Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/e653449d84d566fe96d2099e555b1dfdb5030cd2.roa
File:                     e653449d84d566fe96d2099e555b1dfdb5030cd2.roa (raw, json)
Hash identifier:          v8G+YWYI+uPm86thKurBfTnTvBC5iF9czxJ358/2jkw=
Subject key identifier:   78:B8:66:AB:48:7C:50:C4:38:1E:0D:F4:00:18:70:23:6B:BD:3F:69
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       168D89
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/e653449d84d566fe96d2099e555b1dfdb5030cd2.roa
Signing time:             Wed 08 Nov 2023 03:02:28 +0000
ROA not before:           Wed 08 Nov 2023 03:02:28 +0000
ROA not after:            Sat 08 Nov 2025 03:02:28 +0000
asID:                     271773
IP address blocks:        2803:a80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478025 (0x168d89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Nov  8 03:02:28 2023 GMT
            Not After : Nov  8 03:02:28 2025 GMT
        Subject: CN=e653449d84d566fe96d2099e555b1dfdb5030cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:7f:3e:09:6f:5f:29:72:10:5e:86:b7:b3:
                    7f:6e:d1:ed:89:3a:6f:dc:29:5a:6a:c8:cb:44:2c:
                    43:cf:21:f2:67:b7:ee:65:62:3e:6c:b8:9c:7b:05:
                    5e:ba:bc:91:63:96:48:b3:af:83:38:a5:f3:bd:13:
                    f9:d8:02:0e:24:e4:0e:9c:9b:08:f1:59:49:47:94:
                    e8:ac:a6:35:fe:2b:f4:03:f7:84:80:00:e2:40:74:
                    4f:33:32:e9:e5:46:61:9d:20:03:b0:3a:79:e9:4b:
                    df:1a:ef:33:c4:bc:af:7f:af:b3:e7:0c:34:26:7a:
                    29:38:8a:60:79:8f:7d:c0:fb:a6:40:bd:0d:dd:dd:
                    2e:bf:23:43:4d:c9:e1:aa:9d:a2:e5:b9:d4:b3:fa:
                    41:7b:0b:a3:c4:9c:73:40:43:93:29:da:90:47:9b:
                    28:03:4c:44:27:57:85:8c:fe:60:55:13:e3:1a:e7:
                    ce:90:d3:da:c7:a3:ff:bf:da:90:58:39:bb:16:2d:
                    83:b4:0c:d5:dc:1b:70:f2:35:c9:bd:12:0d:ed:b7:
                    ae:f5:76:ae:a9:2b:36:f3:a0:76:89:81:8a:8e:1f:
                    b2:2d:63:e0:ba:be:57:02:33:16:3e:bf:f8:9c:a1:
                    40:2f:df:7d:94:1c:ca:e6:fd:de:77:2d:cf:53:2b:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:66:AB:48:7C:50:C4:38:1E:0D:F4:00:18:70:23:6B:BD:3F:69
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/e653449d84d566fe96d2099e555b1dfdb5030cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:52:bd:6a:15:75:d1:9b:75:28:93:7c:68:4a:0a:b3:ab:8d:
         92:34:e3:9a:39:6e:4b:00:fa:8f:8a:65:f7:ef:2c:35:d9:21:
