Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/709fdeaa0e99e97fff0104ba47be80247ca00030.roa
File:                     709fdeaa0e99e97fff0104ba47be80247ca00030.roa (raw, json)
Hash identifier:          b8c11t6iBzsCZ3o5yX2jvWTZWirr39YTn/S8SgdYutA=
Subject key identifier:   DA:E9:CE:3B:0B:F5:94:50:D1:60:B5:E1:BB:A5:9B:C5:6F:A6:2B:6F
Certificate issuer:       /CN=f17650a807d8733d69a847baa5df03d2d89197f8
Certificate serial:       072FB3
Authority key identifier: 83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/709fdeaa0e99e97fff0104ba47be80247ca00030.roa
Signing time:             Thu 25 Jan 2024 06:09:31 +0000
ROA not before:           Thu 25 Jan 2024 06:09:31 +0000
ROA not after:            Sun 25 Jan 2026 06:09:31 +0000
asID:                     272974
IP address blocks:        2803:9590::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470963 (0x72fb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f17650a807d8733d69a847baa5df03d2d89197f8
        Validity
            Not Before: Jan 25 06:09:31 2024 GMT
            Not After : Jan 25 06:09:31 2026 GMT
        Subject: CN=709fdeaa0e99e97fff0104ba47be80247ca00030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:40:99:71:e2:a8:1f:f5:4a:16:3c:45:e4:
                    89:30:59:2a:ea:6a:2b:90:e5:b0:ed:ef:44:db:9b:
                    e1:e6:37:23:d1:fa:27:b4:53:48:53:28:a7:fd:08:
                    41:d7:8a:bf:eb:f2:29:27:09:4d:16:5d:7e:76:1d:
                    d5:c9:36:b6:96:a8:6d:a5:32:78:7d:9a:f8:68:fa:
                    87:f5:6e:4b:5e:ca:04:04:8f:57:62:f8:15:59:76:
                    60:b1:18:9d:0e:ee:f6:c3:e0:03:48:6c:4c:b4:47:
                    e1:43:41:b4:3b:87:03:11:5f:e6:b3:ac:ef:0c:fd:
                    96:a5:bb:ec:2c:1e:88:d8:79:74:99:84:75:f0:ce:
                    39:cb:94:ad:86:c8:20:35:fc:19:c2:a7:1a:0e:53:
                    a0:c2:45:25:7c:94:97:ff:c4:79:10:6f:41:42:9e:
                    e8:dd:b8:59:a3:d0:af:40:a9:15:28:ae:fa:c8:95:
                    54:45:c0:3f:be:50:25:67:65:8e:d2:6e:ba:76:35:
                    24:45:2b:c7:fe:ee:95:b7:26:c9:7a:5e:b1:f6:7c:
                    3f:95:84:32:9d:42:ad:6a:d8:dd:ad:61:8f:7b:58:
                    07:70:d2:1d:05:69:45:86:68:8e:b4:ad:72:b3:27:
                    66:fb:16:7a:8e:81:8b:c7:96:b4:4c:74:22:40:8a:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:CE:3B:0B:F5:94:50:D1:60:B5:E1:BB:A5:9B:C5:6F:A6:2B:6F
            X509v3 Authority Key Identifier:
                keyid:83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/709fdeaa0e99e97fff0104ba47be80247ca00030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:ff:f0:be:3a:81:91:04:5f:38:2f:6f:9d:ea:62:79:ec:
