Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/86abb6b9302dfad5eca9a6cba301c84e0d0b87df.roa
File:                     86abb6b9302dfad5eca9a6cba301c84e0d0b87df.roa (raw, json)
Hash identifier:          VjydSKWs/GSdjG5HPDJTIBJ6utscL/morxI8xYlXpGw=
Subject key identifier:   90:2F:77:7C:8E:45:AE:6C:CC:C9:C2:C3:1B:0E:28:1F:3A:5F:C1:59
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       11464D
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/86abb6b9302dfad5eca9a6cba301c84e0d0b87df.roa
Signing time:             Wed 07 Feb 2024 05:28:00 +0000
ROA not before:           Wed 07 Feb 2024 05:28:00 +0000
ROA not after:            Sat 07 Feb 2026 05:28:00 +0000
asID:                     270081
IP address blocks:        2803:8be0::/33 maxlen: 33
                          2803:8be0::/34 maxlen: 34
                          2803:8be0:4000::/34 maxlen: 34
                          2803:8be0:8000::/34 maxlen: 34
                          2803:8be0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132109 (0x11464d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Feb  7 05:28:00 2024 GMT
            Not After : Feb  7 05:28:00 2026 GMT
        Subject: CN=86abb6b9302dfad5eca9a6cba301c84e0d0b87df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bd:57:bf:9d:4c:c2:e2:7b:d0:08:b0:57:84:
                    1f:e4:bc:4b:1e:47:3f:21:62:27:a3:36:4c:f8:f9:
                    04:19:79:6e:9a:55:09:46:a9:9e:e7:4a:42:e5:d5:
                    1d:8f:91:62:10:7c:c4:c0:35:dd:8b:cd:16:68:52:
                    87:8a:d3:42:e0:78:7d:99:87:08:57:0d:dd:03:3c:
                    bf:66:e5:1a:8d:7a:6b:93:3c:ee:d5:41:6e:27:f5:
                    c3:cf:72:b6:69:27:47:bc:33:87:c3:74:f5:ed:e1:
                    89:4a:0d:1a:87:b6:1f:f2:30:23:36:80:24:e3:6d:
                    91:14:dd:3e:36:d0:6b:cb:02:ab:ee:09:65:af:ac:
                    e9:32:20:dd:3e:41:02:fc:6a:08:04:2e:66:5d:2a:
                    e8:93:01:ea:9f:42:08:87:34:78:60:59:e6:94:d8:
                    4f:22:31:9a:e6:97:5c:ec:1b:36:ed:4e:b5:f9:f5:
                    57:8e:dd:18:1d:ef:2c:ac:05:6a:e9:8c:9e:e1:08:
                    90:c0:14:bc:9a:8c:47:bb:40:1b:f7:11:4a:0c:4f:
                    8a:68:d9:1a:1c:e2:43:83:84:78:5b:4e:6a:39:95:
                    6a:9b:42:93:98:2d:59:58:43:a7:72:8e:ff:d5:e9:
                    97:9e:c9:99:91:d7:4e:98:92:4d:9a:74:bd:23:74:
                    61:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:77:7C:8E:45:AE:6C:CC:C9:C2:C3:1B:0E:28:1F:3A:5F:C1:59
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/86abb6b9302dfad5eca9a6cba301c84e0d0b87df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:45:12:60:41:be:21:98:db:d1:06:c4:eb:93:a2:9e:10:14:
