:a4:9e:fc:96:d9:75:18:87:49:ca:df:d1:50:
                    66:5e:ff:87:51:74:00:17:e4:ab:33:fc:02:24:b7:
                    81:71:a0:b9:50:a8:e5:65:95:66:47:84:93:8f:de:
                    d1:24:cf:76:9b:2b:96:86:d9:c5:2c:d9:af:dd:17:
                    0b:02:9c:51:b7:11:4a:20:20:c8:6b:07:9b:87:0a:
                    35:f5:77:d4:3a:0a:1c:4e:88:2a:e1:40:dc:38:99:
                    e1:22:5d:d4:d6:0a:38:c0:73:08:d7:a8:91:05:93:
                    83:b3:84:61:c3:a2:bd:c7:a5:53:9e:70:7d:34:da:
                    d8:2f:71:38:a0:93:b0:c4:cf:d8:3d:50:a4:94:ad:
                    4b:b1:05:00:48:cd:b0:cb:dc:f3:1f:2c:d8:73:2c:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:B0:B2:19:B4:34:83:EE:75:4B:3B:96:B3:7C:8A:6D:89:CB:18
            X509v3 Authority Key Identifier:
                keyid:A2:0A:0E:B5:5E:9B:EA:B8:C3:64:EC:92:FE:56:D1:1E:5A:67:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6c012e30dc831b6875f6cfcb5639d3f391769b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/1df764a15c7305a5c8e3e30c6d881e82d584c0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43bd5dce-ce1b-4858-96d9-5d34bba00a40/d6c012e30dc831b6875f6cfcb5639d3f391769b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a360::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:b1:c3:95:fc:12:2d:58:69:c4:86:a1:eb:e9:9c:33:18:
         0e:31:93:c4:00:21:f3:d7:c4:9a:fa:01:57:be:91:ba:49:c2:
         74:f9:a1:55:6a:fd:e6:e9:a1:1f:97:55:66:be:de:8a:67:c2:
         0d:39:ee:c9:35:7e:53:cb:13:cc:7f:c5:64:45:97:51:96:24:
         bd:c6:ca:a1:a5:80:7f:6a:ef:64:5b:fe:0c:1a:ec:7a:36:c4:
         7f:b9:aa:39:f0:9b:ff:2e:d6:a3:2f:81:0a:39:0e:b4:dc:f4:
         ff:f5:d8:d4:af:6b:ae:de:ba:ca:1b:4f:00:22:d0:f4:88:63:
         37:d6:6c:89:63:02:5c:e7:c3:bc:77:a6:6c:48:17:6a:52:d7:
         91:f1:ee:c1:af:f0:fc:81:23:66:44:c0:d5:06:1e:c9:97:b3:
         3c:a3:74:42:d5:2e:5d:3e:ab:f6:06:df:7a:22:57:2b:c9:26:
         59:cf:66:6b:d7:87:ea:4a:b0:ef:9f:ed:45:87:bd:f7:4f:e4:
         55:e7:80:e1:a2:72:b3:49:73:43:d0:d8:44:34:54:3b:1e:e0:
         c2:17:6a:c0:e6:95:d8:f1:6c:1d:8b:82:42:c2:47:81:70:c0:
         2d:07:35:a8:66:34:4c:ea:4d:2a:fb:8a:5e:45:55:88:d7:eb:
         ab:b2:a1:b9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIEt6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
YzAxMmUzMGRjODMxYjY4NzVmNmNmY2I1NjM5ZDNmMzkxNzY5YjcwHhcNMjMwNzI3
MTc1MjM5WhcNMjUwNzI4MTc1MjM5WjAzMTEwLwYDVQQDEygxZGY3NjRhMTVjNzMw
NWE1YzhlM2UzMGM2ZDg4MWU4MmQ1ODRjMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlCD883DeNL5tWL/MEcaDU2/fTkW6N+9F5ajVyAemqtrN3M4O
fLyrJcnBwLwNALVstwUmKrpbMAwrwYG60e19ICFj7Y6RnQ4Wj+DWM6k2vbifvDUo
h4m/PKYEElrMa7dTJwIwSCQGOf3OCaSe/JbZdRiHScrf0VBmXv+HUXQAF+SrM/wC
JLeBcaC5UKjlZZVmR4STj97RJM92myuWhtnFLNmv3RcLApxRtxFKICDIawebhwo1
9XfUOgocTogq4UDcOJnhIl3U1go4wHMI16iRBZODs4Rhw6K9x6VTnnB9NNrYL3E4
oJOwxM/YPVCklK1LsQUASM2wy9zzHyzYcywm/wIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMvYsLIZtDSD7nVLO5azfIpticsYMB8GA1UdIwQYMBaAFKIKDrVem+q4w2Ts
kv5W0R5aZxQkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDZjMDEy
ZTMwZGM4MzFiNjg3NWY2Y2ZjYjU2MzlkM2YzOTE3NjliNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDNiZDVkY2UtY2UxYi00ODU4LTk2ZDktNWQzNGJi
YTAwYTQwLzFkZjc2NGExNWM3MzA1YTVjOGUzZTMwYzZkODgxZTgyZDU4NGMwYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80M2JkNWRjZS1jZTFiLTQ4NTgtOTZkOS01ZDM0
YmJhMDBhNDAvZDZjMDEyZTMwZGM4MzFiNjg3NWY2Y2ZjYjU2MzlkM2YzOTE3Njli
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDo2AwDQYJKoZIhvcNAQELBQADggEBAAzKscOV/BItWGnE
hqHr6ZwzGA4xk8QAIfPXxJr6AVe+kbpJwnT5oVVq/ebpoR+XVWa+3opnwg057sk1
flPLE8x/xWRFl1GWJL3GyqGlgH9q72Rb/gwa7Ho2xH+5qjnwm/8u1qMvgQo5DrTc
9P/12NSva67eusobTwAi0PSIYzfWbIljAlznw7x3pmxIF2pS15Hx7sGv8PyBI2ZE
wNUGHsmXszyjdELVLl0+q/YG33oiVyvJJlnPZmvXh+pKsO+f7UWHvfdP5FXngOGi
crNJc0PQ2EQ0VDse4MIXasDmldjxbB2LgkLCR4FwwC0HNahmNEzqTSr7il5FVYjX
66uyobk=
-----END CERTIFICATE-----