Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6e3d9af09edc3e4c9be6df82e351d211f60d6cc7.roa
File:                     6e3d9af09edc3e4c9be6df82e351d211f60d6cc7.roa (raw, json)
Hash identifier:          9DhIEqJRLVZNCXt8y9vhxRnzWcmqNC7KfvqGT9FuNIM=
Subject key identifier:   EC:90:00:0B:2D:52:08:88:2A:38:99:47:F0:72:66:77:4F:E4:84:2B
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       5634
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6e3d9af09edc3e4c9be6df82e351d211f60d6cc7.roa
Signing time:             Wed 09 Aug 2023 16:13:20 +0000
ROA not before:           Tue 08 Aug 2023 16:13:20 +0000
ROA not after:            Sat 09 Aug 2025 16:13:20 +0000
asID:                     52412
IP address blocks:        2803:d990::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22068 (0x5634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 16:13:20 2023 GMT
            Not After : Aug  9 16:13:20 2025 GMT
        Subject: CN=6e3d9af09edc3e4c9be6df82e351d211f60d6cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:78:ae:42:fe:b6:0d:c2:ee:47:b9:4e:e3:
                    be:77:ae:f0:46:96:5f:d7:9a:b4:e5:01:52:69:34:
                    a0:8e:60:2c:0d:7a:c9:56:44:ac:87:12:f0:c4:2d:
                    f5:70:9b:32:d6:13:20:c0:e0:09:67:e8:33:b5:d7:
                    c0:a0:e7:0f:47:17:8d:f7:86:6a:1a:ff:3a:81:aa:
                    dd:05:34:6c:79:2e:75:16:b6:03:cc:81:a8:17:78:
                    70:80:a9:b1:f3:f6:29:41:d0:80:68:3f:f8:51:58:
                    b5:6b:de:8e:20:49:46:93:32:41:b1:6b:64:f1:84:
                    ba:ff:d0:35:f6:82:f9:bc:45:3b:9d:8d:47:fd:b6:
                    e5:53:a2:01:46:c8:74:a1:24:08:a6:ed:7f:74:4e:
                    97:71:94:fa:d6:f6:cb:c6:bd:3e:c0:ba:ec:10:a5:
                    a1:de:ca:91:ea:69:44:b6:ea:63:f1:1a:ea:af:46:
                    83:21:8f:0a:09:a7:1e:6b:df:43:65:8f:1a:0d:a5:
                    40:db:f8:12:7f:1c:9d:d9:45:51:30:c3:98:ef:5b:
                    3c:23:19:46:6f:05:9f:fd:40:27:63:e3:fd:1e:b2:
                    23:0b:0f:77:f1:87:f8:f7:9c:2b:cf:27:d4:01:bb:
                    91:0c:ae:68:aa:0a:13:12:57:21:00:d0:b4:7b:94:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:90:00:0B:2D:52:08:88:2A:38:99:47:F0:72:66:77:4F:E4:84:2B
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/6e3d9af09edc3e4c9be6df82e351d211f60d6cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d990::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:c3:65:21:69:5d:39:31:39:c2:ed:5d:2c:ee:6e:48:ef:
         ed:08:c3:fa:d4:a0:2d:16:d6:95:28:89:98:c2:c7:f0:4b:49:
         15:0c:cc:e5:ec:40:60:66:67:14:6b:65:f4:89:51:4f:3c:7f:
         84:2f:13:4c:83:4f:87:77:2f:72:50:e8:bc:c0:b4:5a:99:71:
         35:9c:04:1b:70:8a:c9:b2:29:4a:14:ea:01:aa:c2:33:f6:c7:
         87:64:60:7f:53:6d:ed:8c:af:4f:6e:20:40:b4:be:8e:c0:a4:
         9f:30:5c:75:ed:87:6d:a6:62:6a:3f:a2:ad:67:ae:a7:d7:34:
         0f:05:92:f5:32:38:71:db:f6:23:8c:8e:7c:05:8c:27:c8:4d:
         a3:b6:90:bc:47:9e:75:cd:53:10:bf:25:68:0b:69:4f:83:60:
         3f:ed:f4:aa:db:09:7d:53:15:e4:50:0e:b0:8e:2f:11:e5:61:
         dc:20:c9:cc:77:98:3b:fe:1c:5e:cd:4c:cf:22:cc:6c:04:02:
         7a:ba:62:bf:2c:63:3d:52:f1:81:6d:db:91:67:46:2a:20:a0:
         14:49:48:fc:1b:c9:7f:b3:d3:77:b9:ae:93:c7:35:cd:5c:c0:
         ff:5b:fe:8e:9f:3c:6b:c0:9e:10:69:92:80:c4:1c:91:74:ec:
         4a:77:8a:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgICVjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzk0
NzVmMTdjZTBkM2RkMzIxZDhmYWNkZDFmNGI2OTU5ZGI0ZmM3ZTAeFw0yMzA4MDgx
NjEzMjBaFw0yNTA4MDkxNjEzMjBaMDMxMTAvBgNVBAMTKDZlM2Q5YWYwOWVkYzNl
NGM5YmU2ZGY4MmUzNTFkMjExZjYwZDZjYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwjniuQv62DcLuR7lO4753rvBGll/XmrTlAVJpNKCOYCwNeslW
RKyHEvDELfVwmzLWEyDA4Aln6DO118Cg5w9HF433hmoa/zqBqt0FNGx5LnUWtgPM
gagXeHCAqbHz9ilB0IBoP/hRWLVr3o4gSUaTMkGxa2TxhLr/0DX2gvm8RTudjUf9
tuVTogFGyHShJAim7X90TpdxlPrW9svGvT7AuuwQpaHeypHqaUS26mPxGuqvRoMh
jwoJpx5r30NljxoNpUDb+BJ/HJ3ZRVEww5jvWzwjGUZvBZ/9QCdj4/0esiMLD3fx
h/j3nCvPJ9QBu5EMrmiqChMSVyEA0LR7lIIlAgMBAAGjggJcMIICWDAdBgNVHQ4E
FgQU7JAACy1SCIgqOJlH8HJmd0/khCswHwYDVR0jBBgwFoAU928jxar6BSn8ltmj
D7X36O4EILkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zOTQ3NWYx
N2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80ZmFiOTM5NS04OWRmLTQ4ZjAtYmY2MC01MzdjYWRk
YWMxODUvNmUzZDlhZjA5ZWRjM2U0YzliZTZkZjgyZTM1MWQyMTFmNjBkNmNjNy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzRmYWI5Mzk1LTg5ZGYtNDhmMC1iZjYwLTUzN2Nh
ZGRhYzE4NS8zOTQ3NWYxN2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAPZkDANBgkqhkiG9w0BAQsFAAOCAQEAf53DZSFpXTkxOcLt
XSzubkjv7QjD+tSgLRbWlSiJmMLH8EtJFQzM5exAYGZnFGtl9IlRTzx/hC8TTINP
h3cvclDovMC0WplxNZwEG3CKybIpShTqAarCM/bHh2Rgf1Nt7YyvT24gQLS+jsCk
nzBcde2HbaZiaj+irWeup9c0DwWS9TI4cdv2I4yOfAWMJ8hNo7aQvEeedc1TEL8l
aAtpT4NgP+30qtsJfVMV5FAOsI4vEeVh3CDJzHeYO/4cXs1MzyLMbAQCerpivyxj
PVLxgW3bkWdGKiCgFElI/BvJf7PTd7muk8c1zVzA/1v+jp88a8CeEGmSgMQckXTs
SneKwA==
-----END CERTIFICATE-----