         ac:3a:19:01:20:da:37:f9:21:e6:79:73:d4:9d:06:6a:75:c5:
         c6:7e:39:73:9e:b1:1a:cb:a1:20:85:96:04:da:0f:b4:b8:56:
         3a:1f:e5:79:94:ce:f4:db:b1:bd:81:13:a6:0d:c7:c1:0d:19:
         79:29:d2:f4:df:fa:77:b4:b6:bd:69:00:e4:62:69:55:2c:b1:
         8b:21:3c:2b:80:77:b9:7d:53:45:ce:58:b8:60:40:73:df:3c:
         7c:86:70:2b:ed:e2:41:68:82:d1:69:01:36:a8:98:94:19:d8:
         27:98:84:d6:f2:a9:2f:fc:69:09:e6:d2:22:59:40:a6:92:3a:
         d1:51:f6:db:a5:22:59:35:87:33:87:71:96:12:4a:fc:a5:76:
         b8:f4:d3:09:b1:70:e9:8f:44:18:a5:f7:6f:dc:cc:8d:92:3c:
         03:89:31:8e:31:0d:b3:2a:67:50:1a:63:cc:22:3e:7a:2b:b6:
         5c:33:20:5f:5b:41:58:6a:41:45:cf:92:3a:4b:d1:a5:3c:bd:
         18:7e:18:86:88:a0:06:97:36:52:99:a2:ac:71:e6:24:f3:5f:
         da:dc:36:af:3e:50:30:83:0f:80:61:7c:6d:25:4a:4f:33:6c:
         a3:4e:7a:07
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDEUZNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
MGQzZWFmYmRhZTJlNTI2MzZlMTFhYTIwYjlkNzQ1ZmRlZjQ0ZTcwHhcNMjQwMjA3
MDUyODAwWhcNMjYwMjA3MDUyODAwWjAzMTEwLwYDVQQDEyg4NmFiYjZiOTMwMmRm
YWQ1ZWNhOWE2Y2JhMzAxYzg0ZTBkMGI4N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA171Xv51MwuJ70AiwV4Qf5LxLHkc/IWInozZM+PkEGXlumlUJ
Rqme50pC5dUdj5FiEHzEwDXdi80WaFKHitNC4Hh9mYcIVw3dAzy/ZuUajXprkzzu
1UFuJ/XDz3K2aSdHvDOHw3T17eGJSg0ah7Yf8jAjNoAk422RFN0+NtBrywKr7gll
r6zpMiDdPkEC/GoIBC5mXSrokwHqn0IIhzR4YFnmlNhPIjGa5pdc7Bs27U61+fVX
jt0YHe8srAVq6Yye4QiQwBS8moxHu0Ab9xFKDE+KaNkaHOJDg4R4W05qOZVqm0KT
mC1ZWEOnco7/1emXnsmZkddOmJJNmnS9I3RhNwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJAvd3yORa5szMnCwxsOKB86X8FZMB8GA1UdIwQYMBaAFO+taD1K6quKx+Jw
XVD9cq0bzfKIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2EwZDNl
YWZiZGFlMmU1MjYzNmUxMWFhMjBiOWQ3NDVmZGVmNDRlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDQzYWM3NmMtOGVhYy00ZTljLTg5MjEtOWFhYjIz
YjgxZDMwLzg2YWJiNmI5MzAyZGZhZDVlY2E5YTZjYmEzMDFjODRlMGQwYjg3ZGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NDNhYzc2Yy04ZWFjLTRlOWMtODkyMS05YWFi
MjNiODFkMzAvN2EwZDNlYWZiZGFlMmU1MjYzNmUxMWFhMjBiOWQ3NDVmZGVmNDRl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDi+AwDQYJKoZIhvcNAQELBQADggEBAIlFEmBBviGY29EG
xOuTop4QFKw6GQEg2jf5IeZ5c9SdBmp1xcZ+OXOesRrLoSCFlgTaD7S4Vjof5XmU
zvTbsb2BE6YNx8ENGXkp0vTf+ne0tr1pAORiaVUssYshPCuAd7l9U0XOWLhgQHPf
PHyGcCvt4kFogtFpATaomJQZ2CeYhNbyqS/8aQnm0iJZQKaSOtFR9tulIlk1hzOH
cZYSSvyldrj00wmxcOmPRBil92/czI2SPAOJMY4xDbMqZ1AaY8wiPnortlwzIF9b
QVhqQUXPkjpL0aU8vRh+GIaIoAaXNlKZoqxx5iTzX9rcNq8+UDCDD4BhfG0lSk8z
bKNOegc=
-----END CERTIFICATE-----