         23:7f:63:f8:64:fc:0a:e2:e6:94:4d:de:94:2e:d0:5d:0e:8f:
         8c:bc:51:8b:c0:54:2d:1f:b9:b5:18:1c:3a:80:31:71:d2:ff:
         45:60:cb:d3:e9:81:1b:40:d1:80:0c:af:91:9c:a9:60:1a:96:
         cb:52:34:43:77:fb:0e:04:44:8f:60:56:a5:f3:25:f6:cf:d1:
         9e:4f:13:7a:4e:68:d4:2f:c1:11:f5:04:0b:9f:0d:6a:01:16:
         8b:41:9a:ae:76:ce:95:62:6a:1c:70:fc:0b:87:14:04:04:2b:
         e1:bc:35:67:89:7b:06:e0:38:35:e1:e4:a9:9a:95:53:69:e8:
         a1:c8:a8:f4:41:d8:32:e1:b2:d2:dd:17:ff:c8:55:1a:6a:61:
         5a:8d:4b:d8:2b:bd:f6:5c:15:e0:c3:24:26:52:e4:af:6a:a2:
         ff:7b:d7:ff:73:8c:23:a4:93:43:ce:30:e0:fb:f9:c3:1a:1d:
         bf:13:5e:24:35:ce:2b:8d:aa:b2:50:c1:50:c0:22:5c:7d:6c:
         05:9a:6b:0c:9b:a3:6e:c3:50:a2:d1:bd:63:7e:3b:00:55:66:
         10:eb:a3:6c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDFo2JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
ZTdkZDhjMTNlMWMyY2ExNTQwNWQ1MzYxMzQ2MDJhM2ZkZmQ0MjkwHhcNMjMxMTA4
MDMwMjI4WhcNMjUxMTA4MDMwMjI4WjAzMTEwLwYDVQQDEyhlNjUzNDQ5ZDg0ZDU2
NmZlOTZkMjA5OWU1NTViMWRmZGI1MDMwY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgsd/PglvXylyEF6Gt7N/btHtiTpv3ClaasjLRCxDzyHyZ7fu
ZWI+bLicewVeuryRY5ZIs6+DOKXzvRP52AIOJOQOnJsI8VlJR5TorKY1/iv0A/eE
gADiQHRPMzLp5UZhnSADsDp56UvfGu8zxLyvf6+z5ww0JnopOIpgeY99wPumQL0N
3d0uvyNDTcnhqp2i5bnUs/pBewujxJxzQEOTKdqQR5soA0xEJ1eFjP5gVRPjGufO
kNPax6P/v9qQWDm7Fi2DtAzV3Btw8jXJvRIN7beu9XauqSs286B2iYGKjh+yLWPg
ur5XAjMWPr/4nKFAL999lBzK5v3edy3PUytLrwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFHi4ZqtIfFDEOB4N9AAYcCNrvT9pMB8GA1UdIwQYMBaAFPSjirALvRRTl8bb
b9dBGUIXVOogMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjhlN2Rk
OGMxM2UxYzJjYTE1NDA1ZDUzNjEzNDYwMmEzZmRmZDQyOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRjODFhMmItMjYzYi00MGEwLTkzMmMtZWI0MGMz
ODVmZjBjL2U2NTM0NDlkODRkNTY2ZmU5NmQyMDk5ZTU1NWIxZGZkYjUwMzBjZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGM4MWEyYi0yNjNiLTQwYTAtOTMyYy1lYjQw
YzM4NWZmMGMvYjhlN2RkOGMxM2UxYzJjYTE1NDA1ZDUzNjEzNDYwMmEzZmRmZDQy
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDCoAwDQYJKoZIhvcNAQELBQADggEBADBSvWoVddGbdSiT
fGhKCrOrjZI045o5bksA+o+KZffvLDXZISN/Y/hk/Ari5pRN3pQu0F0Oj4y8UYvA
VC0fubUYHDqAMXHS/0Vgy9PpgRtA0YAMr5GcqWAalstSNEN3+w4ERI9gVqXzJfbP
0Z5PE3pOaNQvwRH1BAufDWoBFotBmq52zpViahxw/AuHFAQEK+G8NWeJewbgODXh
5KmalVNp6KHIqPRB2DLhstLdF//IVRpqYVqNS9grvfZcFeDDJCZS5K9qov971/9z
jCOkk0POMOD7+cMaHb8TXiQ1ziuNqrJQwVDAIlx9bAWaawybo27DUKLRvWN+OwBV
ZhDro2w=
-----END CERTIFICATE-----