Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/d0e69f26f7cb100df5fcecdf0a8fec0a8b534b18.roa
File:                     d0e69f26f7cb100df5fcecdf0a8fec0a8b534b18.roa (raw, json)
Hash identifier:          39rhRUeZWKBTFwdKmMGRsr9Llny0DKZDgDg0kFFq6Xw=
Subject key identifier:   A0:84:14:CD:86:84:68:CE:76:89:83:38:01:F5:AE:F7:61:B8:60:45
Certificate issuer:       /CN=77c6af10535d7591497a3cfee30c532d59f06798
Certificate serial:       1B6EE7
Authority key identifier: 46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/d0e69f26f7cb100df5fcecdf0a8fec0a8b534b18.roa
Signing time:             Wed 18 Oct 2023 16:58:33 +0000
ROA not before:           Tue 17 Oct 2023 16:58:33 +0000
ROA not after:            Sat 18 Oct 2025 16:58:33 +0000
asID:                     270052
IP address blocks:        2803:ede0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797863 (0x1b6ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6af10535d7591497a3cfee30c532d59f06798
        Validity
            Not Before: Oct 17 16:58:33 2023 GMT
            Not After : Oct 18 16:58:33 2025 GMT
        Subject: CN=d0e69f26f7cb100df5fcecdf0a8fec0a8b534b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:d0:b7:1c:69:00:6e:8a:b4:8e:92:3f:8f:
                    9c:f1:9f:66:d9:09:fa:5b:f9:4a:7f:6d:6d:3f:f3:
                    dd:4f:9b:8c:5c:c8:14:64:bc:85:24:b0:b5:5a:fe:
                    45:86:ae:ed:97:78:21:78:36:b3:2d:62:b8:d2:c7:
                    fa:22:ec:d3:8a:99:e0:4c:ce:b6:18:25:c3:3d:16:
                    c0:31:66:26:45:01:49:01:e6:11:8b:b6:77:30:c7:
                    8d:31:20:39:d3:8d:1f:80:c8:0d:d3:42:0c:ce:ad:
                    1c:56:8b:be:5b:98:24:6f:d3:25:f5:4e:24:d0:d5:
                    4a:4b:88:b5:19:44:c0:81:d1:5e:74:02:90:26:86:
                    f5:fb:47:60:fe:2d:25:08:1a:1b:7f:54:22:73:5c:
                    c9:d0:a7:0f:cc:46:7d:a6:fc:fb:5b:62:a3:ff:93:
                    5d:80:42:8e:5c:1c:b4:c7:20:40:68:54:5c:b4:5b:
                    b9:51:cc:96:34:9a:2f:75:d7:71:0f:89:46:c2:68:
                    9d:b2:4b:0f:82:39:34:91:b2:54:98:82:85:13:86:
                    78:a0:0a:86:8b:be:15:00:0e:db:6e:c8:d1:c2:64:
                    2e:24:b4:80:8d:0b:17:03:ad:70:ac:a2:45:7a:f5:
                    92:98:a2:6c:91:1e:14:54:d7:b0:78:ba:3c:3a:ac:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:14:CD:86:84:68:CE:76:89:83:38:01:F5:AE:F7:61:B8:60:45
            X509v3 Authority Key Identifier:
                keyid:46:E3:4C:9C:B4:84:9E:83:91:24:4E:96:88:31:12:D5:F8:2C:D0:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77c6af10535d7591497a3cfee30c532d59f06798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/d0e69f26f7cb100df5fcecdf0a8fec0a8b534b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4abae3f7-edf2-4599-9589-f339cc34c2fc/77c6af10535d7591497a3cfee30c532d59f06798.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ede0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:29:19:05:8e:e0:4a:a4:7a:dd:31:b6:b4:1c:67:3f:51:
