Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/cf9f9deaac4062b13393764282718b66108e778d.roa
File:                     cf9f9deaac4062b13393764282718b66108e778d.roa (raw, json)
Hash identifier:          /s7b5211MfY4xU51uT2MTUI8NX1FJfOeu9PI61Ycsh4=
Subject key identifier:   7B:98:41:CE:39:77:3F:55:90:9C:12:DC:95:8E:3D:34:04:C4:69:20
Certificate issuer:       /CN=77c6af10535d7591497a3cfee30c532d59f06798
Certificate serial:       1B786D
Authority key identifier: 46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/cf9f9deaac4062b13393764282718b66108e778d.roa
Signing time:             Wed 18 Oct 2023 16:59:34 +0000
ROA not before:           Tue 17 Oct 2023 16:59:34 +0000
ROA not after:            Sat 18 Oct 2025 16:59:34 +0000
asID:                     270052
IP address blocks:        2803:ede0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800301 (0x1b786d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6af10535d7591497a3cfee30c532d59f06798
        Validity
            Not Before: Oct 17 16:59:34 2023 GMT
            Not After : Oct 18 16:59:34 2025 GMT
        Subject: CN=cf9f9deaac4062b13393764282718b66108e778d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:9a:ed:79:3a:18:05:fc:9e:07:37:d8:f0:
                    12:64:24:f3:26:e7:41:3a:c3:ad:55:25:6c:fc:50:
                    a6:7a:fa:21:96:9a:6f:ae:cf:0e:e2:05:e4:8c:a1:
                    5f:10:34:86:c9:3d:ea:3d:4d:4b:81:be:66:5d:02:
                    db:be:7c:9b:b7:87:97:d4:2a:07:0a:4b:1d:89:0f:
                    11:09:7b:c5:28:ad:e7:02:1e:b7:f1:1c:0c:8d:09:
                    ef:5b:cf:20:4e:a1:cf:91:80:a2:2c:a0:41:1c:d9:
                    1d:58:89:f0:eb:67:dc:3f:a4:8a:87:5c:56:5e:9f:
                    4c:10:a5:06:be:7a:8d:12:c2:a8:ca:41:f7:58:80:
                    6e:3e:6d:26:7d:37:c3:7f:c0:52:1f:0c:7d:d3:15:
                    eb:98:e5:30:fb:6f:80:93:a1:f9:50:0d:f1:df:44:
                    26:74:71:87:75:95:b0:8a:e9:16:4f:db:8e:6c:72:
                    16:6b:9b:c5:f8:0b:ba:6a:cb:df:76:73:b2:d9:5d:
                    18:ba:1e:2a:0b:d1:63:14:1b:6d:b2:db:d2:23:14:
                    da:34:8e:67:80:8e:6d:41:d7:06:92:dd:cc:fb:a4:
                    15:77:0f:11:31:a7:c6:d3:27:23:6d:f3:dc:cd:6a:
                    2f:de:64:91:19:87:4f:22:07:d7:5b:4b:7a:86:36:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:41:CE:39:77:3F:55:90:9C:12:DC:95:8E:3D:34:04:C4:69:20
            X509v3 Authority Key Identifier:
                keyid:46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/cf9f9deaac4062b13393764282718b66108e778d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/77c6af10535d7591497a3cfee30c532d59f06798.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:f7:57:49:a9:42:d7:f5:ec:43:e2:8d:4d:f2:69:82:86:
         ee:19:25:cd:87:ed:6b:38:39:35:49:b3:05:51:44:68:bb:d8:
         ad:ec:d8:33:2a:4d:19:c7:cb:ba:64:04:7e:31:76:66:4b:c3:
         fa:eb:5c:45:f1:1f:4a:a2:ca:81:b4:d1:ae:f0:48:6a:44:1c:
         80:c9:75:33:5d:2e:3b:df:e4:01:6b:95:d9:34:09:36:3b:12:
         20:37:36:af:b9:cb:dc:f8:2e:8e:8c:eb:74:73:4b:bb:27:1e:
         9e:58:00:69:38:60:eb:99:9f:9c:35:08:ee:9e:28:af:ea:ab:
         b5:96:9a:46:2b:4c:ba:81:83:19:62:56:b2:40:0f:57:0b:44:
         8a:a5:a1:e8:63:e6:97:6b:9f:26:d1:51:74:af:64:49:6a:3b:
         85:94:28:bb:a1:6d:67:03:00:ba:9f:28:11:93:ee:d7:e6:59:
         aa:f0:28:63:b8:72:48:1f:9c:7d:6b:a0:af:92:12:19:8b:1b:
         5d:c6:b7:f0:cd:bb:01:81:39:3d:df:f4:b4:0f:6d:cf:3b:49:
         eb:9b:4b:73:a6:dd:26:f8:64:33:49:3b:1c:8e:e8:f4:b7:5f:
         36:85:d9:48:01:0a:db:0b:99:67:85:28:11:70:e6:60:ec:5f:
         be:b5:1a:dd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDG3htMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc3
YzZhZjEwNTM1ZDc1OTE0OTdhM2NmZWUzMGM1MzJkNTlmMDY3OTgwHhcNMjMxMDE3
MTY1OTM0WhcNMjUxMDE4MTY1OTM0WjAzMTEwLwYDVQQDEyhjZjlmOWRlYWFjNDA2
MmIxMzM5Mzc2NDI4MjcxOGI2NjEwOGU3NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlSya7Xk6GAX8ngc32PASZCTzJudBOsOtVSVs/FCmevohlppv
rs8O4gXkjKFfEDSGyT3qPU1Lgb5mXQLbvnybt4eX1CoHCksdiQ8RCXvFKK3nAh63
8RwMjQnvW88gTqHPkYCiLKBBHNkdWInw62fcP6SKh1xWXp9MEKUGvnqNEsKoykH3
WIBuPm0mfTfDf8BSHwx90xXrmOUw+2+Ak6H5UA3x30QmdHGHdZWwiukWT9uObHIW
a5vF+Au6asvfdnOy2V0Yuh4qC9FjFBttstvSIxTaNI5ngI5tQdcGkt3M+6QVdw8R
MafG0ycjbfPczWov3mSRGYdPIgfXW0t6hjastQIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFHuYQc45dz9VkJwS3JWOPTQExGkgMB8GA1UdIwQYMBaAFEbjTJy0hJ6DkSRO
logxEtX4LNCIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzdjNmFm
MTA1MzVkNzU5MTQ5N2EzY2ZlZTMwYzUzMmQ1OWYwNjc5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFiYWUzZjctZWRmMi00NTk5LTk1ODktZjMzOWNj
MzRjMmZjL2NmOWY5ZGVhYWM0MDYyYjEzMzkzNzY0MjgyNzE4YjY2MTA4ZTc3OGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWJhZTNmNy1lZGYyLTQ1OTktOTU4OS1mMzM5
Y2MzNGMyZmMvNzdjNmFmMTA1MzVkNzU5MTQ5N2EzY2ZlZTMwYzUzMmQ1OWYwNjc5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGBygD7eCAMA0GCSqGSIb3DQEBCwUAA4IBAQBXyfdXSalC1/Xs
Q+KNTfJpgobuGSXNh+1rODk1SbMFUURou9it7NgzKk0Zx8u6ZAR+MXZmS8P661xF
8R9KosqBtNGu8EhqRByAyXUzXS473+QBa5XZNAk2OxIgNzavucvc+C6OjOt0c0u7
Jx6eWABpOGDrmZ+cNQjuniiv6qu1lppGK0y6gYMZYlayQA9XC0SKpaHoY+aXa58m
0VF0r2RJajuFlCi7oW1nAwC6nygRk+7X5lmq8ChjuHJIH5x9a6CvkhIZixtdxrfw
zbsBgTk93/S0D23PO0nrm0tzpt0m+GQzSTscjuj0t182hdlIAQrbC5lnhSgRcOZg
7F++tRrd
-----END CERTIFICATE-----