         0b:67:8c:e5:22:e4:cb:84:ca:93:94:da:4c:44:5a:30:4b:05:
         c8:2f:3a:67:46:24:d9:57:fa:7c:9c:79:e5:b3:83:29:c4:51:
         57:7d:66:ff:5f:bd:ef:22:7c:5c:ae:15:42:84:86:c0:90:ee:
         40:46:55:b3:f3:5b:62:00:8d:14:2a:19:54:0f:43:d9:af:f4:
         b4:9b:28:3a:bc:26:9b:dc:d4:5b:17:cc:db:ad:d9:f3:7e:3a:
         a6:3c:83:ce:bc:85:d2:4d:04:3a:2d:01:ff:08:97:d1:98:35:
         90:41:c7:ff:ce:0c:dd:cb:5d:93:2b:5a:3d:09:9b:c1:cd:95:
         9e:78:80:3e:34:2f:49:00:4c:b4:1c:23:ec:bc:0e:60:1d:69:
         c0:34:c2:a2:57:55:18:72:0a:62:ef:7e:3e:f0:b6:38:0f:ae:
         e3:25:c7:08:ba:dc:09:b0:e9:d9:d8:50:f9:e3:41:76:8e:5f:
         11:ab:27:f0:4b:91:61:d2:b5:6c:53:49:91:09:c7:8c:f3:e7:
         45:00:af:b9:c7:33:0f:77:1e:76:9e:2b:ad:69:a6:c9:72:5f:
         41:fc:e8:d2:5b:d0:79:b2:05:8f:6b:c5:30:fe:c9:ca:7f:74:
         95:30:37:24
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDBy+zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYx
NzY1MGE4MDdkODczM2Q2OWE4NDdiYWE1ZGYwM2QyZDg5MTk3ZjgwHhcNMjQwMTI1
MDYwOTMxWhcNMjYwMTI1MDYwOTMxWjAzMTEwLwYDVQQDEyg3MDlmZGVhYTBlOTll
OTdmZmYwMTA0YmE0N2JlODAyNDdjYTAwMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnq5AmXHiqB/1ShY8ReSJMFkq6morkOWw7e9E25vh5jcj0fon
tFNIUyin/QhB14q/6/IpJwlNFl1+dh3VyTa2lqhtpTJ4fZr4aPqH9W5LXsoEBI9X
YvgVWXZgsRidDu72w+ADSGxMtEfhQ0G0O4cDEV/ms6zvDP2WpbvsLB6I2Hl0mYR1
8M45y5SthsggNfwZwqcaDlOgwkUlfJSX/8R5EG9BQp7o3bhZo9CvQKkVKK76yJVU
RcA/vlAlZ2WO0m66djUkRSvH/u6VtybJel6x9nw/lYQynUKtatjdrWGPe1gHcNId
BWlFhmiOtK1ysydm+xZ6joGLx5a0THQiQIoJcQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNrpzjsL9ZRQ0WC14bulm8VvpitvMB8GA1UdIwQYMBaAFINlCOQyfvlSvLgN
qv3IaBfyttz3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjE3NjUw
YTgwN2Q4NzMzZDY5YTg0N2JhYTVkZjAzZDJkODkxOTdmOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTk5ZGJmOTYtODZhOC00MjYzLTkyNDQtMTlkZDNj
OGU0YTQwLzcwOWZkZWFhMGU5OWU5N2ZmZjAxMDRiYTQ3YmU4MDI0N2NhMDAwMzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OTlkYmY5Ni04NmE4LTQyNjMtOTI0NC0xOWRk
M2M4ZTRhNDAvZjE3NjUwYTgwN2Q4NzMzZDY5YTg0N2JhYTVkZjAzZDJkODkxOTdm
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDlZAwDQYJKoZIhvcNAQELBQADggEBAEc6//C+OoGRBF84
L2+d6mJ57AtnjOUi5MuEypOU2kxEWjBLBcgvOmdGJNlX+nyceeWzgynEUVd9Zv9f
ve8ifFyuFUKEhsCQ7kBGVbPzW2IAjRQqGVQPQ9mv9LSbKDq8Jpvc1FsXzNut2fN+
OqY8g868hdJNBDotAf8Il9GYNZBBx//ODN3LXZMrWj0Jm8HNlZ54gD40L0kATLQc
I+y8DmAdacA0wqJXVRhyCmLvfj7wtjgPruMlxwi63Amw6dnYUPnjQXaOXxGrJ/BL
kWHStWxTSZEJx4zz50UAr7nHMw93HnaeK61ppslyX0H86NJb0HmyBY9rxTD+ycp/
dJUwNyQ=
-----END CERTIFICATE-----