         8d:2c:28:00:fb:9f:97:b2:c5:4f:63:a7:92:fb:9b:f0:5e:c1:
         2f:13:60:c8:c0:69:8b:3e:ea:90:0d:73:b3:1e:bd:08:7a:c2:
         2a:4e:c8:90:ae:4d:1b:02:f9:52:61:d7:74:65:74:17:7c:cb:
         dc:69:92:ee:b8:be:44:a3:fd:b9:19:ab:99:b7:ca:29:89:66:
         17:65:53:c6:5a:37:7a:a9:3c:73:96:19:0c:fe:1a:87:eb:84:
         8c:be:6c:77:6d:04:d8:50:a4:05:05:1a:37:45:15:a9:6c:1e:
         b6:20:74:29:8e:88:bf:58:b8:8e:ca:3f:8f:6e:91:1e:5e:7e:
         b9:52:cb:6e:47:90:3b:73:db:a8:f3:0b:a0:ae:8f:d7:f8:80:
         ac:cd:99:ea:b9:00:53:f1:9a:1b:89:50:8d:f3:fe:9a:a8:12:
         4e:79:92:21:2f:21:fb:5b:89:8a:97:e9:c7:56:7d:2f:51:8f:
         68:76:c2:03:a8:69:79:50:26:2d:e3:c0:11:59:4d:23:f4:ac:
         52:6b:59:a6:40:da:c0:84:01:a3:ba:c2:9d:a9:11:bc:c7:6a:
         51:e4:57:23:d6:f6:28:d0:cb:69:7e:36:39:55:59:52:a0:4e:
         29:c3:b5:22
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDG27nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc3
YzZhZjEwNTM1ZDc1OTE0OTdhM2NmZWUzMGM1MzJkNTlmMDY3OTgwHhcNMjMxMDE3
MTY1ODMzWhcNMjUxMDE4MTY1ODMzWjAzMTEwLwYDVQQDEyhkMGU2OWYyNmY3Y2Ix
MDBkZjVmY2VjZGYwYThmZWMwYThiNTM0YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnXHQtxxpAG6KtI6SP4+c8Z9m2Qn6W/lKf21tP/PdT5uMXMgU
ZLyFJLC1Wv5Fhq7tl3gheDazLWK40sf6IuzTipngTM62GCXDPRbAMWYmRQFJAeYR
i7Z3MMeNMSA5040fgMgN00IMzq0cVou+W5gkb9Ml9U4k0NVKS4i1GUTAgdFedAKQ
Job1+0dg/i0lCBobf1Qic1zJ0KcPzEZ9pvz7W2Kj/5NdgEKOXBy0xyBAaFRctFu5
UcyWNJovdddxD4lGwmidsksPgjk0kbJUmIKFE4Z4oAqGi74VAA7bbsjRwmQuJLSA
jQsXA61wrKJFevWSmKJskR4UVNeweLo8Oqz6oQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFKCEFM2GhGjOdomDOAH1rvdhuGBFMB8GA1UdIwQYMBaAFEbjTJy0hJ6DkSRO
logxEtX4LNCIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzdjNmFm
MTA1MzVkNzU5MTQ5N2EzY2ZlZTMwYzUzMmQ1OWYwNjc5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFiYWUzZjctZWRmMi00NTk5LTk1ODktZjMzOWNj
MzRjMmZjL2QwZTY5ZjI2ZjdjYjEwMGRmNWZjZWNkZjBhOGZlYzBhOGI1MzRiMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWJhZTNmNy1lZGYyLTQ1OTktOTU4OS1mMzM5
Y2MzNGMyZmMvNzdjNmFmMTA1MzVkNzU5MTQ5N2EzY2ZlZTMwYzUzMmQ1OWYwNjc5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD7eAwDQYJKoZIhvcNAQELBQADggEBAGZtKRkFjuBKpHrd
Mba0HGc/UY0sKAD7n5eyxU9jp5L7m/BewS8TYMjAaYs+6pANc7MevQh6wipOyJCu
TRsC+VJh13RldBd8y9xpku64vkSj/bkZq5m3yimJZhdlU8ZaN3qpPHOWGQz+Gofr
hIy+bHdtBNhQpAUFGjdFFalsHrYgdCmOiL9YuI7KP49ukR5efrlSy25HkDtz26jz
C6Cuj9f4gKzNmeq5AFPxmhuJUI3z/pqoEk55kiEvIftbiYqX6cdWfS9Rj2h2wgOo
aXlQJi3jwBFZTSP0rFJrWaZA2sCEAaO6wp2pEbzHalHkVyPW9ijQy2l+NjlVWVKg
TinDtSI=
-----END CERTIFICATE-----